HJM Accounts Ltd
The Data Protection Act 2018 and the General Data Protection Regulations (GDPR) impose legal obligations in connection with the processing of personal data to safeguard against the unlawful processing and movement of personal data within the EU.
HJM Accounts Ltd is a data controller within the meaning of the GDPR and in order to carry out our work we process personal data. When you ask us to carry out work for you, you consent to our holding personal information that you provide to us.
Personal data is used for the following purposes:
· To enable us to provide professional services to you as our client.
· To fulfil our obligations under relevant laws, such as the Money Laundering Regulations 2017.
· To comply with professional obligations to which we are subject as a member of the Association of Accounting Technicians (AAT).
Information held may also include that provided by third parties in connection with the work we carry out for you, for example:
· HM Revenue & Customs
· Companies House
And with your consent:
· Financial advisers
· Other relevant organisations with whom you have contact
HJM Accounts Ltd will not pass on information without your consent. However, if we are required by law to do so, we may also share your personal data with:
· The police and law enforcement agencies
· Courts and tribunals
· The Information Commissioner’s Office (ICO)
In accordance with recognised good practice within the tax and accountancy sector, and our Terms and Conditions, HJM Accounts Ltd will retain all records relating to you for 6 years from the end of the tax year to which the records relate.
Data is held entirely within the UK.
At any time whilst HJM Accounts Ltd is in possession of your personal data, you have the following rights:
· Right of access to your information
· Right of rectification, if you need to correct data that we hold about you
· Right to be forgotten, if you wish data to be erased from our records
· Right to restriction of processing
· Right of portability, if you wish data to be transferred to another organisation
· Right to object, for example to direct marketing
· Right to object to automated processing
If any of these rights are refused, a reason will be provided which you have the legal right to challenge.
You may request the following information:
· Identity and contact details of the entity that has determined how and why to process your data
· The purpose and legal basis of processing
· Information about the legitimate interests of those processing the data
· The categories of personal data stored and processed
· The recipient(s) to whom any data is disclosed
· How long data will be stored
· Your rights to correct, erase, restrict or object to such processing
· Your right to withdraw consent at any time
· How to lodge a complaint with the Data Protection Regulator
· The source of personal data if not provided directly by you
· Information on automated decision-making, if any
Identification required to access personal data
The following identification will be accepted when requesting information on your personal data:
· Driving licence
· Birth certificate
· National Insurance number
· Tax reference number
· VAT number
Further information may be requested if the quality of ID appears to be insufficient.
You have the right to complain to HJM Accounts Ltd if you are dissatisfied with the processing of your data.
HJM Accounts Ltd, Whitmore Cross, Tillington, Hereford HR4 8LE
Tel: 01432 761500
If you do not receive a response within 30 days, you can complain to the Information Commissioner’s Office: