Qestor Ltd, trading as Qestor Chartered Accountants, is committed to protecting your personal information and being transparent about how we use it.
This privacy policy explains what personal data we collect, why we collect it, how we use it and what your rights are under UK data protection law.
Who We Are
Qestor Ltd trades as Qestor Chartered Accountants. We are registered in England and Wales.
For the purposes of UK data protection law, Qestor Ltd is the data controller for the personal information we hold about you.
What Personal Data We Collect
We may collect and process the following types of personal data:
Contact and Identity Information
- Full name
- Email address
- Phone number
- Postal address
Financial and Tax Information
- Income and expenditure records
- Tax reference numbers
- National Insurance numbers
- Company registration numbers
- Bank account details where required for payroll or other services
- HMRC correspondence and notices
Business Information
- Business name and structure
- Details of directors, shareholders and employees where relevant to the services we provide
Website and Enquiry Data
- Information submitted through our contact form
- General enquiry details
We do not collect sensitive personal data unless it is strictly necessary for the professional services we provide.
How We Collect Your Data
We collect personal data in the following ways:
- Directly from you when you contact us by phone, email, WhatsApp or through our website contact form.
- From information you provide to us when we are providing accountancy, tax or advisory services.
- From third parties where relevant, including HMRC, Companies House and other professional advisers acting on your behalf.
- Through our cloud accounting software where you have authorised us to access your records.
Why We Use Your Personal Data
We use your personal data for the following purposes:
- To provide accountancy and professional services: We use your data to prepare accounts, tax returns, payroll, VAT returns, management accounts and other professional services you have engaged us to provide.
- To communicate with you: We use your contact details to respond to enquiries, send relevant correspondence and keep you updated on the progress of your work.
- To comply with legal and professional obligations: As a professional accountancy practice, we are subject to legal and regulatory requirements that may require us to process and retain certain information.
- To fulfil HMRC and Companies House obligations: We submit information to HMRC and Companies House on your behalf as part of the services we provide.
- To manage our business: We may use data for internal record keeping, billing and administration purposes.
Our Legal Basis for Processing Your Data
We process your personal data on the following legal grounds under UK GDPR:
- Contract: Processing is necessary to perform the professional services you have engaged us to provide.
- Legal obligation: Processing is necessary for us to comply with our legal and professional obligations.
- Legitimate interests: Processing is necessary for our legitimate business interests, including responding to enquiries and maintaining our records.
- Consent: Where we rely on consent, we will ask for it clearly and you may withdraw it at any time.
How Long We Keep Your Data
We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, including to meet legal, regulatory and professional obligations.
For accountancy and tax records, we generally retain data for a minimum of six years in line with HMRC requirements. In some cases, records may need to be retained for longer depending on the nature of the work.
When data is no longer needed, we dispose of it securely.
Who We Share Your Data With
We do not sell your personal data to third parties. We may share your data with the following in the course of providing professional services:
- HMRC: For the submission of tax returns, VAT returns, payroll information and other filings.
- Companies House: For the filing of accounts, confirmation statements and other statutory documents.
- Cloud accounting software providers: Such as Xero or QuickBooks.
- Other professional advisers: Such as solicitors or financial advisers, where you have asked us to liaise with them.
- Our professional body: Where required for regulatory compliance.
How We Protect Your Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. This includes secure storage of records, password protection and the use of reputable cloud platforms.
Your Rights Under UK Data Protection Law
Under UK GDPR, you have the following rights:
- Right of access, rectification, and erasure of your data.
- Right to restrict or object to certain types of processing.
- Right to data portability.
- Right to withdraw consent at any time.
To exercise any of these rights, contact us at info@qestor.co.uk. We will respond to requests within one calendar month.
How to Make a Complaint
If you are unhappy with how we have handled your data, please contact us first. If remain unsatisfied, you have the right to lodge a complaint with the ICO:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: www.ico.org.uk
Changes to This Privacy Policy
We may update this privacy policy from time to time. When we do, we will update the date at the top of this page. We encourage you to review this policy periodically.