Effective Date: 28 October 2026
GSK Balaji Cardiff Accountants respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, contact us, or use our accounting and bookkeeping services.
We handle personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as applicable.
By using our website or engaging our services, you acknowledge that your personal information may be processed as described in this policy.
We may collect and process the following categories of personal information:
Full name and title.
Business name and job title.
Postal address and business address.
Email address and telephone number.
When you engage our accounting or bookkeeping services, we may process relevant financial information, including income and expenditure records, invoices, receipts, bank transaction information, tax records, payroll information, and other documents necessary to provide our services.
When you visit our website, certain technical information may be collected, such as your IP address, browser type, device information, pages visited, and website usage data, depending on the technologies and analytics tools in use.
We may retain information contained in enquiries, emails, contact forms, appointment requests, and other communications you send to us.
We may use your personal information for the following purposes:
To provide accounting, bookkeeping, tax, and related professional services.
To respond to enquiries and communicate with clients.
To prepare accounts, tax returns, financial reports, and other agreed documents.
To manage appointments, client relationships, and service agreements.
To meet applicable legal, regulatory, tax, and professional obligations.
To maintain accurate business and accounting records.
To protect our website, systems, and business against fraud, misuse, and security risks.
To improve our website and services where appropriate.
To send relevant marketing communications where permitted by law.
We will not use your personal information for purposes that are incompatible with the reasons for which it was collected unless permitted by applicable law.
Under UK data protection law, we must have a lawful basis for processing personal information. Depending on the circumstances, we may rely on:
Contract: Where processing is necessary to provide services you have requested or to take steps before entering into a contract.
Legal obligation: Where processing is necessary to comply with applicable laws, regulations, or lawful requests.
Legitimate interests: Where processing is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms.
Consent: Where you have freely given consent for a specific purpose, such as certain marketing activities or non-essential cookies where consent is required.
Vital interests or other lawful grounds: Where applicable in exceptional circumstances recognised by law.
We do not sell your personal information.
Where necessary to provide our services or meet our legal obligations, we may share relevant information with:
HM Revenue & Customs (HMRC) and other relevant public authorities.
Companies House, where applicable.
Banks, financial institutions, or other authorised organisations where required for agreed services.
Accounting software providers and secure document management platforms.
IT support providers, website hosting companies, and other service providers acting on our behalf.
Professional advisers, regulators, or legal representatives where appropriate or legally required.
We only share information where there is an appropriate lawful basis and take reasonable steps to ensure that personal information is handled securely.
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration, disclosure, or destruction.
These measures may include access controls, secure systems, appropriate staff procedures, and the use of reputable software providers.
However, no method of transmitting or storing information electronically is completely secure. We cannot guarantee absolute security, but we take appropriate steps to reduce risks.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining business records, resolving disputes, and meeting applicable legal and regulatory obligations.
Retention periods may vary depending on the type of information and the circumstances. Certain accounting, tax, and client records may need to be retained for several years under applicable requirements.
When information is no longer required, we will take appropriate steps to delete it or securely dispose of it, subject to any legal obligations to retain it.
Depending on the circumstances and applicable law, you may have the right to:
Request access to the personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request erasure of your personal information where the legal conditions are met.
Request restriction of processing in certain circumstances.
Object to processing based on legitimate interests.
Request data portability where applicable.
Withdraw consent where processing relies on your consent.
Lodge a complaint with the Information Commissioner’s Office (ICO).
These rights are subject to certain conditions and legal exceptions. For example, we may need to retain particular records to meet legal or regulatory obligations.
Our website may use cookies and similar technologies to support website functionality, understand visitor activity, and improve user experience.
Essential cookies may be required for the website to operate correctly. Non-essential analytics or advertising cookies will be used in accordance with applicable consent requirements.
You can manage cookies through the available website cookie settings and your browser settings. Disabling certain cookies may affect website functionality.
Our website may contain links to external websites, including accounting software providers and other professional resources.
We are not responsible for the privacy practices, security, or content of third-party websites. We recommend reviewing their privacy policies before submitting personal information.
Some service providers may process personal information outside the United Kingdom. Where personal data is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable UK data protection requirements.
Such safeguards may include adequacy regulations or other legally recognised transfer mechanisms, where required.
Our services are primarily intended for businesses and adults. We do not knowingly collect children’s personal information through our website unless it is necessary and lawful in the circumstances.
If you believe a child has provided personal information inappropriately, please contact us so that we can review the matter.
We may update this Privacy Policy from time to time to reflect changes in our services, business practices, technology, or legal obligations.
Any revised version will be published on this page with an updated effective date where appropriate.
If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how your personal information is handled, please contact:
GSK Balaji Cardiff Accountants
Email: [Insert official business email address]
Address: [Insert registered or business address]
Website: [Insert official website URL]
You may also contact the Information Commissioner’s Office (ICO) if you have concerns about the handling of your personal information.
ICO website: https://ico.org.uk/