Privacy policy
This policy explains how L&A Solutions LLP collects and uses personal information, how long we keep it and what rights you have over it. It applies to this website and to the accounting services we provide.
Last reviewed: [Insert date]
Who we are
L&A Solutions LLP is the data controller for the personal information described in this policy. Our registered address is No: 2, Peverel Close, Cambridge, CB5 8RW, United Kingdom.
You can contact us about anything in this policy by emailing info@lasolutions.uk.com or telephoning 07769 174939.
Information we collect
The information we hold depends on how you interact with us. Website visitors and enquirers give us far less than clients do.
- Enquiry details: your name, email address, telephone number, business name and anything you choose to include in a message or quotation request.
- Client information: the records needed to provide accounting services, which can include financial records, tax references, payroll data and identification documents.
- Identity verification: documents and checks required by anti-money-laundering rules before we can act for you.
- Correspondence: emails, letters, notes of telephone calls and documents you upload to us.
- Technical information: limited server-level information created when a page is requested, such as the page address and the time of the request.
Why we use it, and our legal basis
We only use personal information where we have a lawful basis for doing so.
- To answer your enquiry and prepare a quotation, on the basis of taking steps at your request before entering into a contract.
- To provide the services set out in your engagement letter, on the basis of performing that contract.
- To meet legal and regulatory obligations, including tax filing requirements, record retention and anti-money-laundering checks.
- To operate and secure our business, on the basis of our legitimate interests, provided those interests do not override your rights.
- To send service updates or marketing where you have asked us to, on the basis of your consent, which you can withdraw at any time.
Where information is held
We aim to keep personal information within the United Kingdom or the European Economic Area. Where a supplier processes information outside those areas, we take steps to ensure an appropriate level of protection is in place, such as an adequacy decision or standard contractual clauses.
How long we keep it
Enquiries that do not lead to an engagement are normally deleted within twelve months.
Client records are retained for the period required by tax and professional obligations, which is commonly at least six years after the end of the relevant accounting or tax period. Some records are kept for longer where there is a legal reason to do so.
Identity verification records are kept for the period required by anti-money-laundering legislation.
Keeping information secure
We use access controls, encrypted connections and a secure document portal rather than relying on email attachments for sensitive records. Access to client information is limited to the people who need it in order to do the work.
No system can be guaranteed completely secure. If a breach occurred that was likely to result in a risk to your rights, we would notify the Information Commissioner’s Office and, where required, you.
Your rights
Under UK data protection law you have rights over your personal information. These include the right to:
- Ask for a copy of the personal information we hold about you.
- Ask us to correct information that is inaccurate or incomplete.
- Ask us to delete information, where there is no legal reason for us to keep it.
- Ask us to restrict how we use your information, or object to a particular use.
- Ask us to transfer certain information to another organisation.
- Withdraw consent at any time, where consent is the basis on which we use your information.
How to raise a concern
To exercise any of these rights, or to raise a concern about how we handle your information, contact us at info@lasolutions.uk.com. We will respond within the period required by law, normally one month.
If you are not satisfied with our response, you can complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk.
Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it was last reviewed, and any significant change will be brought to the attention of current clients.