This privacy notice tells you what to expect us to do with your personal information. We take data protection seriously — and explain exactly what we collect, why, and what your rights are.
Fiscal Umbrella Limited is the data controller for the personal information you share with us. We follow UK GDPR and the Data Protection Act 2018. This page explains exactly what we do with your data — without legal jargon wherever possible.
If you have any questions about this privacy notice or how we handle your data, you can reach us using any of the methods below.
The information we collect depends on what we're doing for you. We've broken it down by purpose so it's clear.
We may also collect: Racial or ethnic origin (only when required by law)
We may also collect: Racial or ethnic origin (only when required by law)
Under UK data protection law, we must have a "lawful basis" for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO's website.
Which lawful basis we rely on may affect your data protection rights. Here are your rights in brief — you can find more about each one on the ICO's website.
You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share information with. There are some exemptions which means you may not receive all the information you ask for.
You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
You have the right to ask us to delete your personal information.
You have the right to ask us to limit how we can use your personal information.
You have the right to object to the processing of your personal data.
You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
When we use consent as our lawful basis you have the right to withdraw your consent at any time.
If you make a request, we must respond to you without undue delay and in any event within one month. To make a data protection rights request, please contact us using the details at the top of this notice.
We rely on the following lawful bases depending on the purpose of processing.
We keep your personal information for 15 years after the end of the financial year in which the documents were provided to us. This retention period reflects our regulatory obligations as a UK accountancy practice, including HMRC record-keeping requirements and Companies Act provisions.
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we've used your data after raising a complaint with us, you can also complain to the Information Commissioner's Office (ICO).
