Privacy Policy

Last updated: 01January-2026

Goldstein Accountants is a professional UK-based accountancy and tax advisory firm providing UK tax services, business advisory support, bookkeeping, VAT returns, payroll services, self assessment tax returns, corporation tax services, and company accounts preparation for clients across the United Kingdom.

We are committed to protecting your personal data and handling it responsibly, transparently, and in accordance with:

  • UK General Data Protection Regulation (UK GDPR)
  • Data Protection Act 2018
  • HMRC data security requirements
  • Money Laundering Regulations 2017
  • Companies Act 2006
  • Professional and ethical standards applicable to accountants in the UK

This Privacy Policy explains how Goldstein Accountants collects, uses, stores, and protects personal data when you:

  • Visit our website
  • Contact us for advice or a quotation
  • Engage us for accountancy or UK tax services
  • Use our bookkeeping, payroll, VAT, self assessment, or corporation tax services
  • Interact with us as a business contact, supplier, or professional adviser

We encourage you to read this policy carefully to understand how your data is handled.

Who We Are: Data Controller Information

For the purposes of UK data protection law, Goldstein Accountants acts as a Data Controller when we determine how and why your personal data is processed.

Depending on the service provided, we may also act as a Data Processor, for example when processing payroll data on behalf of a client.

If you have any questions regarding this Privacy Policy or how we process your personal data, you may contact us using the details provided on our website.

The Types of Personal Data We Collect

As accountants in the UK serving individuals and businesses, the types of personal data we collect will depend on the services provided.

Personal Data from Individual Clients

If you engage Goldstein Accountants for self assessment, tax planning, or other UK tax services, we may collect:

  • Full name
  • Date of birth
  • Home address
  • Email address
  • Telephone number
  • National Insurance number
  • Unique Taxpayer Reference (UTR)
  • HMRC login credentials (where authorised)
  • Bank details
  • Employment and income details
  • Pension information
  • Investment information
  • Property income details
  • Details of dependants where relevant for tax purposes

Personal Data from Business Clients

If you are a limited company, contractor, startup, landlord, or SME client, we may collect:

  • Company name and registration number
  • Registered office address
  • Director and shareholder details
  • Payroll data (employee names, NI numbers, salaries)
  • VAT registration number
  • Financial statements and transaction records
  • Bank account details
  • Supplier and customer information

Sensitive Data

In limited circumstances, we may process special category data, such as:

  • Health information (where relevant for tax reliefs)
  • Information relating to criminal convictions (for compliance checks under Money Laundering Regulations)

Such data is processed only where strictly necessary and in accordance with UK GDPR safeguards.

How We Collect Your Data

Goldstein Accountants may collect personal data in the following ways:

  • Directly from you via email, telephone, online forms, or meetings.
  • Through secure client onboarding forms.
  • From HMRC where authorised by you.
  • From Companies House and other public registers.
  • From third-party software providers used for bookkeeping, payroll, or tax filing.
  • Through cookies and analytics when you visit our website.

We always aim to ensure that data is collected lawfully, fairly, and transparently.

Legal Bases for Processing Personal Data

Under UK GDPR, we must have a lawful basis to process personal data. Goldstein Accountants relies on the following legal bases:

Contractual Necessity

Where processing is necessary to perform our contract with you.

For example:

  • Preparing and filing a self assessment tax return
  • Submitting VAT returns to HMRC
  • Running payroll services
  • Preparing annual company accounts under the Companies Act 2006

Legal Obligation

Where we are required to comply with UK law, including:

  • HMRC reporting obligations
  • Anti-money laundering checks under the Money Laundering Regulations 2017
  • Record-keeping requirements

Legitimate Interests

Where processing is necessary for our legitimate business interests, such as:

  • Improving our UK tax services
  • Maintaining internal records
  • Preventing fraud
  • Managing client relationships

We always balance our legitimate interests against your rights.

Consent

Where required, we will obtain your consent, for example for marketing communications.

You may withdraw consent at any time.

How We Use Your Personal Data

Goldstein Accountants uses personal data for the following purposes:

  • Delivering accountancy services across the UK
  • Providing business tax advisory services
  • Filing returns with HMRC
  • Advising on tax planning strategies
  • Preparing management accounts
  • Responding to enquiries
  • Complying with regulatory and legal obligations
  • Conducting anti-money laundering checks
  • Maintaining internal records and quality control

If you provide incorrect or incomplete financial information, this may result in inaccurate tax filings. It is therefore your responsibility to ensure information provided to us is accurate and complete.

Sharing of Personal Data

We do not sell personal data.

However, we may share information where necessary with:

  • HM Revenue & Customs (HMRC)
  • Companies House
  • Payroll and accounting software providers
  • Professional advisers (e.g. legal advisers)
  • Regulatory authorities
  • Cloud storage providers

All third parties are required to maintain appropriate security measures.

International Data Transfers

Where third-party software providers store data outside the United Kingdom, we ensure appropriate safeguards are in place, such as:

  • Adequacy regulations
  • Standard contractual clauses
  • Data processing agreements

Data Security Measures

Goldstein Accountants implements appropriate technical and organisational measures, including:

  • Encrypted data storage.
  • Secure cloud accounting platforms.
  • Password-protected systems.
  • Access controls.
  • Staff confidentiality agreements.
  • Regular data security reviews.

We follow HMRC data security guidance for accountants in the UK.

Data Retention

We retain personal data only for as long as necessary.

Typically:

  • Tax records: minimum 6 years (in line with HMRC requirements).
  • Anti-money laundering records: 5 years after end of relationship.
  • Company records: in accordance with Companies Act 2006 requirements.

After this period, data is securely deleted or anonymised.

Your Rights Under UK GDPR

As a data subject in the United Kingdom, you have the following rights:

  • Right of access.
  • Right to rectification.
  • Right to erasure (where applicable).
  • Right to restrict processing.
  • Right to data portability.
  • Right to object.
  • Rights relating to automated decision-making.

To exercise your rights, contact us using the details on our website.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Anti-Money Laundering and Identity Verification

As business tax advisors in the UK, we are legally required to carry out identity verification checks.

We may request:

  • Passport or driving licence.
  • Proof of address.
  • Company incorporation documents.
  • Beneficial ownership information.

Failure to provide this information may prevent us from acting for you.

Website Cookies and Analytics

Our website may use cookies to:

  • Improve user experience.
  • Analyse website traffic.
  • Enhance security.

You can control cookie settings via your browser.

Confidentiality and Professional Standards

Goldstein Accountants adheres to strict professional confidentiality standards expected of chartered accountants UK-wide.

All staff are bound by confidentiality obligations.

Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Any updates will be posted on our website with a revised “Last updated” date.

Contact Us

If you have any questions about this Privacy Policy or our UK tax services, please contact Goldstein Accountants via the contact details on our website.

We are committed to transparency, compliance, and maintaining the highest professional standards as trusted accountants in the UK.