Client Data Protection Policy

At Savannah Accountancy, we take the privacy and security of your personal and financial information seriously. This policy explains how we collect, use, store, and protect your data when you use our services or upload documents through our website or client portal.

1. What Information We Collect

We collect personal and financial information necessary to complete your accounting or tax return services. This includes your name, contact details, National Insurance number, UTR, identification documents, bank details, income records, and any other relevant documents you provide.

2. How We Use Your Data

We only use your information for delivering the services you request, such as preparing and submitting your tax return, communicating with you, and meeting legal obligations under HMRC regulations. We do not use your data for marketing or unrelated purposes.

3. Data Sharing

We do not share your data with third parties unless required by law or if you've given your explicit consent. If we use third-party services (like secure cloud storage), we ensure they are fully GDPR-compliant and maintain strong data protection standards.

4. How We Store Your Data

All data is stored securely using password-protected and encrypted systems. We take appropriate technical and organisational measures to keep your data safe from unauthorized access, loss, or misuse.

5. Data Retention

We retain client data for as long as required by law and professional guidelines, typically for a period of up to six years. After this period, data is securely deleted or destroyed.

6. Your Rights Under GDPR

Under the UK General Data Protection Regulation (UK GDPR), you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate or outdated information
• Request the deletion of your data (where applicable)
• Object to how we process your data or restrict its use in certain circumstances

You can exercise these rights by contacting us directly using the details at the end of this policy.

7. Data Breach Response

In the unlikely event of a data breach, we will take immediate action to contain the breach, assess its impact, and notify any affected clients as required by law. We are committed to acting transparently and responsibly in such situations.

8. Client Consent

By using our services or submitting documents through our website or portal, you agree to the terms of this policy and consent to the collection and use of your data as described.

9. Contact Us

If you have any questions or concerns about how your data is handled, or if you'd like to exercise your rights, please contact: