Privacy policy

Andia Financial Advisory Ltd is the data controller for the personal information described in this policy. We are a firm of accountants and financial advisers based in Watford, Hertfordshire.

If you have any question about this policy or about how we handle your information, contact us at hello@andiafinancial.co.uk or on 01923 000 000.

We are registered with the Information Commissioner's Office. Our registration number is available on request.

Through this website, we collect only what you give us:

—Enquiry form: your name, business name, email address, telephone number, the subject you select and the message you write.

—Direct contact: anything you include when you email, call or message us.

—Analytics: anonymised information about how the site is used, but only if you accept analytics cookies.

If you go on to become a client, we will collect considerably more — identification documents, financial records, tax references and similar — and that is covered by the engagement letter we send you rather than by this policy.

—To answer your enquiry and, where relevant, prepare a quote. Our lawful basis is legitimate interests: you have approached us and expect a reply.

—To take on and administer you as a client, where our lawful basis is performance of a contract.

—To meet our legal obligations, including anti-money-laundering identity checks and record-keeping required of accountants.

—To improve the website, where you have consented to analytics cookies.

We do not sell your information, and we do not use it to send marketing unless you have specifically asked us to.

We share personal information only where it is necessary:

—Our software and hosting providers, who process data on our instructions under a written agreement.

—HMRC, Companies House and other authorities where we are filing on your behalf or are legally required to report.

—Professional advisers and our own regulator or insurers, where necessary.

Some providers operate outside the UK. Where that is the case, we ensure appropriate safeguards are in place, such as UK adequacy regulations or standard contractual clauses.

Enquiries that do not lead to an engagement are deleted within twelve months.

Client records are retained for at least six years after the end of our engagement, which is the period required by tax and anti-money-laundering legislation. Some records are held longer where there is a legal reason to do so.

Under UK data protection law you have the right to:

—Ask for a copy of the personal information we hold about you.

—Ask us to correct anything inaccurate.

—Ask us to delete information, where we have no legal reason to keep it.

—Object to, or ask us to restrict, certain processing.

—Withdraw consent at any time, where we relied on consent.

To exercise any of these, email hello@andiafinancial.co.uk. We will respond within one month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put it right first.

This website is served over an encrypted connection. Client information is held in access-controlled systems with multi-factor authentication, and access is limited to the people who need it.

No system is perfect. If a breach occurred that was likely to affect your rights, we would notify you and the ICO as the law requires.

We update this policy from time to time. The date at the top of this page shows when it last changed. Material changes affecting existing clients will be notified directly.