Request a Consultation

Privacy Policy

Last updated: 29 Dec 2025

What this means in practice

We may collect and process the following categories of personal data:

  • Contact details: name, job title, company name, email address, telephone number
  • Enquiry details: information you provide in forms, emails, or calls
  • Professional information: role, organisational context, service requirements
  • Website usage data: IP address, device information, browser type, pages visited, referral source (via cookies and similar technologies where enabled)

We do not intend to collect special category data (such as health information) through our website. Please avoid submitting it unless requested and necessary for a specific engagement.

How we use your personal data

We use personal data to:

  • Respond to enquiries and communicate with you
  • Provide and administer services (where engaged)
  • Manage contractual and business relationships
  • Improve website performance and user experience (where analytics cookies are enabled)
  • Maintain security and prevent fraud or misuse
  • Comply with legal and professional obligations

Lawful bases for processing

We process personal data under one or more of the following lawful bases:

  • Legitimate interests: to respond to enquiries, operate our business, and maintain client relationships
  • Contract: where processing is necessary to provide services or take steps prior to entering into a contract
  • Legal obligation: where required to comply with UK law and applicable regulatory/professional requirements
  • Consent: where required (for example, certain cookies or marketing communications)

Who we share data with

We may share personal data with trusted third parties where necessary, including:

  • IT and website hosting providers
  • Professional advisers (legal, accounting, and compliance)
  • Payment providers (where applicable)
  • Authorities or regulators where legally required

International transfers

Where any service provider processes personal data outside the UK, we ensure appropriate safeguards are in place (for example, UK adequacy regulations or approved contractual protections).

Data retention

We retain personal data only for as long as necessary for the purposes set out in this policy, including to meet legal, professional, and contractual obligations. Typical retention depends on the nature of the relationship (enquiry vs. client engagement). If you would like more information about retention for a specific category of data, please contact us.

Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.

Your rights

You may have rights under UK data protection law, including:

  • Access to your personal data
  • Rectification of inaccurate data
  • Erasure (in certain circumstances)
  • Restriction of processing
  • Objection to processing based on legitimate interests
  • Data portability (in certain circumstances)
  • Withdrawal of consent (where processing is based on consent)

To exercise your rights, contact: shakiel@brookmanaccounting.co.uk

Complaints

If you are unhappy with how we handle your personal data, you can complain to the UK Information Commissioner’s Office (ICO). We encourage you to contact us first so we can address your concerns.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date will reflect the current version.

Request a Consultation