Privacy Policy

1. Who we are
I Sumar & Co Ltd is a firm of Accountants. We are committed to protecting your personal data and respecting your privacy.

Our details:

• Trading name: I Sumar & Co is the trading name of I Sumar & Co Ltd, registered in England & Wales.

• Registered company name: I Sumar & Co Ltd

• Company registration number: 07901135

• Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ

• VAT registration number: 201 388 928

• ICO registration number: ZA123828

 
We are the data controller for the personal data we collect about you, unless otherwise stated.

2. How to contact us
If you have any questions about this policy, or about how we handle your personal data, please contact us:

• Email: info@isumarco.com

• Phone: +442071 831 432

• Post: Data Protection, I Sumar & Co, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ

3. What personal data we collect
We may collect and process the following categories of personal data about you, depending on our relationship with you:

If you are a client (or prospective client):

• Identity data - name, date of birth, National Insurance number, UTR, passport or driving licence (for anti-money-laundering checks)

• Contact data - address, email, phone number

• Financial data - bank account details, income, expenses, tax records

• Business data - company details, directorships, shareholdings, business records

• Correspondence - any letters, emails or messages exchanged with us

 
If you are a website visitor:

• Technical data - IP address, browser type, device information, pages viewed

• Form submission data - name, email, phone and any message you send via our website forms

• Cookie data - see Section 9 below

4. Why we collect your data, and our legal basis
Under UK GDPR, we must have a lawful basis for processing your personal data. The bases we rely on are:
Performance of a contract (Article 6(1)(b)) - to deliver the accounting and tax services you have engaged us to provide.
 
Legal obligation (Article 6(1)(c)) - to comply with our legal and regulatory obligations, including:

• Filings to HMRC and Companies House on your behalf

• Anti-money-laundering identity verification under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017

• Retention of records required by tax legislation

 
Legitimate interests (Article 6(1)(f)) - for purposes including:

• Responding to enquiries from prospective clients

• Improving and securing our website and services

• Direct marketing of our services to existing clients (you can opt out at any time)

 
Consent (Article 6(1)(a)) - where we ask for it, including:

• Newsletter subscriptions and marketing emails to non-clients

• Non-essential cookies on our website

 
5. Who we share your data with
We will never sell your data to anyone. We may share your data with the following categories of third parties, where necessary:
Regulators and authorities - HMRC, Companies House, and other regulators where we are legally required to do so.
 
Professional advisors - solicitors, insurers, auditors or other advisors we engage in connection with our practice.
Law enforcement and government bodies - where we are legally compelled to disclose data, including for the prevention or detection of crime, money laundering, or tax evasion.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We only permit our processors to process your data for specified purposes and in accordance with our instructions.
 
6. International transfers
Where we transfer personal data outside the United Kingdom, we ensure a similar degree of protection is afforded to it by relying on one or more of the following safeguards:

​

• Transfer to countries the UK Government has deemed to provide an adequate level of protection

• Use of the UK International Data Transfer Agreement or Standard Contractual Clauses

• Other safeguards permitted under UK GDPR

 
7. How long we keep your data
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.
 
Typical retention periods:

​

• Client accounting and tax records - at least 6 years after the end of the relevant tax year, in line with HMRC requirements, and longer where required by other legislation

• Anti-money-laundering records - 5 years after the end of the business relationship, in line with MLR 2017

• Company records (limited companies) - at least 6 years after the company's accounting period

• Marketing data - until you withdraw your consent or unsubscribe

• Website enquiry data - 24 months

• Employee data - kept for the duration of employment and for six years afterwards, to meet HMRC, payroll and employment-law requirements.

 
8. Your rights under UK GDPR
You have a number of rights in relation to your personal data:

​

• The right to be informed - you have the right to be told how your personal data is used (which is what this notice is for)

• The right of access - you can request a copy of the personal data we hold about you

• The right to rectification - you can ask us to correct inaccurate or incomplete data

• The right to erasure - you can ask us to delete personal data in certain circumstances (this right is limited where we have a legal obligation to retain data)

• The right to restrict processing - you can ask us to limit how we use your data in certain circumstances

• The right to data portability - you can ask for a copy of your data in a structured, commonly-used format

• The right to object - you can object to certain types of processing, particularly direct marketing

• The right to withdraw consent - where we rely on consent, you can withdraw it at any time

• The right to complain to the ICO - see Section 11 below

 
To exercise any of these rights, please contact us using the details in Section 2. We will respond within one month.
 
9. Cookies and our website
Our website uses cookies and similar technologies to function correctly, to analyse how visitors use the site, and (where you consent) for marketing purposes.

Categories of cookies we use:

​

• Strictly necessary cookies - required for the website to function (these do not require consent)

• Analytics cookies - help us understand how visitors use our site (these require consent)

• Marketing cookies - used to deliver relevant content and ads (these require consent)

 
You can manage your cookie preferences via the cookie banner on our site, or by changing your browser settings.
 
10. How we keep your data secure
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. These measures include:

​

• Use of secure, encrypted cloud accounting platforms

• Restricted access on a need-to-know basis

• Multi-factor authentication on key systems

• Regular review of our security practices

 
We have procedures in place to deal with any suspected personal data breach and will notify you and the ICO where we are legally required to do so.
 
11. How to complain
If you are unhappy with how we have handled your personal data, please contact us first using the details in Section 2 - we will do our best to put things right.
 
You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

• Website: https://ico.org.uk

• Phone: 0303 123 1113

• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

 
We would, however, appreciate the chance to address your concerns directly before you approach the ICO.
 
12. Complaints about our service
If your complaint is about the quality of our professional services rather than data protection, you are welcome to contact us.
 
13. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of the page will show when it was last reviewed. We will notify clients of any material changes by email.