Privacy Policy

Updated: 16.04.2026

1. About us and purpose of this notice

Zubair Ali (ZA Accountancy Ltd, “we”, “us”, “our” and “ours”) is an accountancy firm based in the United Kingdom. We are registered as a data controller under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

This privacy notice explains how we collect, use, store and protect personal data in connection with our business activities and the services we provide.

For the purposes of Data Protection Legislation, we are the “data controller”. This means we determine the purposes and means of processing your personal data.

“Data Protection Legislation” includes the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR), as amended or replaced from time to time.

If you have any questions about this notice or how we handle your data, you can contact us at: info@za-accountancy.com

2. The information we collect about you

We may collect and process the following categories of personal data:

  • Personal identification details such as name, address, date of birth

  • Contact details including email address and telephone number

  • Business information (including trading name, company details, financial records)

  • Financial and tax-related information

  • Correspondence and communication recordsIdentity verification documents (for AML compliance purposes)

  • Information obtained from third parties such as HMRC, Companies House, or credit reference agencies

We may also collect any other information necessary to provide our professional services.

3. How we collect your personal data

We collect personal data through the following methods:

  • Directly from you when you engage our services or contact us

  • During the course of providing accountancy, tax, or advisory services

  • From your employer, accountant, or authorised representative

  • From third parties such as HMRC, Companies House, or publicly available sources

  • From regulatory or compliance-related checks where required by law

4. How we use your personal data

We will only process your personal data where we have a lawful basis to do so. These include contractual necessity, legal obligation, and legitimate interests.

We may use your personal data for the following purposes:

  • To provide accountancy, taxation, bookkeeping, payroll, and advisory services

  • To manage and maintain our relationship with you

  • To comply with legal and regulatory obligations

  • To carry out identity verification and anti-money laundering checks

  • To process invoices, payments, and account administration

  • To improve our services and internal business processes

  • To respond to enquiries and communicate with you

We may also use your data for administrative, operational, and record-keeping purposes.

5. Disclosure of your information

We may share your personal data with third parties where necessary, including:

  • HMRC and other regulatory or governmental bodies

  • Professional advisers including auditors and legal advisers

  • IT service providers and cloud-based accounting platforms

  • Subcontractors and service providers assisting in service delivery

All third parties are required to respect the confidentiality and security of your data and to comply with applicable data protection laws.

6. International transfers

We do not routinely transfer personal data outside the United Kingdom.

Where such transfers are necessary, we will ensure appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.

7. Data retention

We will retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, accounting, and regulatory requirements.

In most cases, financial and accounting records will be retained for a minimum period of six years after the end of the relevant financial year, unless a longer retention period is required by law.

8. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure.

Access to personal data is limited to employees, agents, and contractors who require access for legitimate business purposes and who are subject to strict confidentiality obligations.

9. Your data protection rights

Under data protection law, you may have the following rights:

  • The right to access your personal data

  • The right to correct inaccurate or incomplete data

  • The right to request deletion of your personal data

  • The right to restrict or object to processing

  • The right to data portability in certain circumstances

To exercise any of these rights, please contact us at: info@za-accountancy.com

10. Marketing communications

We may send you information about our services where we believe it may be of legitimate interest to you.

You may opt out of receiving marketing communications at any time by contacting us or using the unsubscribe mechanism provided in our communications.

11. Changes to this privacy notice

We may update this privacy notice from time to time in order to reflect changes in legal, regulatory or operational requirements.

The most current version will always be available on our website.

12. Complaints

If you have any questions regarding this notice or if you would like to speak to us about the manner in which we process your personal data, please email our Data Protection Point of Contact Mr Zubair Ali at info@za-accountancy.com.You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues, at any time.

The ICO’s contact details are as follows:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone – 0303 123 1113 (local rate) or 01625 545 745

Website – https://ico.org.uk/concerns