Devonports LAS Accountants Limited is based at Cumberland House, 24-28 Baxter Avenue, Southend-on-Sea, Essex SS2 6HZ.
On 25th May 2018 the General Data Protection Regulation, adopted by the European Parliament in 2016, came into force through the EU and replaces the Data Protection Directive (95/46/EC) and which is implemented in the UK through the 1998 Data Protection Act.
The Information Commissioners Office (ICO) under GRPR views our relationship with you and your information as follows: - You are the ‘Data Controller’ of your information, and in line with the authority granted to us by you and as set out in our Engagement Letter, we are your ‘Data Processor, and can only process the information you provide us in-line with your instructions.
The responsibility of ensuring that information, such as addresses, contact telephone numbers and email are addresses are correct and up-to-date lies directly with you as the ‘Data Controller’.
We may process “personal data” (as defined in UK data protection legislation) as part of our contracted services and/or on our administration supporting these contracted services. We may also process data “in compliance with a legal obligation” with respect to tax matters. We may process data on staff and/or contacts (either in client companies or suppliers).
The security of all data is important to us as a Company and all feasible security measures are in place. We would strongly advise that if you are sending us any personal information that could be utilised to identify you as an individual, that this is encrypted before sending it to us. For example, scans of Passports or Driving Licences, Bank Statements, P45s, P60s, P11ds and especially any documents relating to any employees and sub-contractors you may have working for you.
We are also able to provide secure online document storage software, which will store all your information relating to your Tax Returns and Limited Company accounts and access to this can be provided to you via a link, emailed to you, for you to activate your account and set up a password.
As part of our service offering, we may from time to time transfer personal data to countries outside the European Economic Area (EEA). Whenever we transfer your personal data out of the EEA, we ensure the same degree of protection is afforded to it. We do utilise private cloud-based services.
Data are held as long as they remain relevant to the purpose for collection. In line with HMRC Statutes and Legislation, this time period is usually six years. Once no longer required, whether on paper or electronic format, data are deleted by secure means.
Data may be shared with third parties as part of our contracted services and/or if we are required by law to do so. “Third parties” may include specialist contractors we may include in specific projects for clients. We cannot accept any liability for any processing conducted by a third party outside our remit.
As part of our compliance, we have conducted a cookie audit on our website. Cookies are internet files used by the system to view websites and their content. We do not utilise any cookies.
None of the above affects your rights under the legislation, in particular your right to access the data we hold on you. If you wish to request a copy of your data, please submit it in writing/email to the Company. Please include enough information to enable us to identify you and search for appropriate data.
If you are dissatisfied with this policy, have queries about our Data Protection procedures or wish to lodge a complaint, please contact the company in the first instance. Thereafter you have the right to submit a complaint to the Supervisory Authority, the Information Commissioner’s Office (ICO):
The Information Commissioner’s Office
Cheshire SK9 5AF