Privacy policy.

Who we are

Elite Consultants ("we", "us", "our") is the data controller for any personal information you provide. Our office is at 40 Queens Drive, Waltham Cross, Hertfordshire, EN8 7PP. You can contact us at ejaz@eliteconsultants.uk.

What data we collect

When you contact us, we may collect:

• Identity data: name, business name, role
• Contact data: email, phone number, postal address
• Financial data (only if you become a client): tax records, accounts, payroll data, bank details for fee collection
• Technical data: IP address, browser type, device data, collected via cookies and analytics
• Marketing data: your preferences for receiving updates from us

How we use your data

We use your data to:

• Respond to enquiries and provide quotes
• Deliver accounting, tax, and advisory services
• Comply with legal obligations (HMRC reporting, anti-money-laundering checks, professional regulations)
• Improve our website and marketing (with your consent for analytics)
• Send you relevant updates if you've opted in

Legal basis

We process your data under one or more of the following bases under UK GDPR:

• Contract, to provide the services you've engaged us for
• Legal obligation, to comply with regulatory and tax law
• Legitimate interest, to operate our business and respond to enquiries
• Consent, for analytics, marketing, and similar where we ask

Sharing your data

We may share your data with:

• HMRC and Companies House (where required to deliver services)
• Cloud providers we use (Xero, TaxCalc, Microsoft 365, Google Workspace) under appropriate data-processing agreements
• Our regulator (ACCA) where required
• Professional advisers (legal, IT) bound by confidentiality

We never sell your data. We never share it for marketing purposes outside our own business.

Cookies & analytics

We use Google Analytics 4 to understand how visitors use our website. This sets cookies that may be considered personal data. You can opt out using the cookie banner, or through your browser settings. We don't use advertising cookies.

How long we keep data

For prospective clients (enquiries that don't become engagements): up to 2 years.

For clients: 7 years after the end of our engagement, in line with HMRC and ACCA retention requirements.

For marketing contacts: until you unsubscribe.

Your rights

Under UK GDPR you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (subject to legal retention requirements)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent for activities based on consent

To exercise any of these, email ejaz@eliteconsultants.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Security

We use industry-standard security measures including encrypted data transit (TLS), strong access controls (two-factor authentication), and regular security training for staff. We use cloud providers with ISO 27001 certification.

International transfers

Some of the cloud services we use may transfer data outside the UK. Where this happens, we ensure appropriate safeguards are in place (Standard Contractual Clauses or equivalent UK GDPR mechanisms).

Changes to this policy

We may update this policy from time to time. We'll post a notice on the website if changes are material. The "Last updated" date at the top reflects the most recent revision.

Questions? Email ejaz@eliteconsultants.uk or call 07809590922.