I'm Wendy Standley, trading as Eletty Accounting Services. I'm committed to protecting your privacy and handling your personal data in an open and transparent way.
This privacy policy explains how I collect, use, store, and protect your personal information when you:
Visit my website (elettyaccounting.co.uk)
Contact me for services
Become a client
Interact with me in any other way
Data Controller: Wendy Standley, trading as Eletty Accounting Services
Contact Details:
Email: wendy@elettyaccounting.co.uk
Phone: 07423 163803
Location: Dorset
Regulatory Body: Association of Accounting Technicians (AAT)
AAT Licence Number: 1002103
I may collect:
Your IP address
Browser type and version
Operating system
Pages you visit and time spent on each page
Referring website (if you clicked a link to reach my site)
General location (country/region, not precise location)
This information is collected through cookies and similar technologies (see Cookies section below).
I will collect:
Your name
Email address
Phone number
Business name and trading address
Nature of your business
Any information you provide in your enquiry or during our engagement
For all clients:
National Insurance number
Date of birth
Proof of identity (passport, driving licence)
Proof of address (utility bill, bank statement)
Bank account details (for payments to/from HMRC)
Details of income and expenses
Records of business transactions
Correspondence with HMRC and other authorities
For limited company clients:
Company registration number
Directors' and shareholders' details
Persons with Significant Control (PSC) information
Employee details (for payroll services)
For specific services:
Additional documentation as required to provide the agreed services
I process your personal data under one or more of the following legal bases:
Contract: Processing is necessary to perform our contract for accounting services
Legal obligation: Processing is necessary to comply with legal and regulatory requirements (e.g., anti-money laundering checks, professional body requirements)
Legitimate interests: Processing is necessary for my legitimate business interests, such as:
Responding to enquiries
Marketing my services (where you've consented or we have an existing relationship)
Improving my website
Preventing fraud
Protecting my business
Consent: Where you've given explicit consent (e.g., for marketing communications)
Provide accounting, bookkeeping, tax, and compliance services
Communicate with you about our services
Comply with legal and regulatory obligations
Conduct anti-money laundering checks
Prepare and file tax returns and accounts
Correspond with HMRC and Companies House on your behalf
Process payments
Send service updates and deadline reminders
Respond to enquiries
Improve my services
Send marketing communications (only with your consent or where we have a legitimate interest)
Protect against fraud and ensure the security of my systems
I may share your personal data with:
HMRC and Companies House: As part of my professional duties, I submit information to HMRC (tax returns, VAT returns, payroll submissions) and Companies House (statutory accounts, confirmation statements) on your behalf.
My professional body (AAT): AAT may review my files as part of regulatory compliance monitoring.
My professional indemnity insurer: In the event of a claim or potential claim against me.
Third-party software providers:
Xero (cloud accounting software)
GoCardless (Direct Debit payments)
Client Engager (Client Portal)
These providers process data on my behalf under strict data processing agreements.
Legal and regulatory authorities: Where required by law (e.g., National Crime Agency for money laundering reporting).
Professional advisers: My solicitor, accountant, or other professional advisers where necessary for legal, accounting, or insurance purposes.
Other third parties: Only with your explicit consent or where legally required.
I will never sell your personal data to third parties.
I do not routinely transfer personal data outside the UK or European Economic Area (EEA).
However, some of my software providers may store data on servers outside the UK/EEA. Where this occurs, I ensure appropriate safeguards are in place, such as:
Standard Contractual Clauses approved by the UK Information Commissioner's Office
The provider's certification under an approved data transfer mechanism
The provider's adequacy decision from the UK government
If you would like details about international transfers relating to your data, please contact me.
I retain your personal data in accordance with legal and professional requirements:
Current clients: I keep your data for as long as you remain a client, plus the retention periods below.
Former clients: I retain client data for at least:
7 years after our engagement ends (professional best practice and potential legal claims)
6 years from the end of the accounting period (for company records)
5 years and 10 months after the end of the tax year (for individuals with business income)
Enquiries that don't become clients: I keep enquiry data for up to 2 years in case you wish to engage me in future.
Marketing contacts: I keep marketing contact data until you unsubscribe or for 3 years of inactivity, whichever is sooner.
Some data may be retained longer if required by law, regulation, or to defend legal claims.
When data is no longer needed, it will be securely deleted or destroyed.
Under UK GDPR, you have the following rights:
Right to be informed: You have the right to know how your data is being used (this privacy policy provides that information).
Right of access: You can request a copy of the personal data I hold about you (a "subject access request").
Right to rectification: You can ask me to correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten"): You can ask me to delete your data in certain circumstances. However, I may need to retain data to comply with legal or professional obligations.
Right to restrict processing: You can ask me to limit how I use your data in certain circumstances.
Right to data portability: You can request your data in a structured, commonly used format to transfer to another provider.
Right to object: You can object to processing based on legitimate interests or for direct marketing purposes.
Rights related to automated decision-making: I do not use automated decision-making or profiling.
To exercise any of these rights, please contact me:
Email: wendy@elettyaccounting.co.uk
Phone: 07423 163803
I will respond within one month of receiving your request.
If you're unhappy with how I've handled your data, you have the right to complain to:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113
I take the security of your personal data seriously and have implemented appropriate technical and organizational measures to protect it, including:
Secure, password-protected systems
Encrypted data transmission (SSL/TLS)
Regular software updates and security patches
Secure cloud storage with reputable providers
Regular data backups
Access controls (only I have access to client data)
Secure disposal of physical documents (shredding)
Anti-virus and firewall protection
However, no data transmission over the internet is completely secure. While I take all reasonable steps to protect your data, I cannot guarantee absolute security.
My website uses cookies to improve your experience.
Cookies are small text files stored on your device when you visit a website. They help the website remember information about your visit.
Essential cookies: These are necessary for the website to function properly (e.g., remembering your cookie preferences).
Analytics cookies: These help me understand how visitors use my website (e.g., Google Analytics). This information is anonymized and used to improve the website.
Marketing cookies: [Only if applicable] These track your activity to show you relevant advertisements.
You can control and/or delete cookies through your browser settings. However, disabling cookies may affect website functionality.
For more information about cookies and how to manage them, visit: www.aboutcookies.org
My website may contain links to other websites (e.g., professional bodies, software providers). I am not responsible for the privacy practices of these third-party websites. Please review their privacy policies separately.
My services are not directed at children under 16. I do not knowingly collect personal data from children. If you believe I have collected data from a child, please contact me immediately.
I may update this privacy policy from time to time to reflect changes in:
The law
My business practices
The services I offer
When I make significant changes, I will notify you by:
Updating the "Last updated" date at the top of this policy
Emailing current clients (if the change affects how I use your data)
Posting a notice on my website
Please review this policy periodically.
If you're a client or have enquired about my services, I may send you information about:
Services that may interest you
Updates to my service offerings
Helpful tax and business tips
You can opt out of marketing communications at any time by:
Clicking "unsubscribe" in any marketing email
Emailing me at wendy@elettyaccounting.co.uk
Calling me on 07423 163803
If you opt out, I will still send you essential service-related communications (e.g., deadline reminders, invoices).
If you have any questions about this privacy policy or how I handle your personal data, please contact me:
Wendy Standley
Eletty Accounting Services
Email: wendy@elettyaccounting.co.uk
Phone: 07423 163803
Website: elettyaccounting.co.uk
This privacy policy was last updated on 16th February 2026.
By using my website or engaging my services, you acknowledge that you have read and understood this privacy policy.