1Introduction: This privacy notice provides you with details of how we collect and process your personal data and your rights in respect of the processing of that data.
PJD Tax Consultants Limited is a UK and US tax compliance and advisory firm. We are registered in England and Wales as a limited liability company under number 04772706 and our registered office is located at: Lower Ground Floor, 5-8 Hardwick Street, London, EC1R 4RG
For the purpose of the data protection legislation and this notice we are the ‘data controller’ and the ‘data processor’. This means that we are responsible for deciding how we hold and use personal data about you. We are required under the Data Protection Legislation to notify you of the information contained in this privacy notice.
We have appointed a data protection manager who is our data protection point of contact and is responsible for assisting with enquiries in relation to this privacy notice and our treatment of your personal data. Should you wish to contact our data protection manager you can do so using the contact details noted below.
If you are not happy with any aspect of how we collect and use your data you have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We should be grateful if you would contact us first if you do have a complaint so that we can try to resolve it for you.
2How we collect your personal data: The personal data that we hold to perform the services that you have engaged us to perform for you will be provided to us when:
- you request a proposal from us in respect of the services we provide
- you complete our annual tax return data questionnaire
- you provide back-up documentation to support the entries in the questionnaire
- you contact us by email, telephone, or post when you have a query about our services
- you have given your consent for us to receive personal information from third parties such as your employer or financial institutions
- we may also in specific circumstances acquire personal information from publicly accessible sources for example, Companies House.
Sensitive Data: Sensitive data refers to data that includes details about your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data.
We do not specifically collect any sensitive data about you. However, it may be possible to infer certain sensitive details about you from the other personal data we hold, this is wholly incidental to the information we are required to gather for tax purposes.
We do not collect any information about criminal convictions and offences.
Sensitive data does not currently include financial data.
3Types of information we hold about you: The information we hold about you may include the following:
- your personal details such as your name, address, date of birth
- your spouses and your children’s personal details
- tax reference numbers such as your and your family’s national insurance numbers, unique taxpayer reference numbers and social security numbers.
- employment related information such as employment contracts, the name and address of your employer, tax codes and compensation details.
- financial information such as details relating to your bank accounts, investments, financial assets, and pensions
- details of contact we have had with you in relation to the provision, or the proposed provision of our services
- details of any services you have received from us
- our correspondence and communication with you
- correspondence with tax authorities
- Information we have received from other sources such as publicly available information.
Your duty to inform us of changes: It is important that the personal data we hold about you is accurate and current. Should your personal information change please notify us as soon as possible.
4How we use your personal data: We may process your personal data for purposes necessary for the performance of our contract with you and to comply with our legal obligations.
We may process your personal data for the purposes of our own legitimate interests provided that those interests do not override any of your own interests, rights and freedoms which require the protection of personal data. This includes processing for marketing, business development, statistical and management purposes.
We may process your personal data for certain additional purposes with your consent, and in these limited circumstances where your consent is required for the processing of your personal data then you have the right to withdraw your consent at any time.
Please note that we may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data.
Situations in which we will use your personal data: Set out below are descriptions of the ways we may use your personal data and the legal grounds on which we will rely to process the data. If you require more details about the specific legal ground, we are relying on to process your personal data then please contact us.Situations in which we will use your personal data: Set out below are descriptions of the ways we may use your personal data and the legal grounds on which we will rely to process the data. If you require more details about the specific legal ground, we are relying on to process your personal data then please contact us.
- register you as a new client (performance of contract)
- to process and deliver product (performance of contract)
- notify you about any changes to tax law (legitimate interest)
- notify you of any tax planning opportunities (legitimate interest)
- notify you about any changes to our services (legitimate interest)
- comply with anti-money laundering regulations (legal obligation)
- collect and recover money owed to us (performance of contract)
In some circumstances we may anonymise or pseudonymise the personal data so that it can no longer be associated with you, in which case we may use it without further notice to you.
If you refuse to provide us with certain information when requested, we may not be able to perform the contract we have entered into with you. Alternatively, we may be unable to comply with our legal or regulatory obligations.
We may also process your personal data without your knowledge or consent, in accordance with this notice, where we are legally required or permitted to do so.
Generally, we do not rely on consent as a legal ground for processing your personal data. The only time we will ask for your consent is if we receive a request for your personal data from a third party.
Marketing: We currently do not send marketing communications, but this may change in the future in which case we will only contact you for marketing purposes if we have obtained your written consent to do so.
5Data retention: We will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected.
When assessing what retention period is appropriate for your personal data, we take into consideration:
- the requirements of our business and the services provided
- any statutory or legal obligations
- the purposes for which we originally collected the personal data
- the lawful grounds on which we based our processing
- the types of personal data we have collected
- the amount and categories of your personal data
- whether the purpose of the processing could reasonably be fulfilled by other means.
By law we must keep certain information about our customers for tax purposes (including contact, identity, and financial assets) for certain time periods even after they cease being customers. If you require more information, please contact us.
In some circumstances you can ask us to delete your data (see below for further information).
Change of purpose: Where we need to use your personal data for another reason, other than for the purpose for which we collected it, we will only use your personal data where that reason is compatible with the original purpose.
Should it be necessary to use your personal data for a new purpose, we will notify you and communicate the legal basis which allows us to do so before starting any new processing.
6Disclosures of your personal data: In some situations for example filing your tax return or responding to tax authority enquiries we may have to share your personal data with the parties set out below. We will always contact you before any personal data is shared and let you know exactly what data has been shared.
- HM Revenue and Customs
- Internal Revenue Service
- United States Treasury
- US State / Local tax authorities
In addition, we may also be required to share your personal data with the following:
- Service providers who provide IT and system administration services
- Taxation software providers where your information is held on their server
- Professional advisors such as IFA’s, rental agents, lawyers, accountants where we have your specific consent
- Archiving / storage company where we store data offsite.
Transfers out of EEA: Countries outside of the European Economic Area (EEA) do not always offer the same levels of protection to your personal data so European law has prohibited transfers of personal data outside of the EEA unless the transfer meets certain criteria.
Our third-party service providers are based in the EEA, so their processing of your personal data will not involve a transfer of data outside of the EEA.
If we do need to transfer your personal data out of the EEA, we will do our best to ensure a similar degree of security of data by ensuring that the non-EEA country has been deemed to provide an adequate level of protection for personal data by the European Commission. If we use providers based in the United States, we will only transfer data to them if they are part of the EU-US Privacy Shield which requires them to provide similar protection to personal data shared between Europe and the US.
If no safeguards are available, we will request explicit consent to the transfer and you have the right to withdraw this consent at any time.
7Data Security: We have put in place appropriate security measures and will take reasonable steps to protect your personal data from misuse, loss and from unauthorised access, modification, or disclosure.
All company employees have access to and are required to comply with our data protection policy to minimise the risk of your personal data being compromised.
We have also put in place procedures to deal with any suspected data breaches and we will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
Our policies, procedures and IT systems are reviewed regularly to ensure that your personal data is stored safely and that we have adequate protection from cyber-threats.
8Your legal rights: Under certain circumstances by law you have right to:
- Request access to your personal data
- Request correction of your personal data
- Request erasure of your personal data
- Object to processing of your personal data
- Request restriction of processing your personal data
- Request transfer of your personal data
- Right to withdraw consent
If you wish to exercise any of these rights, then please contact us.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your rights to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer if your request is particularly complex or you have made a number of requests. In this case we will notify you and keep you updated.
9Changes to this notice: Any changes we make to our privacy notice in the future will be provided to you at the next point of data collection and will be updated on our website www.pjdtax.co.uk
This privacy notice was last updated on 24th May 2018.
Data protection Manager: Warwick Wilson
Telephone: 020 3861 2944
Email: warwick@pjdtax.co.uk