Privacy Policy

1. Introduction

Charity Accounting Partners ("CAP", "we", "us", "our") is committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you use our website and services. We are registered in England and Wales and act as the data controller for the personal information we process.

2. Information We Collect

We may collect the following types of personal data:

• Name and contact information (email address, telephone number)
• Organisation details (charity name, registered charity number, size, sector)
• Information you provide through forms, enquiries, and correspondence
• Website usage data including IP addresses, browser type, and pages visited
• Information collected through cookies and similar technologies

3. Lawful Basis for Processing

Under UK GDPR, we process your personal data on the following lawful bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legitimate interests: Where processing is necessary for our legitimate interests (such as improving our services) provided these do not override your rights
• Legal obligation: Where processing is necessary to comply with UK law

4. How We Use Your Information

We use your information to:

• Respond to your enquiries and provide our accountancy and finance services
• Send relevant communications, updates, and marketing (where you have opted in)
• Improve our website and services
• Comply with legal and regulatory obligations, including requirements of the Charity Commission for England and Wales
• Prevent fraud and maintain security

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements under UK law. For client records, we typically retain data for seven years after the end of our engagement, in line with professional accounting standards and HMRC requirements.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure data storage, and regular security assessments in accordance with UK GDPR requirements.

7. International Transfers

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place as required by UK data protection law. This may include transfers to countries with adequacy decisions or the use of Standard Contractual Clauses approved by the Information Commissioner's Office (ICO).

8. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data to another organisation
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making: Not be subject to decisions based solely on automated processing

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month, as required by UK law.

9. Cookies

Our website uses cookies to improve your experience and analyse website traffic. You can control cookie settings through your browser. For more information about the cookies we use, please refer to our cookie settings.

10. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. You can contact the ICO at ico.org.uk or by calling their helpline on 0303 123 1113.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website with a new "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us at: