1. Data Controller Information
M & M Business Accountants Ltd (trading under the brand name myTaxAnalyst, "we", "us", or "our") is a firm of ICAEW Chartered Accountants registered in England and Wales, company number 05660093. Registered office: Boundary House, Boston Road, London W7 2QE. Director: Nitu Mittal, ACA.
We act as Data Controller for the personal data provided to us during the course of providing accountancy, tax advisory, and statutory compliance services.
2. Information We Collect
In order to provide professional tax and accountancy services, we collect and process:
- Identity Data: Full name, date of birth, National Insurance number, Unique Taxpayer Reference (UTR), passport or driving licence copies for AML verification.
- Contact Data: Residential and business address, email address, telephone numbers.
- Financial & Business Data: Bank accounts, payroll information, dividend vouchers, company accounts, property portfolios, mortgage statements, transaction records, and capital gains details.
- HMRC Correspondence: Prior year tax returns (CT600, SA100), coding notices, compliance enquiry letters, and digital tax accounts.
3. Legal Basis for Processing Under UK GDPR
We process your personal information under the following lawful bases:
- Contractual Performance (Article 6(1)(b)): To deliver the accounting, tax calculation, and advisory services set out in our Letter of Engagement.
- Legal Obligation (Article 6(1)(c)): To comply with statutory filing requirements with HMRC and Companies House, and to satisfy anti-money laundering regulations under the Money Laundering Regulations 2017 (MLR 2017).
- Legitimate Interests (Article 6(1)(f)): For the proper management, administration, and professional quality control of our practice.
4. How We Use & Share Your Data
We do not sell, rent, or trade your personal data. We only disclose information to third parties in the necessary execution of our professional duties:
- HMRC & Companies House: Direct submission of CT600 Corporation Tax returns, Self-Assessments, VAT returns, and statutory accounts via secure digital APIs.
- Regulatory Bodies: The Institute of Chartered Accountants in England and Wales (ICAEW) for professional quality monitoring and practice reviews.
- Approved Software Vendors: Accounting, document-management, email and AML screening providers as needed to deliver the agreed services, subject to appropriate contractual and data-protection arrangements.
5. Data Retention & Security
We retain information for as long as needed for the relevant service, legal and regulatory requirements, and the establishment or defence of claims. Retention periods depend on the record type. Unsuccessful enquiries are reviewed and deleted when no longer needed.
We use appropriate technical and organisational measures to protect personal information. Access is restricted to those who need it for the relevant work. No system can guarantee absolute security.
6. Your Rights Under UK GDPR
You have the right to request access to your personal data, rectification of inaccurate information, erasure where retention is no longer statutorily mandated, and restriction or objection to certain processing.
To exercise any of these rights, please contact our practice at enquiry@taxclvr.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Website enquiries and service providers
The enquiry form prepares an email on your device; it does not submit your details to a website booking system. We receive the information when you send the email. Please do not include identity documents, bank details, National Insurance numbers or UTRs in an initial enquiry.
Website hosting, email and professional software providers may process information to operate their services. Where a provider transfers personal information outside the UK, the applicable safeguards must be assessed for that arrangement. Contact us for information about the providers used for your engagement.
You may also have a right to data portability and to withdraw consent where processing relies on consent. Rights are subject to applicable exemptions. We do not use the enquiry form to make automated decisions about you.
This website loads styling, icons and fonts from external providers, which may receive connection information such as your IP address. Any future non-essential cookies or tracking must be assessed and appropriate consent controls implemented.