obtain, store and use your personal information in accordance with the General Data
Protection Regulation (GDPR), the Data Protection Act 2018 and any other national
implementing laws, regulations and secondary legislation, as amended or updated from time
to time, in the UK (‘Data Protection Legislation’), when you are a client, interact with us,
visit our website – www.integrityafs.co.uk– or where we otherwise obtain or collect your
Integrity Accounting & Forensic Solutions Limited registered in England & Wales company
Number 08630724. The company is what is known as a ‘controller’ of the personal data you
provide to us and the Data Protection Officer is:
Telephone: 01822 259593
How we collect or obtain personal information about you
We collect information about you from different places including:
directly from you
from a third party acting on your behalf e.g. an intermediary or broker
from publicly available sources, e.g Companies House
when we generate it
from other organisations
Personal information we collect or obtain about you
The information we collect includes:
Name and contact details, such as an address, email and telephone number
Employment and payroll history
Taxation information and history
Information about your circumstances and the matter you have asked us to deal
Financial information such as bank details, bank statements and details of
Details of contact we have had with you in relation to the provision, or the proposed
provision, of our services;
Details of any services you have received from us
Our correspondence and communication with you
Information about complaints and enquiries you make to us
Information from other sources such as publicly available information and information provided by third parties.
How is your personal information used
We will use the information to fulfill a contractual service as detailed in an engagement letter,
to meet legal obligations or for other purposes such as:
To confirm your identity and address
To carry out your instructions
To improve our services
To offer other services we believe may benefit you unless you ask us not to.
We may process your personal data for purposes necessary for the performance of our
contract with you or your employer or our clients and to comply with our legal
We may process your personal data for the purposes of our own legitimate interests
provided that those interests do not override any of your own interests, rights and
freedoms which require the protection of personal data. This includes processing for
marketing, business development, statistical and management purposes.
We may process your personal data for certain additional purposes with your consent,
and in these limited circumstances where your consent is required for the processing
of your personal data then you have the right to withdraw your consent to processing
for such specific purposes.
Please note that we may process your personal data for more than one lawful basis
depending on the specific purpose for which we are using your data.
In some circumstances we may anonymise or pseudonymise the personal data so that
it can no longer be associated with you, in which case we may use it without further
notice to you.
If you refuse to provide us with certain information when requested, we may not be
able to perform the contract we have entered into with you. Alternatively, we may be
unable to comply with our legal or regulatory obligations.
We may also process your personal data without your knowledge or consent, in
accordance with this notice, where we are legally required or permitted to do so
How long do we store your personal information
We will only retain your personal data for as long as is necessary to fulfil the purposes for
which it is collected.
When assessing what retention period is appropriate for your personal data, we take into
The requirements of our business and the services provided;
Any statutory or legal obligations;
The purposes for which we originally collected the personal data;
The lawful grounds on which we based our processing;
The types of personal data we have collected;
The amount and categories of your personal data; and
Whether the purpose of the processing could reasonably be fulfilled by other means.
Why might you share my personal data with third parties?
We will share your personal data with third parties where we are required by law,
where it is necessary to administer the relationship between us or where we have
another legitimate interest in doing so.
Which third-party service providers process my personal data?
“Third parties” includes third-party service providers. The following activities are
carried out by third-party service providers: IT services, professional advisory
services, marketing services and banking services.
All of our third-party service providers are required to take commercially reasonable
and appropriate security measures to protect your personal data. We only permit our
third-party service providers to process your personal data for specified purposes and
in accordance with our instructions.
What about other third parties?
We may share your personal data with other third parties, for example in the context
of the possible sale or restructuring of the business. We may also need to share your
personal data with a regulator or to otherwise comply with the law.
Transferring personal data outside the European Economic Area
We will only transfer the personal data we collect about you outside of the EEA to
you in order to perform our contract with you.
How we secure your personal information
We have data protection policies in place to ensure our compliance with the data protection
laws and that your personal data is controlled and processed securely. . In addition, we limit
access to your personal data to those employees, agents, contractors and other third parties
Who has a business need to know. They will only process your personal data on our
instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will
notify you and any applicable regulator of a suspected breach where we are legally required
to do so.
Cookies are small text files that are placed on your computer by websites that you visit. They
are widely used to make websites work, or work more efficiently, as well as to provide
information to the owners of the site. Depending on the browser you use you should be able
to control what cookies are placed on your device through the browser settings. You can find
out about cookies, how to see what cookies have been set, how to manage and delete them
We do not store any personal data in the cookies that we use and store your information
Your rights in relation to your personal information
You have a number of rights relating to your information:
The right to be informed about the processing of your personal data
The right to have the personal data corrected if it is inaccurate and to have incomplete
personal data completed
The right to object to the processing of your personal data
The right to restrict processing of your personal data
The right to have your personal data erased or forgotten
The right to request access to your personal data and information about how we
The right to move, copy or transfer your personal data.
Changes to your information and how to complain
If at any point you believe the information we process about you is incorrect, you can
exercise your rights as listed below and we will action your requests, subject to our legal
responsibilities. If you wish to make a complaint about how we have handled your personal
data, then do please contact our data protection officers via the contact details supplied above.
If you are not satisfied with how we deal with your complaint or believe we are processing
your personal data not in accordance with the data protection laws, you can complain to the
Information Commissioner’s Office at www.ico.org.uk.
Your rights in connection with personal data
Under certain circumstances, by law you have the right to:
Request access to your personal data. This enables you to receive details of the
personal data we hold about you and to check that we are processing it lawfully.
Request correction of the personal data that we hold about you.
Request the erasure of your personal data. This enables you to ask us to delete or remove
personal data where there is no good reason for us continuing to process it. You also
have the right to ask us to delete or remove your personal data where you have
exercised your right to object to processing (see below).
Object to processing of your personal data where we are relying on a legitimate
interest (or those of a third party) and there is something about your particular
situation which makes you want to object to processing on this basis. You also have
the right to object where we are processing your personal information for direct
Request the restriction of processing of your personal data. This enables you to ask us
to suspend the processing of personal data about you, for example if you want us to
establish its accuracy or the reason for processing it.
Request the transfer of your personal data to you or another data controller if the
processing is based on consent, carried out by automated means and this is technically
Review of this Policy
We keep this policy up to date and it was last updated in July 2023.