Privacy Policy — Acumen Accountants London UK

Introduction

1.1 Purpose of This Privacy Policy

Welcome to Acumen Accountants & Tax Advisers Ltd (“we,” “us,” or “our”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we look after your personal data when you engage our services, visit our website, or otherwise interact with us. It also tells you about your privacy rights and how the law protects you.

1.2 Who We Are

We act as a “data controller” under the relevant Data Protection Legislation, which includes the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Company Name: Acumen Accountants & Tax Advisers Ltd

Registered Company Number: 10956078

Registered Office: 37th Floor, 1 Canada Square, London, England, E14 5DY

1.3 Contact Details

We would appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance. You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Data Protection Officer: Md Mahabubul Alam Khan

Email: info@acumenagc.com

Telephone: +44(0)-7852806969

Postal Address: 37th Floor, 1 Canada Square, London, England, E14 5DY

02. Scope and Important Information

2.1 Who This Policy Applies To

This Privacy Policy applies to our clients, prospective clients, website users, suppliers, service providers, and any other individuals whose personal data we process in the course of our business activities. This includes data collected both online and offline.

2.2 Changes to This Policy and Your Duty to Inform Us

We may revise this Privacy Policy from time to time. The most current version will always be posted on our website. Please check back periodically to keep informed of any updates. It is important that the personal data we hold about you is accurate and current — please keep us informed if your personal data changes.

2.3 Third-Party Links

Our website may include links to third-party websites, plug-ins, or applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third parties and are not responsible for their privacy statements. We encourage you to read the privacy policy of every website you visit.

03. What Personal Data We Collect

3.1 Types of Personal Data

Depending on our engagement with you, we may collect, use, store, and transfer the following kinds of personal data:

• Identity Data: First name, last name, date of birth, marital status, and national identifiers such as National Insurance Number and Unique Tax Reference (UTR)
  
  
• Contact Data: Postal address, email address, and telephone number(s)
  
  
• Financial Data: Bank account details, payment card details, and transaction history
  
  
• Technical Data: IP address, browser type and version, time zone setting, operating system, device identifiers, and other technology on the devices you use to access our website
  
  
• Profile Data: Username, password (if applicable), purchases or orders made by you, your preferences, feedback, and survey responses
  
  
• Usage Data: Information about how you use our website and services, including pages visited and duration of visits
  
  
• Marketing and Communications Data: Preferences in receiving marketing materials and your communication preferences

We do not routinely collect any Special Categories of Personal Data (such as details about race, ethnicity, religious beliefs, sexuality, health, or biometric data) unless required by law or you voluntarily provide such information and we have a lawful basis to process it.

3.2 How We Collect Your Personal Data

We collect personal data through the following methods:

• Direct interactions: When you fill in forms, request our services, or correspond with us by post, phone, email, or otherwise
  
  
• Automated technologies: When you interact with our website, we may automatically collect technical data via cookies, server logs, and similar technologies
  
  
• Third parties or publicly available sources: We may receive personal data from analytics providers such as Google, or from identity verification and anti-money laundering check providers

04. How We Use Your Personal Data

4.1 Lawful Basis for Processing

Under the Data Protection Legislation, we must have a lawful basis to process your personal data. Depending on the situation, we may rely on:

• Performance of a Contract (Article 6(1)(b)): Where processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract
  
  
• Legal Obligation (Article 6(1)(c)): Where we need to comply with a legal or regulatory obligation, such as anti-money laundering checks or HMRC reporting
  
  
• Legitimate Interests (Article 6(1)(f)): Where processing is necessary for our legitimate interests, unless overridden by your fundamental rights and freedoms
  
  
• Consent (Article 6(1)(a)): Where you have given clear consent for us to process your personal data for a specific purpose — you can withdraw your consent at any time

4.2 Purposes of Processing

We may process your personal data for the following purposes:

• Provision of Services: To register you as a client, carry out our contractual obligations, and deliver accounting, tax, and related advisory services
  
  
• Client Management: To manage our relationship with you, including billing, fees, and payments
  
  
• Legal Compliance: To comply with our legal obligations, including anti-money laundering regulations and HMRC/Companies House requirements
  
  
• Marketing & Communications: To send you updates about our services or other information that may be of interest to you, provided you have not opted out
  
  
• Website Administration: To administer and protect our website and business, including troubleshooting, data analysis, and system maintenance
  
  
• Analytics: To use data analytics to improve our website, services, marketing, and user experience

We will not use your personal data for new, unrelated purposes without first obtaining your consent or having another lawful basis for the processing.

05. Disclosure of Your Personal Data

5.1 Internal Disclosures

We may share your personal data within our organisation to staff members who need it to fulfil our contractual or legal obligations.

5.2 External Disclosures

We will never sell or rent your personal data to third parties for marketing purposes. However, we may disclose your personal data to:

• Service Providers: Trusted third parties who provide IT, payment, cloud, marketing, or other business support services under written contract
  
  
• Professional Advisers: Lawyers, bankers, auditors, and insurers who provide consultancy, legal, insurance, and accounting services
  
  
• Regulatory & Legal Authorities: HMRC, Companies House, law enforcement agencies, or other authorities where required by law or to protect our legal rights
  
  
• Business Transfers: If we merge, sell, or reorganise some or all of our business or assets, we may transfer your personal data to the prospective buyer or merged entity

All third-party service providers are subject to data protection obligations and may only process your personal data for specified purposes and in accordance with our instructions.

06. International Transfers

We generally store and process personal data within the UK or the European Economic Area (EEA). If we need to transfer your data outside the UK/EEA, we will ensure that appropriate safeguards — such as Standard Contractual Clauses or an adequacy decision — are in place to protect your personal data.

07. Data Security

We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorisation. These measures include:

• Secure servers and firewalls
• Data encryption and secure file transfer protocols
• Restricted access controls and password policies
• Regular cyber-security assessments and staff training

We also have procedures in place to deal with any suspected data breach and will notify you and any applicable regulator where we are legally required to do so.

08. Data Retention

8.1 Retention Period

We will retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

8.2 Determining Retention Period

To determine the appropriate retention period, we consider the:

• Nature and sensitivity of the data
• Potential risk of harm from unauthorised use or disclosure
• Purposes for which we process the data
• Applicable legal and regulatory obligations, including HMRC record-keeping requirements

8.3 Data Deletion

Once retention periods expire or the purpose for processing no longer applies, your personal data will be securely destroyed or anonymised.

09. Your Legal Rights

Under certain circumstances, you have the following rights regarding your personal data:

• Access: Request access to your personal data and receive a copy (commonly known as a Subject Access Request)
  
  
• Correction: Request correction of incomplete or inaccurate data we hold about you
  
  
• Erasure (“Right to be Forgotten”): Ask us to delete or remove your personal data where there is no good reason for us to continue processing it
  
  
• Objection: Object to processing where we rely on legitimate interests, or where we process your data for direct marketing purposes
  
  
• Restriction: Request that we restrict processing of your personal data in certain circumstances, such as where you contest its accuracy
  
  
• Data Portability: Request that we transfer your personal data to you or a third party in a structured, commonly used, machine-readable format
  
  
• Withdraw Consent: Where we rely on consent, you may withdraw it at any time — this will not affect the lawfulness of processing carried out before withdrawal

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 1.3. You will not ordinarily have to pay a fee. We may however charge a reasonable fee if your request is manifestly unfounded, repetitive, or excessive.

10. Cookies and Tracking Technologies

10.1 Use of Cookies

Our website uses cookies and similar technologies to distinguish you from other users, improve your experience, and compile statistical data about site usage. Cookies are small text files stored on your device. They help us:

• Understand usage patterns
• Remember your preferences
• Improve site functionality and speed

10.2 Managing Cookies

You can set your browser to refuse all or some cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, some parts of our website may become inaccessible or not function properly.

10.3 Third-Party Analytics

We may use Google Analytics or similar tools to analyse website traffic. These tools use cookies to collect anonymous information about how visitors use our website. You can opt out of Google Analytics tracking at any time at https://tools.google.com/dlpage/gaoptout.

11. Marketing Communications

11.1 Promotional Messages

We may send you marketing communications if:

• You have specifically requested information from us
• You have purchased services from us and have not opted out of receiving marketing messages

11.2 Opting Out

You can ask us to stop sending marketing communications at any time by clicking the “unsubscribe” link in any email or by contacting us directly. Please note you will still receive transactional messages related to your active engagements with us.

12. Complaints and Contact

12.1 Contacting Us

If you have any questions, concerns, or complaints about how we handle your personal data, please contact our Data Protection Officer:

Email: info@acumenagc.com

Telephone: +44(0)-7852806969

Address: 37th Floor, 1 Canada Square, London, England, E14 5DY

12.2 Complaints to the ICO

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe we have not complied with applicable data protection laws. We would, however, appreciate the chance to address your concerns before you approach the ICO. You can contact the ICO at www.ico.org.uk.

13. Updates to This Policy

We reserve the right to modify or update this Privacy Policy at any time. Any changes will be posted on this page with an updated date at the top. Please review this page periodically to stay informed.

This Privacy Policy was last updated on 17 February 2026.