Privacy notice

What we do with your personal information, in plain words.

This page is a draft and will be reviewed before launch. Items marked [TBC] are not confirmed yet.

Who we are

GHZ Trading Group Limited, trading as GHZ Accountants, is the controller of your personal information. That means we decide how and why it is used. We are registered in England and Wales, company number 16881543.

To ask about your information, call 07732 963870 or email [TBC: email]. Our legal page has our other details.

Our registration with the Information Commissioner's Office (ICO): ZC277699.

What we collect

  • Enquiry form. Your name, your phone number or email address, the service you ask about and your message.
  • Calls and WhatsApp messages. Your phone number, your name if you give it, and what you tell us.
  • Client records. If you become a client, we also hold the details we need to do the work. These include contact details, identity documents, bank statements, income, accounts, tax and HMRC records. If you send us payroll data, we hold that too. We also keep any other information you give us.
  • Website use. We plan to count page visits with Cloudflare Web Analytics, which sets no cookies. The enquiry form uses Cloudflare Turnstile, a spam check. Our cookie notice has the detail.

We get this information from you. For clients, we may also get it from HMRC and Companies House, with your authority.

Why we use it, and our lawful basis

UK data protection law requires us to have a lawful basis for each use.

  • To answer your enquiry and send you a quote. Our legitimate interest in replying to people who contact us. Where you ask us to take steps before you become a client, we also rely on contract.
  • To do your accounts and tax work. Contract: we need the information to carry out the work you hire us for.
  • To check who you are and meet money laundering rules. Legal obligation, under the Money Laundering Regulations 2017.
  • To file with HMRC and Companies House. Contract, and legal obligation where the law requires the filing.
  • To keep this website secure. Our legitimate interest in stopping spam and abuse.
  • To see which pages are read. Our legitimate interest in improving the site, using cookie-free totals.

We do not make decisions about you using automated processing.

Who we share it with

  • HMRC and Companies House, when we file or correspond for you.
  • Cloudflare, which hosts this website, provides the cookie-free visitor statistics and runs the Turnstile spam check on our enquiry form.
  • Resend, which sends us the email when you use the enquiry form.
  • Our email provider: Gmail (Google).
  • Our file-storage provider: [TBC: file-storage provider].
  • Our accounting software: [TBC: accounting software].
  • Any e-signature or payment tool we use: [TBC: e-signature or payment tool, if any].
  • Our supervisory body, AAT, if it asks to inspect our records.
  • Law enforcement or the courts, where the law requires it.

Other suppliers, if any: [TBC: other processors].

Sending information abroad

We store client records in the UK only. We do not store them outside the UK.

Cloudflare and Resend handle website visits and enquiry-form emails, and may process that information outside the UK. [TBC: the safeguard used for that transfer]

How long we keep it

  • Identity checks and transaction records. Five years from the end of our business relationship with you. This is the period set by regulation 40 of the Money Laundering Regulations 2017. After that we delete the personal data we collected for those checks, unless the law lets us keep it.
  • Enquiries that do not become work. 12 months from your last message.
  • Other client records. 6 years after we stop working together. Six years is the time limit for most legal claims under section 5 of the Limitation Act 1980, and it lets us answer HMRC questions about returns we filed.
  • Website enquiry form messages. 12 months, unless you become a client. Messages are sent to us by email through Resend.

Your rights

You can ask us to:

  • give you a copy of your information;
  • correct information that is wrong;
  • delete your information, where the law allows;
  • restrict how we use it;
  • send it to you or another provider in a usable format, where this right applies;
  • stop using it for our legitimate interests.

We will reply within one month, as the law requires. Some rights have limits. We cannot delete records we must keep to meet money laundering rules, for example. To use a right, call or email us as above.

If you are unhappy

Tell us first and we will try to put it right. You can also complain to the ICO, the UK data protection regulator, on its data protection complaints page.

Cookies

Our cookie notice explains what this website stores on your device.

Sources

Checked on 18 October 2026.