Privacy Notice

How we collect, use, and protect your personal data.

UK General Data Protection Regulation (UK GDPR) & Data Protection Act 2018
Version 1.0 · June 2026 · MR Accounting & Tax, 5 Darrell Road, Richmond, TW9 4LF

This Privacy Notice explains how MR Accounting & Tax (“we”, “I”, “us”) collects, uses, stores, and protects your personal data. It also sets out your rights under data protection law. Please read this notice carefully before or at the time we begin working together.

1. Who we are (data controller)

MR Accounting & Tax is a sole trader business operated by Marcin Rusiecki, registered at 5 Darrell Road, Richmond, London, TW9 4LF. We are the data controller for the personal data we hold about you.

Contact: contact@mraccounting.co.uk · 07519 073 327

2. Personal data we collect

We may collect and process the following categories of personal data:

  • Identity data: full name, date of birth, National Insurance number, Unique Taxpayer Reference (UTR), passport or driving licence number.
  • Contact data: home address, email address, telephone number.
  • Financial data: income details (salary, self-employment income, rental income, investment income), bank account details where necessary for payment of fees, expense records, pension contributions.
  • Tax data: previous tax returns, P60s, P11Ds, HMRC correspondence, Self Assessment records.
  • Business data (where applicable): business income and expenditure records, invoices, receipts, VAT records.
  • Anti-money laundering data: copies of identity documents and proof of address collected in compliance with our obligations under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLR 2017).

3. How we collect your data

We collect personal data:

  • Directly from you: when you contact us, complete our onboarding form, or provide documents in connection with our services.
  • From HMRC: correspondence, notices, and information shared through the HMRC agent authorisation process.
  • From third parties: previous accountants or advisers you instruct to transfer records to us.

4. Lawful basis for processing

We process your personal data on the following lawful bases:

  • Contractual necessity: to perform our obligations under the Letter of Engagement you have signed with us.
  • Legal obligation: to comply with tax law, anti-money laundering legislation, and other regulatory requirements.
  • Legitimate interests: to manage our business, prevent fraud, and improve our services, where these interests are not overridden by your rights.
  • Consent: where we collect any data that is not strictly necessary for the above purposes, we will ask for your explicit consent.

5. How we use your data

Your personal data is used solely to:

  • Provide the accountancy and tax services agreed in the Letter of Engagement.
  • Communicate with HMRC on your behalf (once you have authorised us as your agent).
  • Comply with our anti-money laundering obligations, including identity verification and suspicious activity reporting.
  • Issue invoices and collect payment for our services.
  • Maintain accurate business records as required by law.

We will never sell, rent, or share your personal data for marketing purposes.

6. Who we share your data with

We may share your personal data with:

  • HMRC: as required to carry out the agreed tax services and as required by law.
  • The National Crime Agency (NCA): if we are legally required to make a Suspicious Activity Report under MLR 2017.
  • IT service providers: cloud storage and accountancy software providers used to process client data, subject to appropriate data processing agreements.
  • Professional advisers: our own legal or professional advisers, subject to confidentiality.

We do not transfer your personal data outside the United Kingdom without adequate safeguards in place.

7. How long we keep your data

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. As a guide:

  • Tax records and engagement files: six years from the end of the relevant tax year, as required by HMRC.
  • Anti-money laundering records: five years from the end of the business relationship, as required by MLR 2017.
  • Invoices and financial records: six years, as required for VAT and income tax purposes.

After these periods, we will securely delete or anonymise your personal data.

8. Your rights

Under UK GDPR, you have the following rights:

Right What it means
Right of access You may request a copy of the personal data I hold about you.
Right to rectification You may ask me to correct inaccurate data.
Right to erasure You may ask me to delete your data where there is no overriding legal basis for retention.
Right to restrict processing You may ask me to limit how I use your data in certain circumstances.
Right to data portability You may ask me to provide your data in a structured, commonly used format.
Right to object You may object to processing based on legitimate interests.
Right to withdraw consent Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us in writing at contact@mraccounting.co.uk. We will respond within one calendar month. There is no charge for making a request, unless the request is manifestly unfounded or excessive.

9. Automated decision-making

We do not use automated decision-making or profiling in connection with your personal data.

10. How we protect your data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include password-protected systems, encrypted file storage, and limited access to client files. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office (ICO) within 72 hours and inform you without undue delay.

11. Complaints

If you have concerns about how we handle your personal data, please contact us in the first instance at contact@mraccounting.co.uk. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

ICO website: ico.org.uk · Helpline: 0303 123 1113
Address: ICO, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

12. Changes to this notice

We may update this Privacy Notice from time to time. Where changes are material, we will notify you by email or in writing before the changes take effect. The current version of this notice is always available on request.

MR Accounting & Tax · 5 Darrell Road, Richmond, TW9 4LF · contact@mraccounting.co.uk · 07519 073 327