PRIVACY POLICY

Nicholls Tax Advisory is committed to protecting the privacy and confidentiality of every person who visits this website or engages the business for tax advisory services. Discretion is fundamental to my approach, and that principle extends to how we handle personal data.

We collect personal data in the following circumstances:

If you submit an enquiry through our website contact form, we collect the information you provide, which may include your name, email address, telephone number, and the content of your message.

We automatically collect certain technical information when you visit the website, such as your IP address, browser type and device information. This information is used to help maintain the security and functionality of the website. See Section 6 (Cookies) for full detail.

If you engage us for advisory services, we collect a broader range of personal and financial information necessary to provide tax advice, including identity documents, tax residency status, income and asset information, and other data required for regulatory compliance (including anti-money laundering checks). This is governed by your engagement letter and handled with the highest standard of confidentiality.

We use personal data for the following purposes, each with a corresponding lawful basis under UK GDPR:
‍
— To respond to enquiries submitted via the contact form - lawful basis: legitimate interest in providing the information requested, and steps taken prior to entering a contract.
— To provide advisory and compliance services to clients - lawful basis: performance of a contract, and legal obligation where regulatory requirements apply.
— To meet our legal and regulatory obligations, including anti-money laundering and professional body requirements - lawful basis: legal obligation.
— To protect the firm against fraud, unauthorised access, or misuse of our systems - lawful basis: legitimate interest.

We do not sell personal data. We share personal data only where necessary, with the following categories of recipient:
‍
— Microsoft 365 - our productivity and email platform, used to store and process correspondence and documents.
— Webflow - our website hosting provider, which processes technical data necessary to serve website content.
— Google Analytics / Google - our website analytics provider, used to understand how visitors use our website and to produce website usage statistics. Analytics data is processed in accordance with Google’s applicable data protection terms.
— Professional advisers, auditors, or regulatory bodies, where required by law or professional obligation. Where any processor is based outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or an adequacy decision, before data is transferred.

Our website uses cookies and similar technologies to ensure the website functions correctly and securely. Cookies are small text files placed on your device that help websites function.

These are necessary for the website to function correctly and securely. They cannot be switched off through our website and do not require consent under the Privacy and Electronic Communications Regulations (PECR).

We use Google Analytics to understand how visitors use our website and to help us improve its content, performance and user experience. Google Analytics may collect information such as pages visited, interactions with the website, approximate location and information about the device and browser used.Google Analytics uses cookies and similar technologies for these purposes. These are non-essential analytics technologies and are only used where you have provided your consent. You can accept or decline analytics cookies through our cookie consent banner. You can also withdraw or change your consent at any time using the cookie settings provided on our website. Further information about how Google processes data through Google Analytics is available in Google’s privacy information.

You can manage your cookie preferences through our cookie consent mechanism at any time. You can also control or delete cookies through your browser settings. Blocking or deleting cookies may affect the functionality of some parts of our website.

Under UK GDPR, you have the right to:
‍
— Access the personal data we hold about you.
— Request correction of inaccurate or incomplete data.
— Request erasure of your data, where applicable.
— Object to or restrict certain processing.
— Request that your data be provided in a portable format.
— Withdraw consent at any time, where processing is based on consent.
— Lodge a complaint with the Information Commissioner's Office (ico.org.uk) if you believe your data has been mishandled. To exercise any of these rights, please contact us using the details in Section 1. We will respond within one calendar month.

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including secure client portals, restricted access controls, and encrypted communication channels for sensitive correspondence.

We may update this policy from time to time to reflect changes in our practices or legal requirements. The 'last reviewed' date at the top of this policy indicates when it was last updated. We encourage you to review this page periodically.

If you have any questions about this policy or how we handle your personal data, please contact us at sadie@nichollstaxadvisory.co.uk