Who are we?

Graham Smith Chartered Accountants based at Cardrew House, Cardrew Industrial Estate, Redruth, TR15 1SP have created this Privacy Notice to offer transparency and clarity about what personal data we process and how we use your personal data when you are a client of ours or browsing our website. We are registered with the ICO ZA504583 and we have a Cyber Essentials certificate.

If you have any questions about this Privacy Notice, you can contact us at [email protected]

We are a Data Controller when we deal with our own clients, potential client, or website users’ data or, however in some circumstances we are a Data Processor when we are engaged to assist our clients with their payroll needs.

Our website is not intended to, and we do not knowingly, collect data relating to children.

What are your rights?

You have several rights which you can access free of charge. In certain circumstances we reserve the right to charge a reasonable fee if your requests are unfounded or excessive.

You have the right:

  • Right of access: You can request access to a copy of the personal data which we hold about you as well as details about why and how we use your data.
  • Right to rectification: You can ask us to change or complete any personal data we hold about you which is inaccurate or incomplete.
  • Right to be forgotten/erasure: You have a right, under certain circumstances to ask us to delete any personal data we hold about you. Please note that there may be situations where we must retain your personal data after a request for erasure where we have a lawful basis for doing so.
  • Right of restriction: You can ask us to restrict (i.e.: prevent) the processing of your personal data where you have objected to our use of it, and we have no lawful basis to continue processing your personal data.
  • Right to data portability: In certain circumstances, you can ask us to transfer the data we hold about you to another. This would be sent in a structured, commonly used, electronic form.
  • Right to object: You can object to us using your personal data for particular purposes.
  • Automated decision making: You have a right not to be subjected to automated decision making and profiling in certain circumstances.

For more information about these rights and when you can request them, please visit the Information Commissioners Guide to Data Subject Rights

If you wish to exercise any of these rights, please contact us at [email protected]. We will respond to you within one month. If your request is complex and we require more time, we will contact you and let you know within the first month.

How can you submit a query or a complaint?

We are always happy to answer your queries regarding privacy. Please contact us at [email protected]

If you have a complaint, please get in touch with us so that we can resolve any concerns. You also have a right to lodge a complaint with the Information Commissioners Office if you believe your personal data has been processed in a way which does not comply with Data Protection Legislation. You can call the ICO helpline on 0303 123 1113 or visit their website here.

More information about our organisation and this privacy notice.

If Graham Smith Chartered Accountants is sold or transfers its assets to another party, your personal data could be one of the transferred assets. If your personal data is transferred it will remain subject to this Privacy Notice. Your personal data will be passed onto a successor in the event of a liquidation or administration. We will contact you in advance to let you know about any changes.

Any staff with access to your information have a duty of confidentiality and have been trained in data protection law.

We keep this Privacy Notice under regular review. The most recent update is November 2023.

How do we process your personal data?

So that we can provide a service to you need to process some of your personal data. We make sure that we only collect what we need and have outlined below the various ways in which we process your personal data. Please select the section which best describes your relationship with our organisation to find out more.

I am a visitor to your website

We use cookies on our website which collect various types of personal data. This will include details about your visits to our website; page views, downloads, navigation, and exit; IP address; geographical location; browser type and version; operating system; referral source; length of your visit.

Some of these cookies are necessary to ensure that the website works correctly, and other cookies require your consent. You can find out more about our cookies and how you can manage your consent in our cookie policy here.

Our website may contain links to other external websites. We aren’t responsible for the practices, policies or content of such websites and suggest that you check their privacy policies to ensure that you are happy to continue browsing.

You may have sent us an enquiry via the contact page on our website. We will collect your name and contact details as it’s in our legitimate interest to do so that we can enter into correspondence with you and answer your enquiry.

How long do we keep your personal data for?

If you have consented to non-essential cookies, we will process your data in line with our Cookie Policy and your choices presented to you when you view our website. You can update your preference on our Cookies Consent Management Platform.

Who do we share your personal data with?

We share your personal data with various organisations so that we can run our business and to fulfil our legal obligations. We only share your personal data where necessary or required by law. Our website has a contact us page, and your personal data may be accessed by those who manage our website and domain.

We ensure that our systems are robust, and we will only share your data with organisations who have appropriate safeguarding mechanisms in place such as Standard Contractual Clauses. We have Data Processing Agreements with our Data Processors and never sell personal data to third parties.