Privacy Policy

PRIVACY POLICY

Last Updated: 10/05/26
Entity: Unst Consulting
Location: Porthmadog, Pwllheli, Bangor, Llangefni, North Wales, United Kingdom

1. Introduction

Welcome to Unst Consulting ("we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal and financial data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.unstconsulting.com) and use our bookkeeping, accountancy, and administrative services.

By using our services, you consent to the data practices described in this policy.

2. Who We Are

Data Controller: Unst Consulting
Email: info@unstconsulting.com

Address: Serving North Wales, UK

3. Information We Collect

We collect information to provide our services effectively and comply with legal obligations. This includes:

A. Personal Information You Provide

• Identity Data: Name, job title, business name.
• Contact Data: Email address, telephone number, physical address.
• Financial Data: Bank account details, transaction records, invoices, receipts, payroll data, tax returns, and investment details necessary for bookkeeping and advisory services.
• Communication Data: Emails, call logs, and notes from meetings regarding your business.

B. Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address, browser type, and operating system.
• Pages visited and time spent on the site.
• Referral source (how you found us).
• Note: We use cookies for analytics and functionality. See Section 8.

4. How We Use Your Information

We process your data based on the following legal grounds:

1. Contractual Necessity: To perform our contract with you (e.g., processing your bookkeeping, filing VAT returns, managing payroll).
2. Legal Obligation: To comply with UK laws (e.g., HMRC requirements, anti-money laundering checks, tax legislation).
3. Legitimate Interests: To improve our services, prevent fraud, and communicate with you about your account.
4. Consent: For marketing communications (only if you have explicitly opted in).

5. Who We Share Your Data With

We do not sell your data. We only share it with:

• HMRC and Government Bodies: As required by law for tax filings and compliance.
• Software Providers: Secure cloud platforms we use to process your data (e.g., Xero, QuickBooks, Microsoft 365, Google Workspace). These providers are vetted for GDPR compliance.
• Professional Advisors: Your bankers, auditors, or solicitors, only with your explicit permission.
• Sub-contractors: Only if necessary for service delivery (e.g., a specialist tax advisor), and only under strict confidentiality agreements.

6. Data Security

We take the security of your data seriously. We implement:

• Encryption: All data transmitted between you and us is encrypted (SSL/TLS).
• Access Controls: Only authorized personnel (specifically, the designated consultant) have access to your files.
• Secure Storage: Data is stored on secure, password-protected cloud servers with two-factor authentication (2FA).
• Backups: Regular backups are performed to prevent data loss.

7. Data Retention

We retain your personal and financial data only for as long as necessary:

• Financial Records: Typically 6 years from the end of the relevant financial year, as required by HMRC and UK company law.
• Marketing Data: Until you unsubscribe or request deletion.
• Enquiry Data: If you contact us but do not become a client, we retain your details for up to 2 years to follow up on potential business, unless you request deletion sooner.

8. Cookies and Website Tracking

Our website uses cookies to enhance user experience and analyze traffic.

• Essential Cookies: Required for the site to function (e.g., contact forms).
• Analytics Cookies: Used to understand how visitors interact with our site (e.g., IONOS SiteAnalytics).
• Third-Party Translators: We use a third-party translation service. By using the translator, you consent to the data collection described in their privacy policy.

You can manage your cookie preferences via the banner on our website or through your browser settings.

9. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of the data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data ("Right to be Forgotten"), subject to legal retention requirements.
• Restriction: Limit how we use your data.
• Portability: Receive your data in a structured, machine-readable format.
• Object: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent at any time where we rely on consent to process your data.

To exercise these rights, please contact us at info@unstconsulting.com. We will respond within one month.

10. International Transfers

Most of your data is processed within the UK. If we use cloud services hosted outside the UK (e.g., in the EU or USA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), to protect your data.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a new "Last Updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Unst Consulting
info@unstconsulting.com
+44 0739 542 3801