Privacy notice | GHZ Accountants

This page is a draft and will be reviewed before launch. Items marked [TBC] are not confirmed yet.

Who we are

GHZ Trading Group Limited, trading as GHZ Accountants, is the controller of your personal information. That means we decide how and why it is used. We are registered in England and Wales, company number [TBC: company number].

To ask about your information, call 07732 963870 or email [TBC: email]. Our legal page has our other details.

Our registration with the Information Commissioner's Office (ICO): [TBC: ICO registration number].

What we collect

Enquiry form. Your name, your phone number or email address, the service you ask about and your message.
Calls and WhatsApp messages. Your phone number, your name if you give it, and what you tell us.
Client records. If you become a client, we also hold the details we need to do the work. These include contact details, identity checks, income, accounts, tax and HMRC records. [TBC: list the exact categories we hold]

We get this information from you. For clients, we may also get it from HMRC and Companies House, with your authority.

Why we use it, and our lawful basis

UK data protection law requires us to have a lawful basis for each use.

To answer your enquiry and send you a quote. Our legitimate interest in replying to people who contact us. Where you ask us to take steps before you become a client, we also rely on contract.
To do your accounts and tax work. Contract: we need the information to carry out the work you hire us for.
To check who you are and meet money laundering rules. Legal obligation, under the Money Laundering Regulations 2017.
To file with HMRC and Companies House. Contract, and legal obligation where the law requires the filing.
To keep this website secure. Our legitimate interest in stopping spam and abuse.

We do not make decisions about you using automated processing.

HMRC and Companies House, when we file or correspond for you.
Xero, which acts as our processor when we keep your books in Xero.
Cloudflare, which hosts this website and provides the spam check on our enquiry form.
Our email provider: [TBC: email provider].
Our supervisory body, AAT, if it asks to inspect our records.
Law enforcement or the courts, where the law requires it.

Other suppliers, if any: [TBC: other processors, such as practice software, storage and a card or bank payment provider].

Sending information abroad

Some of these suppliers may process information outside the UK. [TBC: where each supplier processes data, and the safeguard used]

How long we keep it

Identity checks and transaction records. Five years from the end of our business relationship with you. This is the period set by regulation 40 of the Money Laundering Regulations 2017. After that we delete the personal data we collected for those checks, unless the law lets us keep it.
Enquiries that do not become work. [TBC: retention period]
Other client records. [TBC: retention period]
Website enquiry form messages. [TBC: retention period and where they are stored]

Your rights

You can ask us to:

give you a copy of your information;
correct information that is wrong;
delete your information, where the law allows;
restrict how we use it;
send it to you or another provider in a usable format, where this right applies;
stop using it for our legitimate interests.

We will reply within one month, as the law requires. Some rights have limits. We cannot delete records we must keep to meet money laundering rules, for example. To use a right, call or email us as above.

If you are unhappy

Tell us first and we will try to put it right. You can also complain to the ICO, the UK data protection regulator, on its data protection complaints page. Our own complaints procedure covers everything else.

Cookies

Our cookie notice explains what this website stores on your device.

Sources

Checked on 18 October 2026.