Privacy Policy
NVH Accountants & Consultants Ltd — how we handle your personal data.
Last updated: March 2026
Who We Are
NVH Accountants & Consultants Ltd (trading as NVH Intelligence Consultants) is a company registered in England and Wales. Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ.
We are the data controller for personal data collected through this website and in the course of providing our services to clients.
For all data-related enquiries, please contact us at: info@nvhaccountants.co.uk
What Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
- Contact form submissions: name, email address, phone number, and message content
- Enquiry details: information you share about your business or personal circumstances when making an enquiry, including financial information, business structure, and any circumstances relevant to the advice you are seeking
- Technical data: IP address, browser type, pages visited, and time spent on pages (via cookies, if accepted)
- Communications: the content of email and telephone correspondence with our team, including any documents you share with us
- Client data: financial records, accounting information, tax returns, payroll data, and other information provided as part of an active service engagement
We collect only the personal data that is necessary for the purposes set out in this policy.
How We Use Your Data
We use personal data for the following purposes:
- To respond to your enquiry and provide the services you request
- To send you relevant updates, deadline reminders, or information relevant to your engagement with us
- To send you marketing communications (with your prior consent only — you can withdraw this at any time)
- To improve our website, understand how visitors use it, and enhance the user experience
- To comply with our legal and regulatory obligations, including HMRC requirements, anti-money laundering regulations, and professional standards obligations
- To maintain accurate business records and manage our client relationships
Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases for processing personal data:
- Contract: where we are providing or preparing to provide professional services to you, processing your data is necessary to perform that contract or to take steps at your request before entering into it
- Legitimate interests: responding to enquiries, maintaining business records, and ensuring the effective operation of our practice — where these do not override your individual rights
- Consent: for non-essential cookies and for marketing communications — you may withdraw your consent at any time
- Legal obligation: where we are required by law or regulation to retain or process your data (for example, under HMRC record-keeping requirements or anti-money laundering legislation)
Cookies
We use cookies to understand how visitors use our website and to improve your experience. Cookies are small text files placed on your device when you visit a website.
You can accept or decline non-essential cookies using the consent banner displayed on your first visit to this website. Essential cookies — those required for the website to function properly — are always active and cannot be declined.
We use the following types of cookies:
- Essential cookies: Required for basic website functionality. These are always active.
- Analytics cookies: Help us understand how visitors navigate our website and which pages are most useful. These are only set with your consent.
- Preference cookies: Remember choices you make on our website (such as your cookie consent decision). Stored in your browser's local storage.
You can change your cookie preference at any time by clearing your browser's local storage or cookies. This will reset the consent banner the next time you visit.
Data Sharing
We do not sell, rent, or trade your personal data. We may share data in the following limited circumstances:
- Cloud software providers: We use accounting, payroll, and practice management software to deliver our services. These providers process data on our behalf under appropriate data processing agreements and are obliged to maintain confidentiality and security.
- HMRC and regulatory bodies: Where we are legally required to submit information to HMRC (for example, payroll RTI submissions, self assessment returns, or VAT returns) or other regulatory bodies, we will do so as part of our service obligations.
- Professional advisers: We may share information with solicitors, insurers, or other professional advisers acting on our behalf, subject to confidentiality obligations.
- Third-party advisers acting on your behalf: Where you have instructed us to liaise with another adviser (for example, a solicitor or overseas tax adviser), we will share relevant information as required for that purpose.
In all cases, we share only the minimum data necessary for the specific purpose.
Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Our standard retention periods are:
- Enquiry data: 12 months from last contact, where no engagement is subsequently established. If an engagement is agreed, enquiry data forms part of the client record.
- Client data: 7 years from the end of the engagement, to meet statutory accounting and tax obligations (including HMRC's standard enquiry window).
- Payroll records: 6 years, in line with HMRC requirements.
- Cookie data: As specified by the cookie type — session cookies expire when you close your browser; persistent cookies expire after a defined period (typically 12 months).
When data is no longer required, we delete or anonymise it securely.
Your Rights Under UK GDPR
You have the following rights in relation to personal data we hold about you:
- Right to access: You may request a copy of the personal data we hold about you (a Subject Access Request).
- Right to rectification: You may ask us to correct inaccurate or incomplete data we hold about you.
- Right to erasure: In certain circumstances, you may ask us to delete your personal data. This right is subject to our legal obligations to retain records.
- Right to restrict processing: You may ask us to limit how we use your data in certain circumstances.
- Right to data portability: You may request a machine-readable copy of data you have provided to us, for use with another provider.
- Right to object: You have the right to object to processing based on legitimate interests. We will comply unless we have compelling legitimate grounds to continue.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at: info@nvhaccountants.co.uk. We will respond within one calendar month.
If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.
These measures include:
- Use of password-protected, encrypted cloud platforms for data storage and processing
- Role-based access controls — team members access client data only as required for their role
- Regular software updates and security patches
- Secure communication practices for sharing sensitive financial information
While we take appropriate precautions, no data transmission over the internet or storage system can be guaranteed as completely secure. If you have concerns about a specific piece of sensitive information, please contact us to discuss the most appropriate method of transfer.
Changes to This Policy
We may update this policy from time to time to reflect changes in our practices, services, or legal obligations. Material changes will be notified on this page, with the updated date shown at the top of the policy.
This policy was last updated in March 2026. We recommend reviewing this page periodically to stay informed of any updates.
Questions About This Policy?
If you have any questions about how we handle your personal data, or if you wish to exercise any of your data protection rights, please get in touch.