Who we are
Data controller: Tax & Beans Ltd
We are responsible for the personal information covered by this notice.
For privacy enquiries or to exercise your data protection rights, please contact our Data Protection Officer using the details on our Regulatory Disclosures page where further information about our firm is available.
Information used to provide accountancy services is covered by our separate client privacy notice.
What we collect
Depending on how you use our website, we collect:
- Your name, contact details and business name.
- Information about your business and the services you need.
- Enquiries, chat messages, appointment details and correspondence.
- Marketing preferences and records of consent.
- Billing and transaction information where online payments are available.
- Technical information, including your IP address, browser details and website activity, through security logs, cookies and analytics tools.
Please do not send confidential financial records, identity documents or sensitive personal information through general enquiry forms or website chat. If these are needed, we will explain how to provide them securely.
How and why we use your information
We use your information to:
- Handle enquiries, quotations and appointments: to take steps towards a contract at your request, or for our legitimate interests in responding to enquiries and communicating with business representatives.
- Arrange introductions you request: for our legitimate interests in connecting you with an appropriate specialist provider.
- Send newsletters and promotional updates you subscribe to: with your consent.
- Operate, protect and improve our website: for our legitimate interests in providing a secure, effective service. Where analytics or tracking requires consent, we obtain it first.
- Administer online payments: to perform a contract, administer business payments in our legitimate interests, and meet applicable financial record-keeping obligations.
- Meet legal requirements and handle disputes: to comply with legal obligations or protect our legitimate interests in establishing or defending legal claims.
When relying on legitimate interests, we consider the necessity of the processing and its effect on your rights and privacy.
If you do not provide information needed for an enquiry, booking or introduction, we may be unable to fulfil your request.
Marketing
Making an enquiry does not automatically subscribe you to marketing.
You can unsubscribe from marketing at any time using the option in our messages or by contacting us. This does not prevent us from responding to enquiries or sending necessary messages about appointments or services you have requested.
Website systems and service providers
We use Cloudflare for website hosting and security, and HighLevel to manage forms, enquiries, appointments and communications.
BeanGrower, our website and platform support provider, may access relevant information where needed to configure, maintain and support these services on our behalf.
Other providers may process information to deliver email and messaging, website analytics and online payments. Where online payments are available, the payment provider processes your payment details, and we receive billing and transaction information.
We share only information needed for the relevant service and use appropriate contractual arrangements with providers processing information on our behalf.
We may also share information with professional advisers, insurers, regulators or public authorities where necessary and lawful.
We do not sell your personal information.
Website chat
Where our website offers an AI chat assistant, you will be told when you are interacting with AI.
HighLevel and its technology providers process your messages and contact details to generate responses and help us handle your enquiry. Conversations are stored in our enquiry-management system and may be reviewed by our team.
You can contact our team directly if you prefer.
Introductions to specialist providers
If you request an introduction, we share your contact details and a brief description of your enquiry with a relevant specialist provider, such as a solicitor, insolvency practitioner, mortgage adviser or business finance provider, so that they can contact you about the service requested.
We limit the information shared to what is needed for the introduction. This does not give us permission to pass on your accountancy files or other confidential records.
Specialist providers normally act as separate data controllers. Their own privacy notices explain how they use your information.
Processing outside the UK
Our technology providers and their service providers may process personal information outside the UK, including in the United States.
Where UK international-transfer rules apply, transfers are covered by applicable UK adequacy arrangements or appropriate contractual safeguards, including standard contractual clauses with the UK Addendum.
Copies of the relevant transfer safeguards are available on request.
How long we keep information
We retain enquiry, appointment and referral information while handling your request and any ongoing relationship. Further retention depends on whether discussions remain active, whether you become a client, and whether records are needed for legal obligations or disputes.
We keep your contact details for newsletters and marketing while you remain subscribed and your consent remains valid. You can unsubscribe at any time. We retain records of consent and unsubscribe requests where needed to demonstrate and respect your communication preferences.
Technical and analytics information is retained for the periods needed to investigate security issues and assess website performance. Payment records are retained to meet applicable accounting and tax obligations.
We review retained personal information and delete or anonymise it when it is no longer needed.
Cookies
Our Cookie Policy explains the cookies and similar technologies used on this website. Where consent is required, we obtain it before using the relevant technology.
You can review or change your choices through Cookie Settings.
Your rights
Depending on the circumstances, you can ask to access, correct, delete, restrict or transfer your personal information.
Where we rely on consent, you can withdraw it at any time without affecting earlier lawful processing.
You can object to direct marketing at any time, and we will stop using your information for that purpose.
You can also object to processing based on legitimate interests for reasons relating to your situation. We will stop unless we have overriding legitimate grounds or need the information for legal claims.
Contact us using the details above to exercise your rights. We may need to verify your identity. We normally respond within one month, subject to exceptions or extensions permitted by law.
Questions or complaints
Please contact us if you have concerns about how we use your information.
You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator.