Our Privacy Statement
- Information about us
- Your data
- Your data protection rights
- Privacy policies on other websites
- How to contact us
- Contacting appropriate authorities
- Notices and disclaimers
Information about us
We are Carston Chartered Accountants
Tudor House 16 Cathedral Road Cardiff CF11 9LJ United Kingdom
VAT No 170 3170 42 Company Registration No 03703099 Registered in England and Wales
For more information, please see our “contact us” page and/or the footer of this website.
This Website is designed and hosted on behalf of Carston Chartered Accountants by PracticeWEB a trading division of Sift Media Limited (company registration number 05923499) a subsidiary of Sift Limited (company registration number 03230061) who provide some of the information which is on this Website. This Website may have links to another website hosted by Sift Limited ("Sift Website") which enables you to access third party services.
In these terms and conditions: "Sift Limited" means Sift Limited (company registration number 03230061) whose registered office is is Charlotte Place, Queen Charlotte Street, Bristol, BS1 4EX and any company which is at the relevant time a subsidiary or holding company of Sift Limited and any subsidiary of any such holding company (and “subsidiary” and “holding company” shall have the meanings set out in sections 736 and 736A of the Companies Act 1985).
What we collect
We do not collect any personal information about website users other than:
- information provided by Users when completing forms on the website including but not limited to the contact and website registration form.
- that facilitated by the use of "cookie" technology. "Cookies" are designed to enhance your online visit and permit you to access the full service within the website.
How we collect your data
Each time you visit our site or interact with the emails we send to you, we may automatically collect the following information:
- technical information, including the Internet protocol (IP) address used to connect your computer to the internet, your login information, browser type and version, operating system and platform.
- information about your visit, including the URL clickstream to, through and from our site (including date and time); pages, resources and/or products you viewed or searched for; page response times, errors, length of visits to certain pages, page interaction, and methods used to browse away from the page.
- information about your interaction with our emails, including whether you have opened the email, the number of times the email is accessed, and your interaction with email content including the links you have clicked.
We may also build a picture of your digital data profile, by taking information on you from public sources, such as your publicly available social media information and other third party sources such as Companies House. We do this to help us direct more targeted information and content to you.
Data from other sources
We may receive information about you if you use any of the other websites we or any of our group companies operate or the other services we provide. We are also working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them. We also receive information about you from third party telemarketing companies. We or our partners will only contact you where you have given the telemarketing companies your consent for us to do so.
Using your data
We may process your data because:
- we are legally obliged to e.g. to confirm your identity.
- the processing is necessary for the performance of the contract with you to provide our services; or
- it is in ours or a third party’s legitimate interests to do so.
In some instances, we will rely on your consent to process personal data and when we do this, it will be flagged to you at the time.
Data security & storage
This website takes every precaution to protect our users’ information. When users submit sensitive information via the website, your information is protected both online and offline, with the data being stored on secure servers located within the European Economic Area (“EEA”). There are technological and operational security systems in place that provide protection for personally identifiable information from loss or misuse.
When our registration form asks users to enter information, that information is encrypted and is protected with the best encryption software in the industry – SSL.
Our primary hosting provider is certified to ISO 27001 . This family of standards helps us manage your information and keep it safe and secure.
While we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that are transferred from you or to you via the internet.
If you have any questions about the security at our website, you can send an email to firstname.lastname@example.org.
We keep your personal information for as long as we need to for the purposes for which it was collected or (if longer) for any period for which we are required to keep personal information to comply with our legal and regulatory requirements.
Carston Chartered Accountants would like to send you information about products and services of ours that we think you may like. If you have agreed to receiving marketing, you may always opt out at a later date.
You have the right at any time to stop Carston Chartered Accountants from contacting you for marketing purposes.
If you no longer wish to be contacted for marketing purposes, please send an email to email@example.com.
Your data protection rights
Carston Chartered Accountants would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
The right to access – You have the right to request Carston Chartered Accountants for copies of your personal data. We may charge you a small fee for this service.
The right to rectification – You have the right to request that Carston Chartered Accountants correct any information you believe is inaccurate. You also have the right to request Carston Chartered Accountants to complete the information you believe is incomplete.
The right to erasure – You have the right to request that Carston Chartered Accountants erase your personal data, under certain conditions.
The right to restrict processing – You have the right to request that Carston Chartered Accountants restrict the processing of your personal data, under certain conditions.
The right to object to processing – You have the right to object to Carston Chartered Accountants’s processing of your personal data, under certain conditions.
The right to data portability – You have the right to request that Carston Chartered Accountants transfer the data that we have collected to another organization, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please email firstname.lastname@example.org.
A cookie is a small text file written to your hard drive that contains information about you. Cookies do not contain any personal information about users.
Services delivered via the website such as video or embedded content from external providers may also place cookies on your machine (computer).
By continuing to use this site you are deemed to be accepting the terms and conditions and consenting to the website placing cookies on your machine (computer) as set out in the Cookies information page.
We do not knowingly collect personal data from anyone under the age of 13. If you are a parent or guardian of a child under the age of 13 and believe he or she has disclosed personal information to us, please contact us at email@example.com.
Where processing of personal data is based on consent, if we learn that this data belongs to someone under the age of 13, we will cease processing and will take reasonable measures to delete the applicable information from our records, unless the consent is provided by a parent or guardian.
Privacy policies on other websites
How to contact us
- Email us at: firstname.lastname@example.org
- Call us: +44 (0) 29 2023 3223
- Or write to us at: Tudor House 16 Cathedral Road Cardiff CF11 9LJ United Kingdom
Contacting appropriate authorities
Should you wish to report a complaint or if you feel that our Company has not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office. Details are available here https://ico.org.uk/global/contact-us.
Notices and disclaimers
Privacy Statement – Personal Data
We are committed to protecting your personal data in accordance with the Data Protection Act 2018 (DPA 2018) and the General Data Protection Regulations (GDPR).
Our policy is to collect only the personal data necessary for agreed purposes and we ask clients to only share personal data where it is strictly needed for those purposes. We collect personal data from our clients or from third parties acting on the instructions of the relevant client.
We process personal data for several purposes and the means of collection, lawful basis of processing, use, disclosure, and retention periods for each purpose may differ. We process personal data to provide professional services such as tax advice, general or specific business advice as part of the range of services we offer. We also process personal data in the administration and management of our business.
Your business contact details are used to provide you with information about our services and other information which we think will be of interest to you, unless you tell us not to.
We are subject to legal, regulatory and professional obligations. We need to keep certain records to demonstrate that our services are provided in compliance with those obligations and those records may contain personal data.
Personal data processed is kept by us for as long as is considered necessary for the purpose for which it was collected (including as required by applicable law or regulation). In the absence of specific legal, regulatory or contractual requirements, our retention policy period for records and other documentary evidence created in the provision of services is 7 years.
We take the security of your data we hold seriously. We have a policy including procedures and training in place covering data protection, confidentiality and security and regularly review the appropriateness of the measures we have in place to keep the data we hold secure.
We will only share personal data with others when we are legally permitted to do so. When we share data with others, we put contractual arrangements and security mechanisms in place to protect your data. We use third parties located in other countries to help us run our business. As a result, personal data may be transferred outside the countries where we and our clients are located. This includes countries outside the European Union ("EU").
Under the DPA (2018) and GDPR, Individuals have certain rights over their personal data and data controllers are responsible for fulfilling these rights.
Access to data
You have a right to access your personal data held by us and you can exercise that right by contacting us below. Our aim is to respond a request promptly and within the legally required limit of 40 days.
Update of personal data
If you wish to update personal data submitted to us, please contact us below. Once we are informed that any personal data held by us is no longer accurate we will make changes based on your updated information.
Withdrawal of consent
Where we hold data based on consent, individuals have a right to withdraw consent at any time. To withdraw consent to our processing of your personal data please contact us below.
This statement is intended to provide information about what personal data we collect about you and how it is used. As well as rights of access and amendment referred to above, individuals may have other rights in relation to the personal data we hold, such as a right to erasure/deletion, to restrict or object to our processing of personal data and the right to data portability. For further information on these rights please contact us below.
If you do want to complain about our use of your personal data, please contact us below with the details of your complaint. You also have the right to register a complaint with the Information Commissioner's Office (“ICO”). For further information on your rights and how to complain to the ICO, please refer to their website.
Contacting us about your data
If you have any questions about this privacy statement or how and why we process personal data, a more detailed privacy statement is available upon request. Please contact us at:
Name: Steven Davies
Address: Tudor House, 16 Cathedral Road, Cardiff, CF11 9LJ
Telephone: 02920 233 223