Privacy Policy for MaLa Accounts

1. Data Controller

The data controller is MaLa Accounts. For any inquiries regarding your data, please contact dpo@malaaccounts.co.uk.

2. Purpose of Data Processing

Personal data, such as name, surname, and email address, will also be processed for the purpose of sending newsletters and marketing updates, based on the explicit consent of the user.

Personal data is processed solely for the purpose of providing accounting services, such as maintaining tax records, filing with HMRC, financial advisory services, and communication with clients.

3. Types of Data Processed

Data collected for the newsletter subscription includes:

• Name and surname
• Email address

We also process the following personal data:

• Name and surname
• Residential address
• Contact information (phone, email)
• Financial data (e.g., income, expenses, bank account numbers)
• National Insurance Number (NIN)
• Company information (e.g., VAT number, company registration number)

4. Legal Basis for Data Processing

Newsletter subscriptions are processed based on the explicit consent provided by the user, in compliance with Article 6(1)(a) of the UK GDPR.

Data is processed in accordance with the UK GDPR based on:

• Client consent
• Performance of a contract for accounting services
• Compliance with legal obligations (e.g., reporting to HMRC)

5. Data Sharing

Data may be shared with:

• Government bodies (e.g., HMRC)
• Service providers (e.g., accounting software providers)
• Other entities supporting the provision of services (e.g., auditors or consultants)

6. Data Transfer Outside the UK

We do not transfer personal data outside the United Kingdom.

7. Data Retention Period

Data related to newsletter subscriptions will be retained until the user withdraws their consent or unsubscribes.

Personal data is retained for the period required by law, which is 6 years from the end of the collaboration.

8. Data Subject Rights

Data subjects have the right to withdraw their consent for marketing communications at any time by clicking the unsubscribe link in any email or contacting us directly at dpo@malaaccounts.co.uk.

Data subjects have the following rights:

• Access to their data
• Rectification of inaccurate data
• Deletion of data if no longer required
• Restriction of data processing
• Data portability
• Lodging a complaint with the Information Commissioner’s Office (ICO) in case of any rights violations

Requests can be submitted to: dpo@malaaccounts.co.uk.

9. Data Security Measures

We implement organizational and technical measures to protect personal data. We are currently reviewing available security systems to ensure the safety of client data.

10. Automated Decision-Making

We do not use automated decision-making processes, including profiling.

11. ICO Registration

MaLa Accounts is registered with the Information Commissioner’s Office (ICO) under registration number ZB676869. We ensure compliance with the UK GDPR and the Data Protection Act 2018.

12. Policy Updates

This privacy policy may be periodically updated. Any changes will be communicated on the MaLa Accounts website.