Your data

Privacy policy

How Tax Plus collects, uses and protects your personal information, and the rights you have over it.

Who we are

This policy applies to Tax Plus Ltd (company number 10664976) and Tax Plus Bolton Limited (company number 13679155), both registered in England and Wales, together “Tax Plus”, “we” or “us”. It explains how we use personal information about clients, their staff and contacts, and visitors to this website.

The data controller is Tax Plus Ltd, 11 Bridge Street, Ramsbottom, Bury, BL0 9AB, registered with the Information Commissioner’s Office (ICO) under number ZA247218. Our data protection contact is Craig McKee, Director, who can be reached at the address above, by email at info@taxplus-ramsbottom.co.uk or on 01706 551819.

What personal information we hold

Depending on the work we do for you, we may hold:

names, addresses, email addresses and telephone numbers
dates of birth, National Insurance numbers and Unique Taxpayer References
identity documents and proof of address for anti-money laundering checks
income, tax, payroll, pension and bank information, and accounting records
employment details for payroll clients and their staff
details of your business, its owners and officers
correspondence with you and records of the advice we give

We only hold more sensitive information (for example, health information relevant to a tax claim, or information about criminal offences that comes to light in our anti-money laundering checks) where it is needed for the work or required by law.

Where we get it from

Most information comes from you or from people you authorise to give it to us. We also obtain information from HMRC, Companies House, banks and other bodies when acting as your agent, from identity verification services, and from previous advisers when you transfer to us. We collect information through our website when you send an enquiry using a form.

How we use it and our lawful basis

To provide the services in your letter of engagement: accounts, tax returns, VAT, payroll, bookkeeping and advice. Lawful basis: contract.
To meet our legal and regulatory duties: anti-money laundering checks under the Money Laundering Regulations 2017, tax law, and the requirements of the ICAEW and our insurers. Lawful basis: legal obligation.
To run our firm: keeping client records up to date, managing our practice, preventing fraud and dealing with enquiries from business contacts. Lawful basis: legitimate interests.
To send you updates about our services. Lawful basis: legitimate interests for existing clients, or your consent where the law requires it. You can opt out at any time.

Information provided for anti-money laundering checks is used only to prevent money laundering and terrorist financing, unless the law allows otherwise or you agree. We do not make decisions about you based solely on automated processing.

Who we share it with

We only share what is needed, and never sell your information or pass it to other companies for their marketing. We may share it with:

HMRC, Companies House, The Pensions Regulator and other bodies we file with or deal with on your behalf
the ICAEW and other regulators, and our professional indemnity insurers and brokers, where required
the software and IT providers we use to deliver our services, such as Microsoft 365, accounting, tax and payroll software, our practice management system, identity verification services, our website provider and the AI service described below
other professional advisers, where you ask us to or where needed for your work

Our suppliers act on our instructions under contracts that require them to keep your information secure and not to use it for their own purposes.

Transfers outside the UK

Some of our suppliers store or process information outside the UK, including in the European Economic Area and the United States. Where this happens, the transfer is protected by UK adequacy regulations (including the UK–US data bridge where the supplier is certified), or by the UK International Data Transfer Agreement or Addendum to the EU standard contractual clauses.

TP Ledger and filing VAT returns with HMRC

We keep the bookkeeping records we prepare for clients in TP Ledger, our own bookkeeping software, and use it to file VAT returns with HMRC under Making Tax Digital.

What we hold: the transactions, ledgers and VAT returns we prepare for you, your VAT registration number, and HMRC’s receipt for each return we file.
Why we hold it: to provide the bookkeeping and VAT services in our letter of engagement, and to meet the legal requirement to keep VAT records digitally and file returns through compatible software. Our lawful bases are contract and legal obligation.
Where it is stored: in Tax Plus Ltd’s own Microsoft 365 account (SharePoint), held in UK data centres.
Our technology suppliers: TP Ledger runs inside Claude, an AI service from Anthropic, and our staff also use Claude to help prepare work. When they do, the information they are working on is processed by Anthropic, which may store it in the United States. Anthropic acts under a data processing agreement with us, which includes the UK’s safeguards for transfers outside the UK.
Filing with HMRC: when we file a VAT return for you, we send the nine box figures and your VAT registration number to HMRC through its Making Tax Digital service, as your agent. HMRC requires us to send details of the computer and connection used (such as its IP address, operating system and screen size) to help prevent fraud. TP Ledger never asks for or stores your own HMRC sign-in details.
Who can see it: only Tax Plus staff who work on your affairs. Only named staff can file returns, and only after you have approved the return.
How long we keep it: for 7 years, in line with our other client records.
Getting a copy: you can ask for a copy of your TP Ledger records at any time. We will send it in spreadsheet (CSV) format.
Reporting a security concern: email info@taxplus-ramsbottom.co.uk or call 01706 551819. If a breach affects your data, we will tell HMRC and the Information Commissioner’s Office within 72 hours.
Terms of use: see our TP Ledger terms of use.

Keeping your information secure

We use access controls, multi-factor authentication and encrypted connections to protect your information, and our staff are bound by confidentiality. This website uses an encrypted (HTTPS) connection. No method of sending information over the internet is completely secure, so please use the secure methods we agree with you for sending documents.

How long we keep it

Client records: 7 years, in line with our legal and regulatory requirements.
Marketing contacts: up to 6 years, reviewed every 3 years. You can opt out, update or ask us to delete your details at any time.

Cookies and this website

Our website platform uses a small number of cookies that are needed for the site to work. These are always on.

We only use analytics cookies (Google Analytics) if you click “Accept analytics” on the cookie banner. They help us see how visitors use the site, such as which pages are visited, so that we can improve it. They do not tell us who you are. Google Analytics is provided by Google, which may process the data outside the UK (see “Transfers outside the UK” above). If you click “Reject analytics”, Google Analytics is not loaded.

Your choice is saved in your browser for 12 months. You can change it at any time using the “Cookie settings” link at the bottom of every page. You can also block or delete cookies in your browser settings; some parts of the site may not work properly if you do.

Our website links to other websites. This policy does not cover them, so please read their own privacy policies.

Your rights

You have the right to:

ask for a copy of the personal information we hold about you
ask us to correct information that is wrong or incomplete
ask us to delete your information, where we no longer need to keep it
ask us to restrict how we use it, or object to our use of it based on legitimate interests
receive information you gave us in a machine-readable format, where our use is based on contract or consent and is automated
withdraw your consent at any time, where we rely on consent
object to direct marketing at any time

To use any of these rights, email info@taxplus-ramsbottom.co.uk or write to Craig McKee, Tax Plus Ltd, 11 Bridge Street, Ramsbottom, Bury, BL0 9AB. We will respond within one month. Some rights are limited where we must keep information by law, for example for anti-money laundering purposes.

Complaints

If you are unhappy with how we have handled your personal information, please contact us first using the details above. We will acknowledge your complaint within 30 days, look into it, keep you updated and tell you the outcome.

You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

We review this policy regularly and publish any changes on this page. This policy was last updated on 9 November 2026 (version 1.4).