Henry Thomas recognises the importance of privacy in respect to personal information. We are committed to handling personal information in accordance with the General Data Protection Regulation (GDPR).
This policy describes for clients, employees of client and potential clients how Henry Thomas manages personal information.
WHAT PERSONAL DATA WE COLLECT AND WHY WE COLLECT IT
Most of the personal information we process is provided to us directly by you or your appointed representative for one of the following reasons:
Contact you by post, email or telephone
Maintain our records in accordance with applicable legal and regulatory obligations
Process financial transactions to produce accounts and tax returns
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
(a) Your consent. You are able to remove your consent at any time. You can do this by contacting us using the contact details shown above.
(b) We have a contractual obligation.
(c) We have a legal obligation.
HOW WE STORE YOUR PERSONAL INFORMATION
We use password protected computers and a secure cloud storage to store your information.
We are required by legislation, other regulatory requirements and our insurers to retain our data where we have ceased to act for you.
To ensure compliance with all such requirements it is the policy of the firm to retain data for a period of up to ten years from the end of the period concerned. If for any legal reason your data is required to be held past this time, you will be informed of the extension.
When we cease to act for you, we will seek to agree the position on access to cloud-accounting records to ensure continuity of service. This may require you to enter direct engagements with the software providers and pay for that service separately.
YOUR DATA PROTECTION RIGHTS
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us if you wish to make a request.
CONCERNS
If you have any concerns about our use of your personal information, you can contact us here.
