Privacy Policy

Name: J.A.S Business Consultancy Ltd
Address: Norfolk
Telephone: 07308201443

JAS Business Consultancy Ltd
Last updated: January 2026

JAS Business Consultancy Ltd ("we", "us", "our") is committed to protecting your privacy and handling your personal data responsibly. We are a limited company registered in England and Wales (Company number: 16056484 with our registered office at 4 Pheasant Court, Wymondham, NR18 9HY

This Privacy Policy explains how we collect, use, store, and protect personal data when you:

Visit our website
Contact us (e.g., via email, phone, or enquiry form)
Become a client and use our remote bookkeeping, tax, or related services

We act as the data controller for the personal data we process in providing our services.

If you have any questions, contact us at mail@jasconsultancy.co.uk or 07308 201443.

What personal data do we collect?

We may collect and process the following types of personal data:

Identity and contact information — Name, business name, address, email, phone number, and job title (from enquiries, contracts, or client onboarding).
Financial and business information — Bank account details, transaction records, invoices, receipts, payroll data, VAT information, CIS deductions, tax records, and other financial documents you provide for bookkeeping or tax services.
Technical data — IP address, browser type, device information, and website usage data (e.g., pages visited, via cookies or analytics tools if used).
Correspondence — Details from emails, calls, or messages when you contact us.

We do not collect special category data (e.g., health information) unless it is strictly relevant to your tax or financial records (e.g., certain allowable expenses), and only with your explicit consent or where required by law.

How do we collect your personal data?

Directly from you — When you enquire, sign up for services, send documents, or communicate with us.
From third parties — Occasionally from your accountant, payroll provider, or HMRC (with your authority), or publicly available sources (e.g., Companies House for verification).
Automatically — Via website cookies or server logs (see our Cookie Notice if applicable).

Why do we process your personal data (purposes and legal basis)?
We process personal data only where we have a lawful basis under the UK GDPR:

To perform a contract (Article 6(1)(b)) — To provide bookkeeping, VAT returns, payroll prep, tax return submissions (including subcontractor Self Assessments), management reports, and related services you engage us for.
Legal obligation (Article 6(1)(c)) — To comply with accounting, tax, anti-money laundering, or HMRC requirements.
Legitimate interests (Article 6(1)(f)) — For running our business efficiently (e.g., record-keeping, fraud prevention, service improvements), where your rights do not override our interests.
Consent (Article 6(1)(a)) — Where we ask for it (e.g., for marketing emails), and you can withdraw it anytime.

We only use your data for the purposes stated and will not sell it to third parties for marketing.

Who do we share your personal data with?
We may share data with:

HMRC or other regulatory authorities (where required by law).
Our professional advisors (e.g., accountants, insurers, solicitors).
Secure cloud software providers (e.g., Xero, QuickBooks) acting as data processors under strict contracts.
IT/support providers (e.g., email/hosting services) who process data on our behalf with appropriate safeguards.

We do not transfer data outside the UK/EEA unless adequate protections are in place (e.g., UK adequacy decisions or standard contractual clauses).

How long do we keep your personal data?
We retain data only as long as necessary:

Client financial records — Typically 6–7 years after the end of the relevant tax year (to meet HMRC/statutory requirements).
Enquiry/contact data — Up to 2 years if no ongoing relationship.
Website technical data — Usually 1–2 years or less.

After this, data is securely deleted or anonymised.

Your rights under UK GDPR
You have rights regarding your personal data, including:

Access — Request a copy of your data.
Rectification — Correct inaccurate data.
Erasure — Request deletion (where no legal reason to keep it).
Restriction — Limit processing in certain cases.
Objection — Object to processing based on legitimate interests or direct marketing.
Data portability — Receive your data in a structured format.
Withdraw consent — Where we rely on consent.

To exercise any rights, contact us at mail@jasconsultancy.co.uk. We usually respond within one month (free of charge unless requests are excessive). You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Data security
We take reasonable technical and organisational measures to protect your data (e.g., encryption, secure access controls, regular backups). However, no transmission over the internet is 100% secure.

Cookies and website tracking

Our website may use essential cookies for functionality. If we use analytics/marketing cookies, we will ask for your consent via a cookie banner

Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted here with the updated date. Significant changes may be notified via email if you are a client.

Contact us
If you have questions about this policy or your data:
Email: mail@jasconsultancy.co.uk
Phone: 07308 201443 JAS Business Consultancy Ltd
4 Pheasant Court, Wymondham, Norfolk