Website Privacy Policy
EHT Accountancy Ltd (trading as EHT Accountants & Payroll Bureau)
Last updated: 15 May 2026
1. Introduction
This privacy policy explains how EHT Accountancy Ltd (“EHT Accountants”, “we”, “us”, “our”) collects, uses, and protects personal information when you visit our website at www.ehtaccountants.co.uk.
This policy covers website visitors and prospective clients. If you become a client of EHT Accountants, a separate client privacy notice will be issued to you with your engagement letter, covering the personal information we process in the course of providing accountancy, tax, and payroll services.
2. Who We Are
We are the data controller for the personal information we collect about you through this website.
Company name: EHT Accountancy Ltd
Trading as: EHT Accountants & Payroll Bureau
Registered office: Second Floor, 15 Montpelier Vale, Blackheath, London, SE3 0TA
Telephone: 020 8126 1014
Email: contact@ehtaccountants.co.uk
ICO registration number: ZB326544
We are supervised for anti-money laundering purposes by HMRC.
3. What Personal Information We Collect
3.1 Information you provide to us
When you contact us through the website (by phone, email, or by clicking through to our contact details), we collect:
Your name
Your email address
Your telephone number
The contents of your enquiry or any information you choose to share with us
Any other information you voluntarily provide
3.2 Information collected automatically
When you visit our website, we and our service providers may automatically collect:
Your IP address and approximate location
Browser type and version, operating system, and device type
Pages visited, time spent on pages, and referring URLs
Cookie identifiers (see section 7 below)
4. How We Use Your Personal Information
We use your personal information for the following purposes:
Responding to enquiries — to reply to your contact request and provide information about our services.
Taking pre-contractual steps — to assess whether we can take you on as a client, including initial onboarding discussions.
Website operation and security — to keep the website running, prevent abuse, and improve performance.
Analytics — where you consent, to understand how visitors use the website so we can improve it.
Legal and regulatory compliance — where we have a legal obligation to retain or disclose information.
5. Our Lawful Bases
Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases:
Legitimate interests (Article 6(1)(f)) — for responding to enquiries, website security, and managing our practice. Our legitimate interest is to operate and grow a professional services business and to respond to people who contact us.
Steps to enter into a contract (Article 6(1)(b)) — where your enquiry leads to discussion of engaging our services.
Consent (Article 6(1)(a)) — for non-essential cookies and any marketing communications. You can withdraw consent at any time.
Legal obligation (Article 6(1)(c)) — where we are required by law to retain or disclose information (for example, in response to lawful requests from regulators or law enforcement).
6. Who We Share Your Information With
We do not sell your personal information. We share it only where necessary, with the following categories of recipient:
Our website hosting and email providers — who host the website and the email account used to receive enquiries.
Google — for the embedded Google Maps service on our contact page, and (where you consent) for website analytics.
Professional advisers — such as our IT support, insurers, or legal advisers, where reasonably necessary.
Regulators and law enforcement — where we are required to disclose information by law (for example, to HMRC, the Information Commissioner’s Office, the National Crime Agency, or the courts).
Successors — in the event of a sale, merger, or transfer of our practice, with appropriate confidentiality protections.
7. Cookies and Similar Technologies
Our website uses cookies and similar technologies. A cookie is a small text file stored on your device when you visit a website.
7.1 Categories of cookies
Strictly necessary cookies — required for the website to function (for example, security and session cookies). These do not require your consent.
Functional cookies — used by embedded services such as Google Maps on our contact page. These may set cookies when you interact with the map.
Analytics cookies — if enabled, used to understand how visitors use the site. These are set only with your consent.
Marketing cookies — we do not currently use marketing or advertising cookies. If this changes, we will update this policy and request your consent before any such cookies are set.
7.2 Managing cookies
You can manage or disable cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when cookies are being set. Restricting cookies may affect the functionality of this and other websites.
8. Embedded Third-Party Content
Our contact page includes an embedded Google Map showing our office location. When you view this page, your browser communicates with Google’s servers, which may collect information including your IP address. This processing is governed by Google’s own privacy policy, available at https://policies.google.com/privacy.
9. International Transfers
Some of our service providers (including Google) are based outside the UK. Where personal information is transferred outside the UK, we rely on appropriate safeguards, including:
The UK Extension to the EU-US Data Privacy Framework, where the recipient is certified;
UK International Data Transfer Agreements or the Addendum to the EU Standard Contractual Clauses; or
Other lawful transfer mechanisms recognised by UK data protection law.
10. How Long We Keep Your Information
We retain personal information only for as long as necessary for the purposes set out in this policy:
Enquiry correspondence (no engagement results): up to 24 months from the date of last contact.
Enquiry correspondence (engagement results): transferred to your client file and retained in accordance with our client privacy notice (typically 6 years from the end of the engagement, or longer where required by law).
Website server logs: typically up to 12 months.
Analytics data: in accordance with the retention settings of our analytics provider (typically up to 14 months).
Cookie consent records: 12 months, to demonstrate compliance.
When we no longer need to retain your information, we will securely delete or anonymise it.
11. Your Data Protection Rights
Under UK data protection law, you have the following rights:
Right of access — to obtain a copy of the personal information we hold about you.
Right to rectification — to ask us to correct inaccurate or incomplete information.
Right to erasure — to ask us to delete your information in certain circumstances. This right is not absolute; we may need to retain information to comply with legal obligations (for example, tax and anti-money laundering recordkeeping).
Right to restriction of processing — to ask us to limit how we use your information in certain circumstances.
Right to object — to object to processing based on our legitimate interests.
Right to data portability — in certain circumstances, to receive your information in a structured, commonly used, machine-readable format.
Right to withdraw consent — where we rely on your consent, you can withdraw it at any time.
Rights relating to automated decision-making — we do not make solely automated decisions about you that produce legal or similarly significant effects.
To exercise any of these rights, please contact us using the details in section 14. We may need to verify your identity before responding. We will respond within one month, although this period may be extended by up to two further months for complex requests. There is normally no fee for exercising these rights.
12. How We Protect Your Information
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, or disclosure. These include access controls, encryption in transit, secure storage, and staff confidentiality obligations. However, no transmission of information over the internet can be guaranteed to be completely secure.
13. Children
Our services are not directed at individuals under the age of 18, and we do not knowingly collect personal information from children through this website.
14. How to Contact Us
If you have any questions about this policy, or wish to exercise any of your data protection rights, please contact us:
EHT Accountancy Ltd
Second Floor, 15 Montpelier Vale, Blackheath, London, SE3 0TA
Email: contact@ehtaccountants.co.uk
Telephone: 020 8126 1014
15. How to Complain
If you have concerns about how we have handled your personal information, please contact us first so we can try to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: https://ico.org.uk
16. Changes to This Policy
We may update this privacy policy from time to time. The most current version will always be available on our website, with the “Last updated” date shown at the top. We encourage you to review it periodically.