PRIVACY NOTICE
Stephenson Tilley Ltd is committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This privacy notice explains how we collect and use personal information when you use our services or contact us through our website.
Who We Are
Stephenson Tilley Ltd
43 Crabtree Way
Old Basing
Hampshire
RG24 7AS
Email: louise.stephenson@stephensontilley.co.uk
Stephenson Tilley Ltd is the data controller for the purposes of data protection legislation.
What Personal Data We Collect
We may collect personal information including:
• name and contact details
• financial information required to prepare accounts and tax returns
• identification documents required under anti-money laundering regulations
• information received from HMRC or other authorised parties
• correspondence between us
How We Use Your Personal Data
We use personal data in order to:
• provide accountancy and taxation services
• prepare accounts and tax returns
• communicate with you regarding your affairs
• comply with legal and regulatory obligations
• manage our professional relationship with you
Legal Basis for Processing
We process personal data under the following legal bases:
• performance of a contract
• compliance with legal obligations
• legitimate interests
• consent where required
Legal obligations include compliance with the Money Laundering Regulations 2017 and professional standards.
Sharing Your Data
We may share your personal data with:
• HMRC
• professional advisers or subcontractors involved in delivering our services
• professional indemnity insurers
• regulatory or professional bodies where required
Cloud Software
We use secure cloud-based systems to manage client data including:
• Client Engager
• Xero
• TaxCalc
• Xama AML
• Microsoft 365
• Dropbox
• Inform Direct
These providers maintain appropriate security safeguards to protect personal data.
International Transfers
Some of our cloud software providers may store data outside the UK or European Economic Area. Where this occurs, appropriate safeguards are in place to ensure your data is protected in accordance with UK data protection law.
Data Retention
We retain client records for seven years from the end of the relevant tax year or the end of our professional relationship, in accordance with professional and regulatory requirements.
Your Rights
You have the right to:
• request access to your personal data
• request correction of inaccurate data
• request erasure in certain circumstances
• restrict or object to processing
• request transfer of your data to another professional adviser
Requests can be made by contacting:
louise.stephenson@stephensontilley.co.uk
Complaints
If you are not satisfied with how your personal data is handled, you have the right to complain to the Information Commissioner’s Office (ICO).
Website: https://ico.org.uk
Last updated: March 2026
