Last updated September 2026
This Privacy Policy explains how Syon Tax Ltd collects and uses personal data when you visit our website, contact us, enquire about or receive our services, work with us in a professional capacity, attend our events, receive our marketing or apply for a role with us.
Syon Tax Ltd is a company registered in England and Wales under company number 12921209. For the processing described in this policy, Syon Tax Ltd is normally the controller of your personal data. Our ICO registration number is ZA267829.
Our contact details are:
The personal data we collect depends on our relationship with you and the services involved. It may include:
Some matters may require information about health, ethnicity, religious or philosophical beliefs, sexual orientation or trade union membership. We may also need information about criminal convictions or offences for legal, regulatory, due diligence or anti-money laundering purposes.
We only process this information where an additional condition under data protection law applies. Depending on the circumstances, this may include explicit consent, establishing or defending legal claims, employment and social protection law, or a substantial public interest condition supported by the Data Protection Act 2018. Where required, we maintain an appropriate policy document covering this processing.
We may obtain personal data:
We only use personal data where we have a lawful basis. More than one basis may apply to the same activity.
Responding to enquiries and discussing possible work: Data used: Identity, contact, communication and relevant matter information. Lawful basis: Legitimate interests and steps requested before entering a contract.
Providing tax advisory and related professional services: Data used: Identity, contact, financial, tax, family, business and transaction data. Lawful basis: Contract, legitimate interests and legal obligations.
Client acceptance, identity checks and anti-money laundering compliance: Data used: Identity, contact, ownership, financial and verification data. Lawful basis: Legal obligation, contract and legitimate interests.
Managing billing, payments, records and our business: Data used: Contact, contract, transaction, financial and communication data. Lawful basis: Contract, legal obligation and legitimate interests.
Protecting legal rights and handling complaints, disputes or claims: Data used: Relevant records and communications. Lawful basis: Legitimate interests, legal obligation and legal claims.
Website security and spam prevention: Data used: IP address, device, browser and security signals. Lawful basis: Legitimate interests and compliance with security obligations.
Website analytics: Data used: Online identifiers, device, browser and usage information. Lawful basis: Consent.
Sending relevant marketing and event communications: Data used: Contact, organisation, relationship and preference data. Lawful basis: Consent or legitimate interests, subject to electronic marketing rules.
Recruitment and workforce administration: Data used: Identity, contact, career, qualification and assessment data. Lawful basis: Steps before contract, legal obligation and legitimate interests.
Improving services, quality, training and internal administration: Data used: Matter information, feedback and business records. Lawful basis: Legitimate interests, with information minimised or anonymised where appropriate.
Where we rely on legitimate interests, those interests include responding to business enquiries, providing and improving professional services, administering our practice, protecting our systems, preventing fraud, maintaining professional relationships, recovering debts and protecting legal rights. We consider the necessity and impact of the processing and do not rely on legitimate interests where your rights and interests override ours.
We may send professional updates, invitations and information about our services where you have consented or where it is lawful to rely on legitimate interests and the applicable electronic marketing rules. You can opt out at any time by using an unsubscribe facility or contacting info@syontax.co.uk. We may retain a minimal suppression record so that we continue to respect an opt-out.
Our website uses cookies and similar technologies for privacy preferences, security and consent-based analytics. Optional analytics technologies are disabled until you consent. You can reject or change optional settings at any time through Cookie settings in the website footer. Our Cookie and Similar Technologies Policy identifies each technology, its provider, purpose and duration.
The website uses Google Analytics through MonsterInsights and Google reCAPTCHA. Google may receive technical or usage information when these services operate. Analytics is used only after consent. reCAPTCHA is used to protect contact forms against spam and abuse and is loaded only where that security function is required.
We may share personal data where necessary with:
Our current service providers may include Microsoft 365, tax compliance software providers, Xero, identity and anti-money laundering providers, website hosting providers, Google Analytics and Google reCAPTCHA. The providers used may change as we update our systems. We require service providers to protect personal data and use it only for authorised purposes.
We do not sell personal data.
Some service providers process personal data outside the United Kingdom. Before making a restricted transfer, we assess the destination, the recipient and the transfer mechanism. Depending on the circumstances, we may rely on UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework for certified US recipients, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another lawful safeguard. We also apply supplementary technical and organisational measures where appropriate.
You can contact us for further information about the safeguard relevant to a particular transfer.
We retain personal data only for as long as reasonably necessary for the relevant purpose, including legal, regulatory, tax, accounting, professional indemnity and dispute requirements. The periods below are general periods and may be extended where a legal hold, complaint, investigation or claim applies.
Enquiries that do not become client matters: Usually 2 years after the last substantive contact.
Client and matter records: Usually 7 years after the engagement or matter ends, or longer where law, regulation, insurance or the nature of the advice requires.
Anti-money laundering and identity records: At least 5 years after the business relationship ends or the relevant occasional transaction completes, subject to applicable law.
Accounting and payment records: Usually 7 years after the relevant financial period or transaction.
Marketing records: Until you opt out or the relationship is no longer active; a minimal suppression record may be kept for longer.
Unsuccessful recruitment applications: Usually 6 months after the recruitment decision, unless a longer period is agreed or required.
Website analytics: Google Analytics user-level and event data for up to 14 months, with individual cookies lasting as stated in the Cookie Policy.
Cookie preference records: Usually 6 months before the website asks for a fresh choice.
Security and technical logs: For a proportionate period based on security, diagnostic and legal requirements.
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure or access. These measures include access controls, secure authentication, encryption where appropriate, staff confidentiality and training, supplier due diligence, backups and incident management. Access is limited to people who need the information for authorised purposes.
We do not normally make decisions about you based solely on automated processing where the decision produces legal or similarly significant effects. If this changes, we will provide the information required by law before the processing begins.
Depending on the circumstances, you may have the right to:
These rights are subject to legal conditions and exemptions, including confidentiality, privilege and record-keeping requirements. We may ask you to verify your identity and normally respond within one month. We usually charge no fee, but may charge or refuse manifestly unfounded or excessive requests where the law allows. To exercise a right, contact info@syontax.co.uk.
Please contact us first if you have a concern so that we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator. You can visit ico.org.uk or telephone 0303 123 1113. You may also have the right to seek a judicial remedy.
Our website may contain links to websites operated by other organisations. Those organisations control their own processing, and their privacy information applies when you use their services.
We review this policy regularly and update it when our processing, suppliers or legal obligations change. The latest version will be published on our website. If we intend to use personal data for a materially new purpose, we will provide appropriate information before that processing begins.
For questions, requests or concerns about personal data, contact info@syontax.co.uk, telephone 0116 268 8716 or write to Syon Tax Ltd at Dock 2, Unit 103, 85 Exploration Drive, Leicester, LE4 5NS.
