Privacy Policy

Last Updated: March 18, 2026

1. Introduction

Welcome to J.C. Scott Bookkeeping Ltd. We are committed to protecting your personal data and staying compliant with the UK General Data Protection Regulation (UK GDPR) and the Data (Use and Access) Act 2025. This policy explains how we handle your information when you visit our website or contact us.

2. Who We Are

We are J.C. Scott Bookkeeping Ltd, the data controller for this website.

  • ICO Registration: We are registered with the Information Commissioner’s Office (ICO) under number ZC080392.
  • Contact: If you have questions, please email Joseph@jcscottbookkeeping.com.

3. The Data We Collect

  • Inquiry Data: If you use our contact form, we collect your name, email, and message content.
  • Technical Data: We use “low-risk” essential cookies for website security and basic analytics (no consent required for these strictly necessary functions).
  • Regulatory Data: As an AAT-supervised firm, we process identity and criminal record disclosures (DBS checks) for our Beneficial Owners, Officers, and Managers (BOOMs) to meet legal fit-and-proper requirements.

4. Why We Use Your Data

We only process your data when we have a legal basis:

  • Contract: To provide the bookkeeping services you have requested.
  • Legal Obligation: To comply with the Money Laundering Regulations 2017.
  • Legitimate Interests: To respond to inquiries and maintain website security.

5. Who We Share Data With

We do not sell your data. We only share it with:

  • Professional Bodies: Such as the AAT for regulatory audits.
  • Government Authorities: Such as HMRC or law enforcement if required by law.
  • Service Providers: Secure cloud software (QuickBooks) and our professional website hosting partners.

6. Data Retention

We keep client and AML-related data (including DBS confirmation records) for a minimum of 5 years after our professional relationship ends, as required by UK law. Website inquiry data is deleted after 12 months if no contract is formed.

7. Your Rights

You have the right to access, correct, or delete your data. To make a complaint, please email us; we will acknowledge all data complaints within 30 days. You also have the right to complain to the ICO (www.ico.org.uk).