top of page

Privacy Notice

Wildney Tax is the sole proprietorship of Martyn Wildney (‘I’, ‘me’, ‘my’ and ‘mine’) carrying on the business of providing UK tax accounting and advisory services.

 

I respect your privacy and am committed to protecting your personal data.

 

This Privacy Notice explains how I collect and use your personal data in accordance with applicable Data Protection Legislation.

 

Data Controller

 

I am registered with the Information Commissioner’s Office (‘ICO’) as a Data Controller.

 

This means that I am responsible for deciding how I hold and use your personal data.  I am required under the Data Protection Legislation to notify you of the information contained in this Privacy Notice.

​

The kind of data I may hold about you

 

Personal data, or personal information, means any information about an individual from which that person can be identified.  It does not include data where the identity has been removed (anonymous data).

 

The information I hold about you may include the following:

 

  • Identity data – such as your name, date of birth, place of birth, passport number, place of issue and copies of identification and proof of address documents.

 

  • Contact data – such as your residential address, postal address, telephone number email address and your preferred means of communication.

 

  • Financial data – such as details of your assets, sources of assets, income, sources of income, expenses, your tax position, PAYE tax codes, banking details, Unique Taxpayer Reference number and National Insurance number, where relevant to the service being provided.

 

  • Professional data – such as your employment status, trade, profession, vocation and/or any qualifications you may hold.

 

  • Third party data – such as information received from publicly available sources, your employer, your other appointed service providers, HM Revenue & Customs and data from electronic checks carried out for Anti-Money Laundering purposes.

 

  • Interaction data – such as details of contact I have had with you in relation to the provision or proposed provision of my services, records of correspondence and communications with you, services you have received from me and any feedback, complaints or enquiries you have made to me.

 

  • Transaction data – such as records of payments from you to me, from me to you, and between you and HM Revenue & Customs.

 

How I may collect your personal information

 

I may obtain your personal data about from you when, for example:

  • you request a proposal from me in respect of the services I provide;

  • you engage me to provide my services and during the provision of those services;

  • you contact me by email, telephone, post or online (for example when you have a query about my services).

 

I may also obtain your personal data indirectly, for example:

  • from third parties (such as your spouse or another relative, banks, investment managers, your employer, your partnership, your company, HM Revenue & Customs, electronic check service providers for Anti-Money Laundering purposes)

  • from publicly available resources (such as Companies House and the Land Registry).

 

How I may use your personal data

 

I may process your personal data for purposes necessary for the performance of my contract with you and to comply with my legal obligations.

 

I may also process your personal data for the purposes of my own legitimate interests provided that those interests do not override any of your own interests, rights and freedoms which require the protection of personal data. This includes processing for marketing, business development, statistical and management purposes.

 

Please note that I may process your personal data for more than one lawful basis depending on the specific purpose for which I am using your data.

 

I may use your personal data in order to:

 

  • carry out obligations arising from any agreements entered into between you and me (which will usually be for the provision of professional services to you as a client);

 

  • fulfil my obligations under relevant laws in force from time to time (e.g. the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 as amended);

 

  • comply with professional obligations to which I am subject as a member of the Chartered Institute of Taxation and the Association of Taxation Technicians;

 

  • invoice you for my services and address any attendant fee disputes;

 

  • provide you with information related to my services or seek your thoughts and opinions on the services I provide; and

 

  • notify you about any changes to my services.

 

In some circumstances I may anonymise or pseudonymise the personal data so that it can no longer be associated with you, in which case I may use it without further notice to you.

 

I may also process your personal data without your knowledge or consent, in accordance with this notice, where I am legally required or permitted to do so.

 

It is a requirement of my contract with you that you provide me with the personal data that I reasonably request. If you do not provide the information that I request, I may not be able to provide professional services to you. If this is the case, I will not be able to commence acting or will need to cease to act.

​

Special category personal data

 

I do not normally collect special category personal data such as health, race or ethnic origin.  However, for certain services and when required by law, this may be necessary.  I will always seek to minimise my processing of special category data to that which is absolutely necessary.

 

Data retention

 

I will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected.

 

My standard contractual terms provide for the destruction of documents after seven years and therefore agreement to the contractual terms is taken as your agreement to the retention of records for at least that period, and to their destruction thereafter if not before.

 

However, when assessing what retention period is appropriate for your personal data, I will take into consideration:

 

  • the requirements of my business and the services provided;

  • any statutory or legal obligations;

  • the purposes for which the personal data was originally collected; and

  • the lawful grounds on which processing was based.

 

You are responsible for retaining information that you send to me and that I send to you (including details of capital gains base costs and tax claims and elections submitted). You are required by law to retain documents and records relevant to your tax affairs as follows:

 

  • where you have trading or rental income: five years and 10 months after the end of the tax year;

  • otherwise: 22 months after the end of the tax year.

 

Change of purpose

 

Where I need to use your personal data for a reason, other than the purpose for which it was originally collected, I will only use your personal data where that reason is compatible with the original purpose.

 

Should it be necessary to use your data for a new purpose, I will notify you and communicate the legal basis for this new processing.

 

 

Data sharing

 

I will share your personal data with third parties where I am required by law, where it is necessary to administer the relationship between us or where I have another legitimate interest in doing so. This may include sharing your personal data with a regulator or to otherwise comply with the law.

 

For example, I may share your personal data with:

  • HM Revenue & Customs

  • Tax compliance software companies

  • Any third parties with whom you require or permit me to correspond

  • An alternate appointed by me in the event of incapacity or death

  • Tax insurance providers

  • Professional indemnity insurers

  • My professional bodies, the Chartered Institute of Taxation and the Association of Taxation Technicians and/or the Office of Professional Body Anti-Money Laundering Supervisors (OPBAS) in relation to practice assurance and/or the requirements of MLR 2017 (or any similar legislation)

 

If the law allows or requires me to do so, I may share your personal data with:

  • The police and law enforcement agencies

  • Courts and tribunals

  • The Information Commissioner’s Office (ICO)

 

‘Third parties’ also include third-party service providers. The following activities may be carried out by third-party service providers: IT and cloud services, professional advisory services, administration services, banking services and electronic search services for Anti-Money Laundering purposes.

 

Where required, electronic checks will be undertaken by a third-party service provider to obtain a report in respect of your identity.  Such a report will be used solely for the purposes of Anti-Money Laundering checks.  The issue of such a report will be recorded on your individual file with the third-party data provider and will not affect your credit report.

 

All third-party service providers I use are required to take commercially reasonable and appropriate security measures to protect your personal data. I only permit third-party service providers to process your personal data for specified purposes and in accordance with my instructions.

 

I may need to share your personal data with the third parties identified above in order to comply with my legal obligations, including my legal obligations to you.  If you ask me not to share your personal data with such third parties, I may need to cease to act for you.

 

I do not sell any of your information to third parties.

 

Transferring personal data outside the European Economic Area (EEA)

 

There may be circumstances in which personal data is transferred outside the EEA to perform my contract with you. This may include countries where there is not an adequacy decision by the European Commission and hence will not be deemed to provide an adequate level of protection for your personal information for the purpose of the Data Protection Legislation.

 

In these circumstances, the transfers will be under an agreement which covers the EU requirements for the transfer of personal data outside the EU, such as the European Commission approved standard contractual clauses. Should you require further information, please contact me.

 

Data security

 

I have put in place commercially reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.  In addition, I limit access to your personal data to third parties who have a business need to know. They will only process your personal data on my instructions, and they are subject to a duty of confidentiality.

 

I have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where legally required to do so.​

 

Rights of access, correction, erasure, and restriction

 

It is important that the personal data I hold about you is accurate and current. Should your personal information change, please notify me of any changes of which I need to be made aware using the contact details below.

 

Under certain circumstances, by law you have the right to:

 

  • Request access to your personal data. This enables you to receive details of the personal data I hold about you and to check that I am processing it lawfully.

 

  • Request correction of the personal data that I hold about you.

 

  • Request erasure of your personal data. This enables you to ask me to delete or remove personal data where there is no good reason for me continuing to process it. You also have the right to ask me to delete or remove your personal data where you have exercised your right to object to processing (see below).

 

  • Object to processing of your personal data where I am relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this basis. You also have the right to object where I am processing your personal information for direct marketing purposes.

 

  • Request the restriction of processing of your personal data. This enables you to ask me to suspend the processing of personal data about you, for example if you want me to establish its accuracy or the reason for processing it.

 

  • Request the transfer of your personal data to you or another data controller if the processing is based on consent, carried out by automated means and this is technically feasible.

 

If you want to exercise any of the above rights, please use the contact details below.  You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, I may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, I may refuse to comply with the request in such circumstances.

​

I may need to request specific information from you to help me confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

 

Right to withdraw consent

 

If I am processing your personal data based on your consent, you have the right to withdraw that consent at any time. To do so, please contact me using the details below.

 

Please note that:

 

  • withdrawal of consent does not affect the lawfulness of earlier processing;

  • if you withdraw your consent, I may not be able to continue to provide services to you;

  • even if you withdraw your consent, it may remain lawful for me to process your data on another legal basis (e.g. because I have a legal obligation to continue to process your data).

 

Automated decision-making

 

I do not intend to use automated decision-making in relation to your personal data.

 

Changes to this Privacy Notice

 

This Privacy Notice was last updated on 10 January 2026.  I will keep this Privacy Notice under regular review and may amend it from time to time. The latest version will be made available on my website - www.wildneytax.co.uk

 

Contact details

 

If you have any questions regarding this notice or if you would like to discuss the manner in which I process your personal data, please email me at - martyn@wildneytax.co.uk

 

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues, at any time. The ICO’s contact details are as follows:

 

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

 

Telephone - 0303 123 1113 (local rate) or 01625 545 745

 

Website - https://ico.org.uk/concerns

​

bottom of page