Privacy notice

Who I am

The Data Protection Act 2018 and the UK GDPR set rules for how personal data is used. I, Natalia Gorodulina (AATQB, Licensed Bookkeeper, trading as Artix Bookkeeping), am a data controller and I am registered with the Information Commissioner’s Office (ICO), registration reference ZC211152. I trade as a sole trader from 2 Deans Road, SM1 1QP. You can reach me at request@artixbookkeeping.co.uk. I do not have, and am not required to appoint, a Data Protection Officer.

This website

This website does not use cookies, advertising trackers or analytics, and it has no forms. The VAT Scheme Finder works entirely in your browser: your answers are not sent to or stored by this website. It is hosted by Cloudflare, which processes technical data such as your IP address to deliver the site and keep it secure.

Why I use personal data

• To supply professional services to you as my client.
• To meet legal duties, for example the Money Laundering Regulations 2017.
• To meet my professional obligations as a member of the Association of Accounting Technicians (AAT).
• To investigate or defend complaints, disciplinary proceedings and legal proceedings.
• To invoice you and deal with any fee dispute.
• To tell you about other services I offer, only if you have agreed to that.

Legal basis

I rely on three legal bases: it is necessary to perform my contract with you; it is necessary to comply with legal obligations such as the Money Laundering Regulations 2017; and it is necessary for my legitimate interest in investigating and defending legal claims and complaints. Where I rely on your consent, you can withdraw it at any time. If you do not give me the information I ask for, I may not be able to act for you.

Who I may share it with

HMRC; third parties you ask or allow me to correspond with; subcontractors bound by my confidentiality and security terms; my professional indemnity insurers; and my professional body, AAT, and the Office for Professional Body Anti-Money Laundering Supervision (OPBAS) for anti-money-laundering supervision. Where the law allows or requires it, I may also share information with the police and law enforcement agencies, courts and tribunals, and the ICO. I do not sell personal data.

Transfers outside the UK

Your personal data is processed in the UK. Where cloud software providers I use (for example cloud accounting platforms) process data outside the UK, they do so under safeguards recognised by the UK GDPR, such as adequacy regulations or standard contractual clauses.

How long I keep it

For one-off advisory work, I keep records for 7 years from the date our business relationship ended. For ongoing clients, I keep data needed for more than one year’s compliance during the relationship and delete it 7 years after it ends, unless you ask me to keep it longer. You are responsible for keeping the records I send you. By law, individuals, trustees and partnerships with trading or rental income must keep tax records for five years and 10 months after the end of the tax year, and companies and other corporate entities for six years from the end of the accounting period.

Your rights

You can ask to see the personal data I hold about you (a subject access request), ask me to correct it, ask me to erase it, ask me to restrict or stop using it, or ask for it in a machine-readable format. Please send requests in writing to the contact details above, with enough detail for me to confirm who you are. I will reply promptly and within one month, and I do not charge for subject access requests. Some of these rights apply only in certain circumstances; more information is on the ICO website. I do not use automated decision-making or profiling.

Complaints

If you are unhappy with how I have handled your information, please contact me first. If you remain dissatisfied, you can complain to the Information Commissioner’s Office at ico.org.uk or on the ICO helpline, 0303 123 1113.