Skip to content
Allied Accounting and Tax Services
Menu
ServicesInsightsAboutContact

Legal

Privacy and cookies

How we collect, use and protect personal data. Written for the people we work with, not for lawyers. Last updated 14 May 2026.

Who we are

This site is operated by Allied Accounting Services Limited, a company registered in England and Wales under company number 05556369. Our registered office is at 2 Old Court Mews, 311a Chase Road, London N14 6JS. The directors are Spyros Panayiotis Spyrou and Mark Anthony Mariou. For data protection purposes, Allied Accounting Services Limited is the data controller of personal data collected through this site.

What we collect and why

The site collects two types of information:

  • Enquiry data. When you submit the contact form we receive your name, email address, the subject category you selected, and the message you wrote. We use this only to reply to your enquiry. We never share it with anyone outside the firm and we never use it for marketing.
  • Analytics data. If you accept cookies, Google Analytics 4 records anonymous information about your visit (pages viewed, approximate location at country or city level, device type, referring source). We use this to understand which pages are useful and which to improve. We do not link analytics data to any individual. IP addresses are anonymised before storage.

Legal basis for processing

  • Enquiry data: processed on the legal basis of steps taken at your request prior to entering a contract (UK GDPR Article 6(1)(b)). If we go on to act for you, processing continues on the basis of contractual necessity.
  • Analytics data: processed on the basis of your consent (UK GDPR Article 6(1)(a)), which you can withdraw at any time using the cookie settings.

How long we keep data

  • Enquiry data: three years from the date of last contact, unless you become a client (in which case the firm's normal client-record retention policy applies, generally six years after the engagement ends, to meet professional and HMRC requirements).
  • Analytics data: retained by Google Analytics for 14 months from collection, then automatically purged.
  • Anything we delete from our active systems may persist in routine backups for a further short period (typically 30 days) before being fully overwritten.

Who we share data with

We share enquiry and analytics data only with the small number of processors needed to operate the site:

  • Resend (transactional email delivery for the contact form). Data is transferred to Resend's infrastructure in the European Union.
  • Cloudflare Turnstile (anti-spam verification on the contact form). Cloudflare processes a short-lived challenge token, not your message content.
  • Google Analytics 4 (visitor analytics, only if you have accepted cookies). Google may transfer aggregated data outside the UK under the UK Extension to the EU-US Data Privacy Framework.
  • Vercel (the website hosting platform).

We do not sell personal data, share it with advertisers, or feed it to AI training systems.

International transfers

Where any of the processors above transfer personal data outside the United Kingdom, those transfers are protected by the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement, or Standard Contractual Clauses, as applicable to each processor.

Your rights under UK GDPR

You have the right to:

  • Know what personal data we hold about you
  • Ask for a copy of that data
  • Ask us to correct anything that is wrong
  • Ask us to delete data we no longer need to hold
  • Object to processing or ask us to restrict it
  • Withdraw consent at any time where consent is the legal basis
  • Lodge a complaint with the Information Commissioner's Office (ico.org.uk) if you believe we are mishandling your data

To exercise any of these rights, send a message via the contact form with "Data request" in the subject line. We aim to respond within one calendar month, which is the UK GDPR statutory limit.

Cookies in detail

This site uses two categories of cookie:

  • Strictly necessary. A single cookie that records your cookie-consent choice (stored in your browser's localStorage under the key aas-consent-v1) so we do not show the banner on every visit. No consent required under UK PECR rules.
  • Analytics (Google Analytics 4). Only set if you have accepted via the cookie banner. The cookies are _ga and _ga_*, with a typical lifespan of two years. They store a random visitor identifier and do not contain any personal data we can read.

You can change your mind at any time. reopens the banner so you can switch between Accept and Reject.

Children

This site is not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us via the form and we will delete it.

Changes to this notice

We will update this page if we change how we handle personal data. The "last updated" date at the top reflects the most recent revision. Material changes (anything that affects the categories of data, recipients, or your rights) will also be flagged in the cookie banner on your next visit.

Contact

For data protection questions, send a message via the contact form with "Privacy" or "Data request" in the subject. The directors handle these enquiries personally.