Legal

Privacy Policy

Last updated: 11 August 2026

This Privacy Policy explains how Mayfair Accountants and Wealth Advisors Ltd, trading as ChelmarkTax ("ChelmarkTax", "we", "us", "our"), collects, uses, stores and protects your personal data when you visit our website, submit an enquiry, or become a client, and explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

The data controller responsible for your personal data is Mayfair Accountants and Wealth Advisors Ltd, trading as ChelmarkTax, a company registered in England and Wales (company number 11962063), with its registered office at Devonshire House, Level 1, One Mayfair Place, Mayfair, London, W1J 8AJ. We are regulated by the Institute of Financial Accountants (IFA), membership number [to be confirmed].

2. What information we collect

Depending on how you interact with us, we may collect the following categories of information:

• Contact details — name, email address, phone number
• Enquiry details — the nature of your HMRC matter and any information you choose to share about it
• Client and engagement records — information needed to provide chargeable services, including identity verification documents where required by anti-money laundering law
• Technical and usage data — IP address, browser type, device information and how you use our website, collected through cookies and similar technologies
• Communications — records of calls, emails and messages between us

We ask that you do not include sensitive financial documents, passwords, or full bank card details in our website enquiry form. If your matter progresses to a chargeable engagement, we will agree a secure method for exchanging any sensitive documents.

3. How we collect information

We collect information directly from you when you submit an enquiry form, contact us by phone or email, or engage us as a client. We also collect technical information automatically when you browse our website, using cookies and similar technologies as described in the Cookies section below. Where you are referred to us by a third party, or we refer you to a specialist, limited information may be exchanged for the purpose of that referral, with your knowledge.

4. How we use your information

We use your personal data to:

• Respond to your enquiry and assess how we may be able to help
• Provide, manage and administer any services you engage us for
• Verify your identity where required by anti-money laundering regulations
• Refer you to a specialist adviser, where relevant and with appropriate context
• Communicate with you about your matter, and send administrative updates
• Meet our legal, regulatory and professional obligations, including to the Institute of Financial Accountants
• Improve our website and services, and understand how our website is used

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you, and we do not sell your personal data to third parties.

5. Our legal basis for processing

Under UK GDPR, we rely on the following legal bases depending on the purpose:

• Contract — where processing is necessary to provide services you've engaged us for
• Legitimate interests — for example, responding to enquiries and improving our website, balanced against your rights
• Legal obligation — for example, anti-money laundering identity checks and regulatory record-keeping
• Consent — where we ask for your specific consent, such as certain marketing communications, which you can withdraw at any time

6. Sharing your information

We do not sell your personal data. We may share it with:

• A specialist adviser we refer you to, where relevant to your matter and with appropriate context
• Trusted service providers who support our operations, such as secure hosting, email and case management providers, bound by confidentiality and data protection obligations
• Our professional advisers and insurers, on a confidential basis, where necessary
• Regulatory bodies, including the Institute of Financial Accountants, and law enforcement or tax authorities, where we are legally required to disclose information

7. International transfers

Where any service provider we use stores or processes data outside the UK, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement or a finding of adequacy by the UK government, so that your data continues to receive a level of protection consistent with UK GDPR.

8. How long we keep your data

We keep personal data only for as long as necessary for the purposes it was collected. Enquiry details from users who do not become clients are generally retained for a limited period to allow us to follow up, then deleted or anonymised. Client and engagement records are retained for the period required by our professional and regulatory obligations, generally at least six years from the end of an engagement, to meet HMRC, anti-money laundering, and professional indemnity requirements.

9. How we protect your data

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration, including secure hosting, access controls limited to staff who need the information to do their job, and confidentiality obligations for anyone we work with. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information appropriately.

10. Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data, subject to our legal and regulatory retention obligations
• Restriction — ask us to limit how we use your data in certain circumstances
• Portability — ask us to provide your data in a portable format, where technically feasible
• Objection — object to processing based on legitimate interests or for direct marketing
• Withdraw consent — where we rely on consent, withdraw it at any time without affecting past processing

To exercise any of these rights, contact us using the details in the Contact Us section below. We will respond within one month, and will let you know if we need longer for a complex request. We may need to verify your identity before acting on a request.

11. Cookies

Our website uses cookies and similar technologies to make the site function properly and to understand how it's used. Essential cookies are necessary for the website to work and cannot be switched off. Analytics cookies help us understand visitor behaviour so we can improve the site; these are only used with your consent, which you can manage or withdraw through your browser settings at any time. We do not use cookies for third-party advertising.

12. Children's privacy

Our services are intended for individuals and businesses dealing with HMRC matters, and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us so we can remove it.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will post any updated version on this page with a revised "last updated" date. We encourage you to review this page periodically.

14. How to complain

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve it directly. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent regulator for data protection, at ico.org.uk or by calling 0303 123 1113.

15. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us through our contact page. Our full registered business details are set out in Section 1 above.