Salis.

Privacy Policy

Last updated

Who we are

Salis Accounting Ltd ("Salis", "we") is registered in England & Wales (Companies House No. 17158153) and regulated by the Chartered Institute of Management Accountants (CIMA). We are the data controller for the personal data described here. Contact: enquiries@salisaccounting.com, 07930 601486.

What we collect

  • Details you give us directly, such as your name, email address, phone number and business name, when you contact us, book a call or request a guide.
  • Limited technical information, such as the pages you visit, used to keep the site working and secure.
  • For clients, the information needed to deliver our services and meet our legal obligations (see "Client records" below).

We never sell your data to third parties.

Why we use it, and our legal basis

  • Legitimate interests: replying to enquiries and sending guides you request, and the occasional relevant update (you can unsubscribe at any time).
  • Steps before a contract and performing a contract: preparing proposals and delivering services under an engagement letter.
  • Legal obligation: anti-money-laundering checks, record-keeping and regulatory requirements.

Website services we use

The website is hosted by Cloudflare. Contact and guide forms are delivered to us by Web3Forms. Call bookings are handled by Calendly. Fonts are served by Google Fonts. Each processes limited data on our behalf or under its own privacy policy.

Client records and Salis Practice

Salis Practice is our internal practice software. Only Salis staff can sign in; clients do not have accounts. It holds client contact details, engagement documents, anti-money-laundering check results and tax references. Tax references are encrypted before storage.

For Making Tax Digital for VAT we use HMRC's agent authorisation service. We never ask for, or store, a client's HMRC sign-in details.

Suppliers that process client data for us include Supabase and Vercel (hosting and database), Microsoft 365 (email and documents), Xero (accounting), GoCardless (payments), Xama (identity checks), AssemblyAI (meeting transcription, only with your consent), Anthropic (drafting assistance, with names and email addresses replaced by placeholders) and Companies House. Where data is transferred outside the UK, we rely on UK-approved safeguards.

Data is encrypted in transit and at rest, and changes to client records are logged.

How long we keep it

Enquiries that don't lead to an engagement are deleted once they're no longer needed.Client records are kept for at least five years after the engagement ends, usually six, as required by law and our regulator. Meeting recordings are deleted once the meeting notes have been approved.

Your rights

You can ask to access, correct or delete your personal data, object to or restrict certain processing, and ask for data portability. Email enquiries@salisaccounting.com. You can also complain to the Information Commissioner's Office (ico.org.uk).

Security concerns and breaches

Please report any security concern to enquiries@salisaccounting.com with "Security" in the subject line. Breaches affecting HMRC data are reported to HMRC immediately, and personal data breaches are reported to the ICO within 72 hours where required.