Privacy Notice

This privacy notice provides an overview on how we use your personal data. We believe it is very important to respect the privacy of individuals, and to make only safe and ethical use of the information that is provided.

Who we are

Oxwich Chartered Accountants and Business Advisors is the trading name of Oxwich Accountancy LTD, a company registered in England and Wales – Registration Number 123456. We are authorised and regulated by the Institute of Chartered Accountants in England and Wales (ICAEW). ICAEW firm number C001234567.

What personal data we collect and why we collect it


We may collect the following information:

  • Your name
  • Your contact information, including your email address
  • Demographic information such as postcode, preferences and interests
  • Other information relevant to customer surveys and/or offers

If you are a client of ours, we collect additional information that you share with use regarding your bookkeeping records, accounts and other financial information.

The reason we collect this data depends on the purpose we are using it for:

  • Legal obligation – we collect personal data to comply with our legal obligations e.g. providing information to regulators, law enforcement and statutory bodies.
  • Contract – we collect personal data in order to provide you with the services you have engaged us to perform.
  • Legitimate Interest – we require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
    • We may use the information to improve our products and services.
    • From time to time we may use the email address you have provided to send you promotional emails about new products, special offers or other information, if we think you may find this interesting.
    • We may periodaically also use your information to contact you for market research purposes. We may contact you by email, phone or mail. We may use the information we gather to help us customise this website according to your interests.
  • Consent – we process personal data where you have given consent for us to do so; for example to provide you with free guides you have requested or our marketing material.

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: After approval of your comment, your profile picture is visible to the public in the context of your comment.


A cookie is a tiny file that is, once you agree, saved by your browser when you visit our website. This is sometimes referred to as “dropping a cookie”. It enables certain information about your visit to be stored by our site, to save you from re-entering information in the future (such as preferences) and to enhance the overall experience, including the speed and security of the website. Some of these cookies are essential in order for our website to run as you expect it to.

Some cookies are used by us to help analyse web traffic, we use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

Some cookies are active during your session on our website, and will automatically delete after you close your browser. Other cookies are persistent and will either expire after a certain period of time (e.g. one month) or when you tell them to in your browser’s settings.

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

How long we retain your data

If you leave a comment on our website, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

How we protect your personal data

We are committed to ensuring that your information is secure. We apply appropriate technical and organisational measures in order to protect data, computing devices and the network from accidental / malicious activities or theft. Where appropriate, we encrypt our data and devices with confidential information securely destroyed when no longer required.

Employees who come into contact with your personal data have obligations to adhere to our policies, and are regularly trained in security and privacy best practice.

What rights you have over your data

Data protection laws give you a number of rights with respect to how organisations process your personal data.

Right to be Informed

You have the right to be informed of the use that your personal data will be put to, along with details of your rights. Where you provide your personal data directly to us these details will be made available at the time your data is obtained.

Where we obtain your personal data from a third party, these details will be made available within a reasonable period of having obtained the data. If your personal data is to be used to communicate with you, these details will be provided at the latest, when the first communication takes place. If disclosure to another recipient is envisaged, these details will be provided at the latest, before the data is disclosed. In all cases, notification will take place, within one month of receipt of your personal data.

Right to Access

You have the right to access and obtain a copy of your personal data held and processed by us, on request. Please see the contact details page on this website for ways to contact us and make your request.

Right to Rectification

You have the right to request us to correct inaccurate or incomplete personal data.

Right to Erasure (to be Forgotten)

You have the right to request us to erase your personal data from its systems and records. This is not an absolute right however, and does not normally apply to purposes covered by Legal Obligation or which is necessary for the performance of a Contract.

Right to Restrict Processing

You have the right to request us to stop or restrict the processing of your personal data. This could be for example, if your personal data is no longer necessary for purpose of processing.

Right to data portability

You have the right to request a copy, in a portable format, of the personal data which you have provided directly to us and which is automatically processed.

Right to object

You have the right to object to the processing of your personal data, where we rely upon Legitimate Interest as the lawful basis for processing.

Rights related to automated decision making including profiling

You have the right not to be subject to a decision based solely on automated processing (including profiling), which may significantly affect yourself.


If you are unhappy with how your personal data is processed by us, you have the right to complain to us. Please see the Contact Us page on this website for details about how to contact us. If you remain unhappy, following our response to your complaint, you have the right to lodge a further compliant with our Supervisory Authority, The Information Commissioners Office (ICO).

The ICO’s address is: Information Commissioner’s Office, Wycliffe House, Water Lane, Cheshire, SK9 5AF. You can also contact them by telephone on +44 (0)1625 545 745 or via their website at

Where we send your data

Visitor comments may be checked through an automated spam detection service.