GDPR and your data rights

Last updated 3 November 2026

Your rights in plain terms

The UK General Data Protection Regulation and the Data Protection Act 2018 give you rights over the personal data we hold about you. This page explains each right, how to use it with us and what we will do. Our privacy policy explains what data we hold and why; this page is about control.

The data controller is IGI Security Services Ltd, trading as IGI Accounting, company number 15881180, registered office 60 Tottenham Court Road, Suite 4944a, London W1T 2EW. Requests go to info@igiaccounting.co.uk.

Right of access

You can ask for a copy of the personal data we hold about you, together with the purposes, recipients, retention periods and source. This is a subject access request. Email info@igiaccounting.co.uk with enough detail to identify you and the data you want; we may ask for identity confirmation if we are not already certain who you are. We respond within one month, free of charge, and in a commonly used electronic format. Where a request is complex or repeated we may extend by a further two months and will tell you why.

Right to rectification

If data we hold is inaccurate or incomplete, tell us and we will correct it, and tell any recipient we have shared it with. Where the data has already been filed with HMRC or Companies House, correcting the filing may require an amendment, which we will explain.

Right to erasure

You can ask us to delete personal data where it is no longer needed, where you withdraw consent on which processing was based, or where it was processed unlawfully. The right does not apply where we are required by law to keep the data, which covers most client records: tax law requires us to keep them for five or six years and anti-money-laundering law requires identity records for five years after the relationship ends. We will tell you what we can and cannot delete and why.

Right to restriction

You can ask us to stop using your data, while continuing to store it, where you contest its accuracy, where processing is unlawful but you do not want erasure, or where you have objected and we are considering the objection.

Right to data portability

For data you have given us that we process by automated means to perform our contract, you can ask for it in a structured, machine-readable format, or ask us to send it directly to another provider. In practice this means exports from accounting software, which we provide in standard formats when you leave.

Right to object

You can object to processing based on our legitimate interests, and we will stop unless we can show compelling grounds. You can object to direct marketing at any time and we will stop immediately; we do not market to non-clients.

Automated decisions

We do not make decisions about you by automated means that have a legal or similarly significant effect.

Our processors

We use the following categories of processor: cloud accounting, payroll and tax filing software providers; email and messaging providers, including WhatsApp operated by Meta; cloud storage and hosting providers, with this website hosted in the European Union; and identity verification providers where the law requires verification. Each is bound by a data processing agreement or equivalent terms. A current list of named processors is available on request.

International transfers

Where a processor stores data outside the UK, the transfer is made under the UK International Data Transfer Agreement, a UK adequacy regulation or the processor's approved safeguards. We can tell you which applies to any given processor.

Data breaches

If a breach of security leads to a risk to your rights, we will tell you without undue delay and report it to the Information Commissioner's Office within 72 hours where the law requires.

Complaints

If you believe we have handled your data unlawfully, tell us first at info@igiaccounting.co.uk and we will respond under our complaints procedure. You also have the right to complain to the Information Commissioner's Office at any time: ico.org.uk, telephone 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Data protection officer

We are not required to appoint a data protection officer. Data protection matters are the responsibility of the directors of IGI Security Services Ltd and are handled through info@igiaccounting.co.uk.