Privacy policy

Last updated 3 November 2026

Who we are

IGI Accounting is a trading name of IGI Security Services Ltd, a company registered in England and Wales under company number 15881180, with its registered office at 60 Tottenham Court Road, Suite 4944a, London W1T 2EW. For the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018, IGI Security Services Ltd is the data controller of the personal data described in this policy. You can contact us about anything in this policy by emailing info@igiaccounting.co.uk.

What we collect

We collect the personal data needed to provide accountancy, tax and company secretarial services and to communicate with you about them. Depending on the service this includes your name, contact details, date of birth, National Insurance number, Unique Taxpayer Reference, company details, bank account details, income and expenditure records, payroll information about you and your employees, details of your property, investments and other assets, and correspondence from HMRC and Companies House. Where you are a director or shareholder we may also collect identity documents for verification required by law.

We collect this data directly from you, by WhatsApp, email, software access and documents you send us; from HMRC and Companies House once you have authorised us as your agent; from your previous accountant when you switch to us; and from the cloud accounting software and bank feeds you connect.

Why we use it and the lawful basis

We use your personal data to perform the contract between us, which includes preparing and filing returns and accounts, running payroll, corresponding with HMRC and Companies House on your behalf and advising you. We rely on legal obligation where the law requires us to keep records, verify identity or report, including anti-money-laundering legislation. We rely on legitimate interests to run our business, keep our systems secure, improve the service and keep in touch with existing clients about matters relevant to them. We do not rely on consent for the core service, and we do not send marketing to people who are not clients.

Who we share it with

Your data is shared with HM Revenue & Customs and Companies House when we file on your behalf; with the cloud accounting, payroll and tax software providers used to prepare and submit your work, who act as our processors or as independent controllers under their own terms; with our email and messaging providers, including WhatsApp, which is operated by Meta; with our hosting provider, whose servers for this site are located in the European Union; and with professional advisers, insurers or regulators where the law or a legitimate claim requires it. We do not sell personal data and we do not share it with advertisers.

International transfers

Our own systems and this website are hosted in the United Kingdom and the European Union. Some software and messaging providers process data outside the UK; where they do, transfers are made under the UK International Data Transfer Agreement, UK adequacy regulations or the provider's equivalent safeguards.

How long we keep it

Tax and accounting records must be kept for at least five years after the 31 January filing deadline for individuals and six years from the end of the accounting period for companies and VAT. We keep client files for seven years after the end of the engagement to cover these periods and any enquiry HMRC may open within them. Identity verification records are kept for five years after the end of the business relationship as anti-money-laundering rules require. Enquiries from people who do not become clients are deleted within twelve months.

Your rights

Under UK GDPR you have the right to access the personal data we hold about you, to have inaccurate data corrected, to have data erased where there is no lawful reason to keep it, to restrict or object to certain processing, to receive the data you gave us in a portable format, and to withdraw any consent you have given. To exercise any of these rights email info@igiaccounting.co.uk. We respond within one month. If you are not satisfied with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.

Security

Records are stored on encrypted systems with access limited to the staff working on your file. Messages and documents are transmitted over encrypted connections. We do not ask for passwords to your bank or HMRC accounts; agent access is granted through the official authorisation processes.

Cookies and this website

This website uses no tracking or advertising cookies. Details are in our cookies page.

Changes

We review this policy annually and when the law or our processing changes. The date at the top shows the current version.