Privacy Policy

1. Who We Are

MCR Ledger Lab is an accountancy and bookkeeping practice based in the United Kingdom.

For the purposes of UK data protection legislation, MCR Ledger Lab is the Data Controller of your personal information.

Contact Details

MCR Ledger Lab

Email: info@mcrledgerlab.co.uk

If you have any questions regarding this Privacy Policy or your personal information, please contact us using the details above.

2. Information We Collect

We may collect, store, and process the following categories of personal data:

Identity Data

Full name
Date of birth (where required for accounting or regulatory purposes)

Contact Data

Email address
Telephone number
Postal address
Business address

Financial and Business Data

Bank account details
Tax information
VAT information
Payroll information
Company registration details
Accounting and bookkeeping records
Financial statements and supporting documentation

Technical Data

IP address
Browser type and version
Device information
Website usage data
Cookie information

Communication Data

Correspondence sent to us via email, contact forms, telephone, or social media
Records of meetings and consultations

3. How We Collect Your Information

We collect personal information through:

Direct enquiries via our website
Contact forms
Email correspondence
Telephone conversations
Client onboarding processes
Information provided during the delivery of our services
Third-party software platforms authorised by you
Website analytics and cookies

4. How We Use Your Information

We use your personal information to:

Provide accountancy, bookkeeping, payroll, tax, and advisory services
Communicate with you regarding our services
Verify your identity where required
Comply with legal and regulatory obligations
Submit information to HM Revenue & Customs (HMRC) and other authorised bodies where instructed or legally required
Maintain accurate client records
Process payments and invoices
Improve our website and services
Prevent fraud and protect our business

5. Legal Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

Contract

Where processing is necessary to provide services requested by you or to perform a contract.

Legal Obligation

Where we must process information to comply with legal, tax, accounting, anti-money laundering, or regulatory requirements.

Legitimate Interests

Where processing is necessary for the legitimate operation of our business, provided your rights and freedoms do not override those interests.

Consent

Where you have given us consent to send marketing communications or where consent is otherwise required by law.

You may withdraw consent at any time.

6. Sharing Your Information

We do not sell or rent your personal information.

We may share your information with:

HM Revenue & Customs (HMRC)
Companies House
Pension providers
Payroll providers
Banking institutions where authorised
Cloud accounting software providers
Professional advisers
IT and website service providers
Regulatory or legal authorities where required by law

All third parties are required to protect your information and process it only for legitimate purposes.

7. International Transfers

Some of our service providers may store or process data outside the United Kingdom.

Where personal data is transferred internationally, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

8. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including legal, tax, regulatory, and professional obligations.

In many cases, accounting and tax records may be retained for a minimum of six years following the end of the relevant accounting or tax period.

When information is no longer required, it will be securely deleted or anonymised.

9. Data Security

We take appropriate technical and organisational measures to protect personal information against:

Unauthorised access
Loss
Misuse
Disclosure
Alteration
Destruction

While we take reasonable precautions, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

10. Cookies and Website Analytics

Our website may use cookies and similar technologies to improve functionality and analyse website performance.

Cookies may be used to:

Enable website functionality
Improve user experience
Monitor website traffic
Maintain website security

You can manage cookie settings through your browser preferences.

For more information, please refer to our Cookie Policy where applicable.

11. Marketing Communications

We may send updates, newsletters, or information about our services where you have requested or consented to receive them.

You can unsubscribe from marketing communications at any time by:

Clicking the unsubscribe link in emails
Contacting us directly

We will never send unsolicited marketing communications in breach of applicable laws.

12. Your Rights

Under UK data protection law, you may have the right to:

Request access to your personal data
Request correction of inaccurate information
Request deletion of your information
Request restriction of processing
Object to processing
Request transfer of your data
Withdraw consent where applicable

To exercise any of these rights, please contact us using the details provided above.

13. Complaints

If you are unhappy with how we handle your personal information, we would appreciate the opportunity to address your concerns first.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: https://www.ico.org.uk

Telephone: 0303 123 1113

14. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices, content, or security of external websites and encourage you to review their privacy policies separately.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be published on this page and will take effect immediately upon publication.