Privacy Notice.

1. Who we are

1.1 This Privacy Notice explains how Roseworth Limited (“the Firm”, “we”, “us”, or “our”) collects, uses, and protects personal data. It applies to our clients, to prospective clients, and to visitors to this website, and should be read alongside our Standard Terms and Conditions of Business.

1.2 Roseworth Limited is a company incorporated in England and Wales under company number 11128477, with its registered office at 662 High Road, London, England, N12 0NL. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Firm is the data controller of the personal data described in this Notice.

1.3 The Firm is licensed and supervised by the Association of Accounting Technicians (AAT) under licence number 1003236, and is supervised by the AAT for anti-money laundering purposes. Certain of our processing activities arise directly from the obligations of that membership and supervision.

1.4 Questions about this Notice, or requests to exercise any of the rights described in it, should be addressed in writing to the Firm's registered office or by email to info@roseworthaccounting.com.

2. The personal data we collect

2.1 In the course of providing professional services, the Firm may collect and process the following categories of personal data: names, addresses, contact details, dates of birth, national insurance numbers, unique taxpayer references, financial records, tax information, employment details, bank account details, and such other personal data as may be reasonably necessary for the performance of our services.

2.2 As required by the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, we also collect identity verification documents and related due diligence information before commencing work, and periodically during the client relationship.

2.3 Through this website, we collect only the information you choose to submit: enquiries made through the contact form (name, email address, telephone number, and your message) and appointment requests made through the booking form (the same details, together with your stated preferences). Technical data such as IP addresses is processed by our hosting provider for the purposes of serving and securing the website.

2.4 The calculators and document generators on this website run entirely within your own browser. Figures you enter into them, and documents you generate with them, are not transmitted to us and are not collected, stored, or seen by the Firm.

3. How and why we use personal data

3.1 The Firm processes personal data on the following lawful bases: (a) performance of a contract to which you are a party, or steps taken at your request before entering into a contract; (b) compliance with a legal obligation to which the Firm is subject, including obligations arising under tax, company, and anti-money laundering law; and (c) the legitimate interests of the Firm in operating, promoting, and protecting its practice, provided that such interests are not overridden by your rights and freedoms.

3.2 Where we send marketing or general update communications to individuals, we do so only with consent, which may be withdrawn at any time. Service messages relating to an existing engagement (for example, deadline reminders) are not marketing and are sent as part of performing our services.

4. Who we share personal data with

4.1 The Firm may share personal data with HMRC, Companies House, and other regulatory or governmental bodies as required by law, and with the AAT or any other regulatory body for supervisory, regulatory, or quality assurance purposes.

4.2 The Firm may share personal data with third-party software providers (including accounting, bookkeeping, payroll, and document management platforms) to the extent necessary for the performance of our services, subject to appropriate data processing agreements.

4.3 We may, on occasion, subcontract work to other tax or accounting professionals. Any such subcontractors are bound by our confidentiality and data security requirements.

4.4 The Firm may disclose personal data to its professional advisers, insurers, or auditors, and is obliged to report knowledge or suspicion of money laundering or terrorist financing to the National Crime Agency (NCA), in which case we are prohibited by law from informing you that a report has been made.

4.5 The Firm does not sell personal data to any third party.

5. How long we keep personal data

5.1 Personal data relating to an engagement shall be retained for a minimum period of six (6) years from the end of the engagement, or longer where required by law, regulation, or our professional obligations.

5.2 Records created as part of our client due diligence processes shall be retained for a period of five (5) years after we cease to act for you, unless retention for a longer period is required by statute, for legal proceedings, or with your consent, in which case retention shall not exceed ten (10) years.

5.3 Website enquiries and appointment requests that do not lead to an engagement are retained for no more than twelve (12) months before being deleted automatically.

6. How we protect personal data

6.1 The Firm takes appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including access controls, encryption in transit, and the confidentiality obligations described in our Terms of Business.

6.2 Where personal data is processed by service providers outside the United Kingdom, we ensure that appropriate safeguards recognised by the UK GDPR are in place, such as adequacy regulations or standard contractual clauses.

7. Your rights

7.1 You have the right to exercise your rights as a data subject under the UK GDPR, including the rights of access, rectification, erasure, restriction of processing, data portability, and objection, together with the right to withdraw consent where processing is based on consent.

7.2 To exercise any such right, you should contact us in writing at the Firm's registered office or by email. We shall respond within one month of receipt of your request. Certain rights are qualified by our legal and professional obligations — for example, we cannot erase records that the law requires us to retain.

7.3 If you are dissatisfied with the way in which we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by telephone on 0303 123 1113. We would welcome the opportunity to address your concerns first.

8. Cookies and embedded services

8.1 This website does not use advertising or cross-site tracking cookies.

8.2 Certain pages embed services from third parties: web fonts are served by Google Fonts, and the maps on our contact and location pages are provided by Google Maps. When those elements load, the relevant provider may process your IP address and may set its own cookies, under its own privacy policy.

8.3 The client portal at www.roseworth.me is a separate service with its own log-in and privacy arrangements, which are presented to you within the portal.

9. Changes to this notice

9.1 We may update this Privacy Notice from time to time to reflect changes in the law or in our practice. The current version, with its version number and date, will always be available on this page. Where a change is material and we hold your contact details, we shall bring it to your attention.