Skip to main content

Privacy Notice

Two Oaks Accounting Ltd

Last updated: 6 September 2026

Two Oaks Accounting Ltd is committed to protecting your personal information and respecting your privacy. This Privacy Notice explains how we collect, use, store, and protect your data in accordance with UK GDPR and the Data Protection Act 2018.

1. Who we are

Two Oaks Accounting Ltd Ryde, Isle of Wight, United Kingdom Email: info@twooaksaccounting.co.uk Data Controller: Two Oaks Accounting Ltd


2. The personal information we collect

We collect and process only the information necessary to provide accounting and tax services. This may include:

  • Name, address, and contact details
  • Date of birth
  • National Insurance number
  • Employment, business, and financial information
  • Tax references and HMRC correspondence
  • Bank details (for payment or accounting purposes)
  • Records of communication with us
  • Documents you provide (e.g., invoices, receipts, statements)

We do not intentionally collect special category data unless required for statutory compliance (e.g., HMRC documentation that incidentally contains such data). Where this occurs, we apply enhanced protection as required by UK GDPR .


3. How we collect your information

We collect information:

  • Directly from you (email, phone, meetings, forms, documents)
  • From HMRC or other government bodies
  • From third parties where authorised (e.g., employers, pension providers, accountants)
  • Through our website contact form


4. Why we collect and use your information

We use your personal data to:

  • Provide accounting, tax, payroll, and advisory services
  • Prepare statutory accounts and tax returns
  • Communicate with HMRC on your behalf
  • Manage billing and payments
  • Respond to enquiries
  • Meet legal and regulatory obligations
  • Maintain accurate internal records

These purposes align with ICO guidance requiring organisations to identify why they collect and use personal information .


5. Lawful bases for processing

We rely on the following lawful bases under UK GDPR:

  • Contract – to deliver services you have engaged us to provide
  • Legal obligation – to comply with HMRC, Companies House, and financial regulations
  • Legitimate interests – to operate and manage our business effectively
  • Consent – only where explicitly required (e.g., marketing communications)


6. Sharing your information

We may share your data with:

  • HMRC
  • Companies House
  • Payroll providers
  • Software providers (e.g., accounting platforms)
  • Banks or financial institutions (where authorised)
  • Our professional advisers (e.g., auditors)
  • Regulators where legally required

We do not sell or share your data for marketing purposes.


7. International transfers

If any software providers store data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or UK adequacy regulations.


8. How long we keep your information

We retain personal data only for as long as necessary to fulfil our legal and professional obligations. Accounting and tax records are typically kept for six years, in line with HMRC requirements.

Retention schedules are part of ICO best‑practice guidance for privacy notices .


9. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion (where applicable)
  • Restrict processing
  • Object to processing
  • Request data portability
  • Withdraw consent (where consent is used)

To exercise any of these rights, contact: info@twooaksaccounting.co.uk


10. How we protect your information

We use appropriate technical and organisational measures, including:

  • Secure cloud storage
  • Access controls and authentication
  • Encryption
  • Regular security reviews
  • Staff confidentiality obligations


11. Cookies and website data

Our website may use cookies for functionality and analytics. You can manage cookie preferences through your browser settings. A separate Cookie Notice can be provided if required.


12. Complaints

If you have concerns about how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk


13. Changes to this Privacy Notice

We may update this notice periodically. Any changes will be published on this page.