Privacy policy

Craig Butterworth Accounting is a trading name of Subby Support Ltd. For the purposes of UK data protection law, Subby Support Ltd is the data controller for the personal information described in this notice.

1. Who we are and how to contact us

Craig Butterworth Accounting
115 Queens Park Road
Heywood, Greater Manchester, OL10 4JR

Telephone: 0161 513 0027
Email: hello@cbacc.co.uk

2. Personal information we collect

The information we collect depends on how you interact with us and which services you ask us to provide. It may include:

• Identity and contact information, including your name, address, date of birth, email address and telephone number.
• Business information, including company details, directorships, ownership, employees, subcontractors and trading activity.
• Financial and tax information, including accounting records, invoices, payroll details, tax references, bank information and supporting documents.
• Anti-money laundering information, including identification documents and information used to verify identity, ownership and source of funds where required.
• Enquiry and communication information, including forms, emails, telephone notes and WhatsApp messages.
• Website and technical information, including IP address, device and browser information, pages viewed, referring source and analytics events.

3. Where information comes from

We normally receive information directly from you. We may also receive it from your employees, directors, previous accountant or professional advisers; HMRC and Companies House; payroll, bookkeeping and cloud-accounting systems; identity-verification providers; and publicly available registers or sources where lawful and relevant.

4. Why we use personal information

Where we rely on legitimate interests, we consider whether our use is necessary and whether your rights override those interests.

5. Who we share information with

We may share information where necessary with HMRC, Companies House, pension providers and other public or regulatory bodies; accountancy, payroll, tax and practice-management software providers; banks and payment providers; IT, hosting, email, cloud storage, security and identity-verification providers; professional advisers, insurers and debt recovery services; and a new owner or adviser in connection with a legitimate business sale or restructure.

Service providers are required to protect information and may only use it for the services they provide to us. We may also disclose information where required by law, a court or a regulator.

6. International transfers

Some technology providers may store or process information outside the UK. Where this happens, we use an appropriate safeguard recognised under UK data protection law, such as UK adequacy regulations or approved contractual protections, and take reasonable steps to ensure that information remains protected.

7. How long we keep information

We keep information only for as long as reasonably required for the purpose for which it was collected and to meet legal, tax, anti-money laundering, insurance and professional requirements. Retention periods vary by record type and may continue after a client relationship ends. When information is no longer required, we securely delete or anonymise it.

8. How we protect information

We use appropriate technical and organisational measures designed to protect information against unauthorised access, loss, alteration or disclosure. These include access controls, authentication, secure cloud services, device and software protections, staff confidentiality and appropriate supplier arrangements. No internet-based service can be guaranteed completely secure.

9. Your data protection rights

Depending on the circumstances, you may have the right to:

• ask for a copy of your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information where there is no lawful reason to retain it;
• ask us to restrict or object to particular processing;
• receive certain information in a portable format;
• withdraw consent at any time where we rely on consent; and
• object to direct marketing at any time.

These rights are not absolute. For example, we may need to retain records to comply with tax, anti-money laundering or other legal duties. To exercise a right, email hello@cbacc.co.uk. We may need to verify your identity.

10. Automated decisions and children

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects. Our website and services are intended for adults and businesses and are not directed at children.

11. Website analytics and cookies

Our website uses Google Tag Manager and Google Analytics 4 to measure website use and contact actions such as form submissions, telephone clicks, WhatsApp clicks and email clicks. Further information is available in our Cookie Policy.

12. Questions and complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner's Office. Visit the ICO complaints page or telephone 0303 123 1113.

13. Changes to this policy

We may update this policy when our services, technology or legal obligations change. The latest version will always be published on this page with its revision date.