Privacy notice

Bookkeeping Accountants Harrow ("we", "us") operates www.bookkeepingaccountantsharrow.co.uk as a free matching service connecting Harrow businesses with independent bookkeeping accountants in our vetted network. We are the data controller for personal information submitted via this site.

We are a referral and matching service, not an accountancy firm. Once we pass your enquiry to one or more matched bookkeepers, those bookkeepers act as independent data controllers for any further work you instruct them to do.

When you submit the matching form we collect:

• Full name — to address you correctly when matched bookkeepers contact you.
• Email address — to send a match confirmation and follow-up.
• Phone number — to allow matched bookkeepers to contact you directly.
• Town or postcode — to find bookkeepers serving your area.
• Service type — what you need help with (where the form asks).
• Page you submitted from — to give the matched bookkeeper context.

We do not collect special-category data (health, ethnicity, etc.). We do not knowingly collect data from children under 18.

If you accept analytics cookies, we also collect anonymised browsing data through Google Analytics 4 — see "Cookies" below.

We process enquiry data on the basis of your consent (UK GDPR Article 6(1)(a)) — you choose to submit the form to be matched with a bookkeeper. You can withdraw consent at any time by emailing us (see contact details below); withdrawal does not affect lawfulness of processing carried out before withdrawal.

Once we share your enquiry with a matched bookkeeper, that bookkeeper's lawful basis for follow-up contact is also your consent, plus their legitimate interest in responding to a referred enquiry.

Your enquiry is shared with up to three independent bookkeeping professionals from our vetted Harrow-area network. Each bookkeeper receives your name, email, phone, location, and the service you asked about. They are required to treat that information confidentially and use it only to respond to your enquiry.

The form submission itself is processed using:

• Google Apps Script (Google LLC) — receives the form submission and routes it to our enquiry record.
• Google Workspace (Google LLC) — stores the enquiry record and sends notification email.

Google may transfer data outside the UK; transfers are covered by the UK Addendum to the EU Standard Contractual Clauses, which provides the safeguards UK GDPR requires.

We do not sell or rent your data to third parties for marketing.

Enquiry records are kept for 24 months from the date of submission, after which they are deleted. We keep them this long to handle re-matching requests, complaints, or follow-up questions about a previous match.

Anonymised analytics data is retained for 14 months in Google Analytics, then automatically deleted by Google.

This site uses two categories of cookie:

• Strictly necessary — a small cookie that records your cookie-banner choice. No consent required (PECR exemption).
• Analytics — Google Analytics 4 (cookies starting _ga) records anonymised page-view data so we can see which pages are useful. Loaded only if you click "Accept" on the cookie banner. You can withdraw consent at any time by clearing site data in your browser; the banner will reappear.

We do not use advertising, retargeting, or social-media tracking cookies.

Under UK GDPR you have the right to:

• Ask for a copy of the personal data we hold about you (subject access request).
• Ask us to correct inaccurate data.
• Ask us to delete your data (right to erasure).
• Withdraw consent at any time.
• Object to processing or restrict it.
• Complain to the UK supervisory authority — the Information Commissioner's Office at ico.org.uk/make-a-complaint.

To exercise any of these rights, email us at the address in the "Contact" section. We will respond within one calendar month.

Data submitted through the form is transmitted over HTTPS. Stored enquiry records are protected by Google Workspace account access controls (two-factor authentication enforced). Access is limited to the people responsible for processing matches.

No system is perfectly secure. If we ever suffer a personal data breach that is likely to affect your rights, we will notify you and the Information Commissioner's Office within 72 hours, as UK GDPR requires.

Questions, data-rights requests, or complaints — email us via the address listed against this domain in the WHOIS record, or write to us through the contact details on the matching service operator's page. Where you want a written response, please provide a postal or email address.

We review this notice at least once per year and whenever the matching service changes materially. The "Last reviewed" date at the top of the page reflects the most recent revision.