For the purposes of the GDPR the data controller is:
The "Company" is GMN Accountancy Limited t/a Nolan & Partners Chartered Accountants.
Please read this Statement carefully as this sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
1. How we process personal data
For people who contact us through our website We use the personal data you have provided to us to respond to your queries when you contact us. Our legal basis for this processing is our legitimate interest in the administration and operation of our firm. If you become a client, your personal data will become part of your file with us. If you do not become a client, we will delete your personal data 3 months after your last contact with us.
For people whose information we received from one of our clients
If you are an employee, contractor, customer, supplier, or family member of one of our clients, we might receive and process your personal data as part of our engagement with that client. That personal data may include your name, contact information, financial information such as salary or payments, and other information held by our client. We will only process your data in order to provide our accounting, tax, audit or other services to our client. Our legal basis for this processing is our legitimate interest in fulfilling our professional and contractual obligations to our clients. We retain this data for a period of 7 years because we believe we have a legal responsibility to retain it for this period.
2. Who we share data with
We share your personal data with our IT service providers, including IT Consultancy Ltd, Sage, and Relate. These providers are not permitted to use this data, except on our behalf. We may share your personal data with advisors who are subject to rules of confidentiality. We may also be obliged to provide access to your personal data to regulators, including our professional body.
We will not share your personal data with any other third parties, unless we have a legal or professional duty to do so.
3. Automated decision-making and profiling
We do not use any personal data for the purpose of automated decision-making or profiling.