East Grinstead, West Sussex — Serving Sussex, Kent & Surrey

Privacy Policy

How we collect, use and protect personal information.

Privacy Policy

This policy was last updated: May 2026

This Privacy Policy explains how CNC Accounting Services Limited collects, uses, stores and protects personal information. We are committed to protecting your privacy and handling personal data in accordance with UK data protection law.

Who we are

CNC Accounting Services Limited provides bookkeeping, payroll, tax and accounting services. For the purposes of UK data protection law, CNC Accounting Services Limited is the data controller for personal information we collect and use.

You can contact us at info@cncas.co.uk or by calling 01342 776555.

Personal information we may collect

Depending on the services we provide, we may collect and process information including your name, address, email address, telephone number, business details, date of birth, National Insurance number, Unique Taxpayer Reference, VAT number, payroll details, accounting records, bank information, identity documents and correspondence with you.

How we use your information

We use personal information to:

  • provide bookkeeping, payroll, tax and accounting services;
  • communicate with you about your affairs and our services;
  • prepare and submit returns, accounts, payroll information and filings to HMRC, Companies House and other relevant bodies;
  • verify identity and comply with anti-money laundering obligations;
  • manage billing, administration and record keeping;
  • meet legal, regulatory and professional obligations.

Lawful bases for processing

We process personal information where it is necessary to perform a contract with you, comply with legal obligations, pursue legitimate business interests, or where you have given consent for a specific purpose.

Who we may share information with

Where necessary, we may share information with HMRC, Companies House, pension providers, payroll providers, bookkeeping and accounting software providers, banks, professional advisers, regulators, anti-money laundering supervisors, IT service providers and other organisations needed to provide our services or meet legal obligations.

How long we keep information

We keep personal information only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, tax, regulatory and professional requirements. Retention periods may vary depending on the type of information and the services provided.

How we protect information

We take appropriate steps to protect personal information against unauthorised access, loss, misuse or disclosure. This includes using suitable administrative, technical and organisational safeguards.

Your rights

Under UK data protection law, you may have rights to access your personal information, request correction, request deletion, restrict processing, object to processing, request data portability and withdraw consent where processing is based on consent.

We will usually respond to personal data requests free of charge. However, where a request is manifestly unfounded or excessive, particularly if it is repetitive, we may refuse to act on the request or charge a reasonable fee to cover administrative costs, as permitted by data protection law.

International transfers

If personal information is transferred outside the UK, we will take steps to ensure that appropriate safeguards are in place as required by UK data protection law.

Complaints

If you have concerns about how we handle your personal information, please contact us first so that we can try to resolve the matter. You also have the right to complain to the Information Commissioner's Office.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page.