XXpert.
Legal

Privacy policy

This policy explains what personal data we collect, why, how we use and protect it, and the rights you have. It covers the fixed-fee quiz, our contact and newsletter forms, and the services we provide.

Last updated: 8 July 2026.

Who we are

This website is operated by Rana & Co Accountants and Management Consultants Ltd, registered in England & Wales under company number 11628348, trading as Xpert Tax Accountants. We are the "data controller" for the personal data described here. Our registered office is 9 St Albans Terrace, Manchester M8 8BZ. We are registered with the Information Commissioner's Office (ICO) under reference ZB635867.

For any privacy question, or to exercise your rights, contact us at info@xperttaxaccountants.co.uk or on 0161 504 8059.

The personal data we collect

Depending on how you interact with us, we may collect:

  • Fixed-fee quiz: your answers about your business (stage, structure, turnover band, number of employees, VAT status and main challenge). These are used to generate an indicative recommendation and quote. If you then ask to book, we also collect your name, email and (optionally) phone number.
  • Contact form: your name, email, phone (optional) and your message.
  • Newsletter: your email address.
  • Clients: the information we need to provide accountancy and tax services, which may include financial records and, for anti-money-laundering checks, identification documents, proof of address, company ownership information and other information required under the Money Laundering Regulations 2017.
  • Technical data: we self-host our fonts and do not run analytics by default. If we introduce analytics, it will only run after you consent (see our cookie policy).

How we use it, and our lawful basis

  • To respond to your enquiry and prepare a quote or consultation: consent, and/or taking steps to enter into a contract at your request.
  • To provide accountancy and tax services to clients: performance of a contract and, for AML and tax filing, legal obligation.
  • To send you our newsletter: consent. We will never send unsolicited marketing emails, and you can unsubscribe at any time using the link in every email.
  • For fraud prevention, IT security, business administration and improving our services: our legitimate interests.

Who we share it with

  • HubSpot: our CRM and forms provider. When you submit the quiz, the contact form or the newsletter, your details are sent to HubSpot, which processes them on our behalf as a data processor.
  • Google Maps: the map on our contact page only loads if you choose to display it. If you do, Google may process your data under its own privacy policy.
  • HMRC, Companies House and other authorities: where required by law, for clients.
  • We do not sell your personal data.

International transfers

Some of our service providers, including HubSpot, may process personal data outside the UK. Where this occurs, we ensure that appropriate safeguards are in place in accordance with UK data protection law. These safeguards may include the UK Extension to the EU-US Data Privacy Framework or the use of Standard Contractual Clauses together with the UK International Data Transfer Addendum, where applicable.

How long we keep it

We keep personal data only as long as we need it:

DataRetention
Enquiries24 months
Client records6 years after the end of the engagement
AML records5 years after the relationship ends
NewsletterUntil you unsubscribe

Keeping your information secure

We use appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. These include secure hosting, encrypted communications where appropriate, restricted staff access and regular security updates.

Automated decisions

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

Your rights

You have the right to access your data; to correct or delete it; to restrict or object to how we use it; to data portability; and to withdraw consent at any time. To exercise any of these, contact us using the details above.

Complaints

If you're unhappy with how we've handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO):

Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
ico.org.uk/make-a-complaint

Cookies

See our cookie policy for how we use cookies and similar technologies.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page shows when it last changed.