Legal
Privacy policy
How ASWATAX LTD collects, uses, shares and protects your personal data, and your rights under UK data protection law.
On this page10 sections
[DRAFT — for legal review]
Last updated: 9 October 2026
This policy explains how ASWATAX LTD ("ASWATAX", "we", "us") uses personal data when you visit www.aswatax.co.uk, use our tools, contact us or become a client. We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
Who we are
ASWATAX LTD is the controller of your personal data. Company number: 12923632. Registered office: 124 City Road, London EC1V 2NX.
Contact us about privacy at taxadvisory@aswatax.co.uk or on +44 7537 143695.
What data we collect
-
Enquiry and contact data: your name, email address, phone number and the content of your message, when you complete a form, email, call or message us on WhatsApp.
-
Tool data: the information you enter into our calculators and checkers, and your email address if you ask for the full result.
-
Booking data: your name, email address and any information you add when you book a call.
-
Client data: where you become a client, the information we need to give advice, including identity, financial, tax, property and family information, and information needed for client due diligence.
-
Email and marketing data: your subscription choices and whether you open or click our emails.
-
Technical data: IP address, device and browser information, and pages visited. Some of this is collected through cookies and similar technologies (see our Cookie Policy).
-
Data from others: where an accountant, solicitor, family office or other adviser introduces you, or a co-owner or family member gives us information for a joint matter, we receive data about you from them. We may also use identity-verification services for client due diligence.
We do not knowingly collect special category data through the website, and we ask you not to send it in a form. If it is needed for your matter, we will agree how to handle it securely.
Why we use your data, and our legal bases
| Purpose | Legal basis |
|---|---|
| Reply to your enquiry and arrange a call | Legitimate interests (responding to enquiries), or steps at your request before a contract |
| Provide tax advice and services | Contract |
| Comply with legal obligations, such as anti-money-laundering checks and tax record-keeping | Legal obligation |
| Send you tool results and guides you request | Legitimate interests, or consent where required |
| Send marketing emails | Consent, or the soft opt-in under PECR for existing clients where applicable |
| Analyse how the website is used (Google Analytics) | Consent, given through our cookie banner |
| Keep our website and systems secure and improve our services | Legitimate interests |
Where we rely on legitimate interests, we consider your rights and interests, and you can object (see below).
Who we share data with
We share data only where necessary, with:
- HubSpot (EU data centre), which hosts our website forms, contact records and email communications.
- Calendly, which handles call bookings.
- Google, for analytics, but only if you consent to analytics cookies.
- Our professional advisers, insurers, IT and hosting providers, and other service providers acting on our instructions.
- Other professionals you ask us to work with, such as your accountant or solicitor, with your agreement.
- HMRC and other authorities where required by law, and where you instruct us to deal with them.
We do not sell personal data.
International transfers
Some providers may process data outside the UK, for example in the United States. Where this happens, we rely on an appropriate safeguard, such as the UK extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum, [details to be confirmed with each provider].
How long we keep data
- Enquiries that do not become matters: [retention period to be confirmed].
- Client records: [retention period to be confirmed], in line with our legal and professional obligations.
- Marketing data: until you unsubscribe, and we may keep a suppression record so we do not email you again.
Your rights
Under UK data protection law you have the right to access your data, have it corrected, have it erased in certain circumstances, restrict or object to processing, move your data to another provider and withdraw consent at any time. You also have rights where a decision with legal or similarly significant effects is made about you by solely automated means. We do not make such decisions. To exercise a right, contact us using the details above. We will respond within one month.
You can unsubscribe from marketing emails at any time using the link in them.
Security
We use appropriate technical and organisational measures to protect data, and limit access to those who need it. No method of transmission over the internet is completely secure, so please be careful about what you send by email or WhatsApp, and ask us about secure ways to share documents.
Complaints
If you are unhappy with how we use your data, you have the right to complain to us, using the contact details above. We will acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.
