Legal & regulatory

Privacy Notice

Last updated: September 2026

1. Who we are

Walldove is the trading name of Walldove Consulting Ltd, a company registered in England and Wales under company number 16111804, with its registered office at 4 Tylers, Saffron Walden, Essex CB10 2LN.

Walldove Consulting Ltd is an ICAEW member firm and provides accountancy, taxation and business advisory services.

For the purposes of UK data protection law, Walldove Consulting Ltd is the data controller in respect of the personal information covered by this notice.

If you have any questions about this notice or how we use your personal information, please contact Clare Wallhead at clare@walldove.com.

2. Information we may collect

The personal information we collect will depend upon our relationship with you and the services we provide. It may include:

• your name, address and contact details;
• date of birth and other identification information;
• National Insurance and Unique Taxpayer Reference numbers;
• financial, accounting, banking, income, employment, pension, investment and taxation information;
• information relating to businesses, companies, partnerships, trusts, estates and property;
• copies of identification documents and information required for client due diligence and anti-money laundering purposes;
• correspondence and records of our communications with you;
• information provided by HM Revenue & Customs, Companies House and other government or regulatory bodies;
• information provided by your employer, financial institutions, professional advisers or other third parties where relevant to our work;
• information you provide when contacting us through our website, by email, telephone or otherwise; and
• technical information relating to your use of our website, where applicable.

In some circumstances, the information required to provide our services may include special category personal data or information concerning criminal convictions or offences. Where we process such information, we will only do so where permitted by law and where it is necessary for the relevant purpose.

3. Where we obtain your information

Most of the information we use is provided directly by you.

We may also receive personal information from other sources where appropriate, including HM Revenue & Customs, Companies House and other public authorities; banks and financial institutions; employers and pension providers; solicitors, financial advisers and other professional advisers; accounting and bookkeeping systems; your authorised representatives; and publicly available sources.

Where you are a client, you may also provide us with personal information concerning other people — for example, family members, employees, directors, shareholders or business associates — where this is relevant to the work you have asked us to undertake.

4. How and why we use your information

We may use personal information to:

• provide accountancy, taxation and advisory services;
• prepare accounts, tax returns, computations and other financial information;
• communicate with you and administer our relationship with you;
• correspond with HMRC, Companies House and other authorities on your behalf;
• undertake client identification, verification and anti-money laundering checks;
• comply with our legal, regulatory and professional obligations;
• maintain appropriate business and professional records;
• establish, exercise or defend legal claims;
• manage and protect our business, systems and website;
• deal with enquiries from prospective clients; and
• provide information about Walldove's services where permitted by law.

We will only use personal information where we have an appropriate lawful basis.

Contract – where processing is necessary to provide services you have asked us to provide or to take steps at your request before entering into a contract.

Legal obligation – where we need to process information to comply with a legal or regulatory obligation, including applicable anti-money laundering, taxation and professional requirements.

Legitimate interests – where processing is necessary for the legitimate interests of Walldove or another person and those interests are not overridden by your rights and interests. These may include operating and protecting our business, managing our professional relationships, responding to enquiries and establishing or defending legal claims.

Consent – where we specifically ask for and rely upon your consent. Where consent is the basis for processing, you may withdraw it at any time.

5. Anti-money laundering and other legal obligations

As an accountancy practice, we are subject to legal and professional obligations which may require us to obtain and retain information about clients and, where appropriate, other individuals associated with them.

This may include identity verification, client due diligence and information relating to the nature and purpose of a business relationship.

There may be circumstances in which the law requires or permits us to disclose information to a public authority or other body without informing the person concerned.

6. Who we may share information with

Where necessary and lawful, we may share personal information with HM Revenue & Customs, Companies House and other government or regulatory authorities; ICAEW and other professional or regulatory bodies where appropriate; banks and financial institutions; solicitors and other professional advisers; insurers and professional indemnity advisers; and organisations providing services to Walldove, including accounting and tax software, IT, website hosting, email, cloud and other technology services.

We may also share information with identity verification and anti-money laundering service providers, other organisations or individuals where you have authorised us to do so, or where disclosure is required or permitted by law.

Where a third-party provider processes personal information on our behalf, we take appropriate steps to protect that information.

7. International transfers

Some of the technology and cloud services used by Walldove may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable UK data protection law and that appropriate safeguards are in place where required.

8. How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet our legal, regulatory, professional and contractual obligations.

The appropriate retention period depends upon the nature of the information and the services provided. We may retain certain client and professional records after our engagement has ended where this is necessary to comply with legal or regulatory requirements, respond to enquiries, or establish or defend legal claims.

Information that is no longer required will be securely deleted or destroyed in accordance with our data retention arrangements.

9. Keeping your information secure

We take appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

Access to personal information is restricted to those who need it for legitimate business or professional purposes.

As an ICAEW member firm, Walldove is also subject to professional duties concerning client confidentiality.

10. Your data protection rights

Depending upon the circumstances and the lawful basis on which your information is processed, you may have rights including the right to:

• request access to personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• request deletion of your personal information in certain circumstances;
• request restriction of processing in certain circumstances;
• object to certain processing;
• request transfer of your information in certain circumstances; and
• withdraw consent where we rely upon consent.

These rights are not absolute and exemptions may apply.

You have the right to object to processing based on legitimate interests in certain circumstances. You also have the right to object at any time to the use of your personal information for direct marketing.

Requests concerning your personal information can be sent to clare@walldove.com.

11. Website and cookies

Our website may collect limited technical information about your device and use of the website.

Where cookies or similar technologies are used, information about those technologies, their purposes and your choices will be provided in our Cookie Policy.

Where consent is required for non-essential cookies, those technologies will not be used until the appropriate consent has been obtained.

12. Marketing

We may occasionally contact existing or prospective clients about Walldove services where permitted by law.

Where consent is required, we will obtain it before sending marketing communications. You can ask us to stop sending marketing communications at any time by contacting clare@walldove.com or by using any unsubscribe facility provided.

13. Complaints about use of your personal information

If you have concerns about how we use your personal information, please contact us first so that we can investigate the matter.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator.

14. Changes to this notice

We may update this Privacy Notice from time to time to reflect changes in our services, legal or regulatory requirements or the way in which we process personal information.

The latest version will be available on our website.