Privacy Policy
Effective Date: 01.07.25
Last Updated: 01.07.25
1. Who We Are
Your Books and Balances (YBAB) Limited (registered in England number 10834846) is a UK-based accounting and bookkeeping service, operating as a data controller under the UK General Data Protection Regulation (UK GDPR).
Our address is:
1 Oast House Road, Icklesham, East Sussex, TN36 4BN.
Contact:
2. What Personal Data We Collect
We may collect and process the following types of personal data:
• Name, address, and contact details
• National Insurance number, UTR, and other tax identifiers
• Financial records and invoices
• Payroll information (if applicable)
• Any other data you voluntarily provide to us in the course of business
3. How We Collect Your Data
We collect data directly from you via:
• Email and phone communications
• Completion of forms or contracts
• Accountancy software and document uploads
• Correspondence with HMRC or other authorities on your behalf
4. Purpose and Legal Basis for Processing
We process your data to:
• Provide bookkeeping and accountancy services
• Comply with legal obligations (e.g., tax regulations)
• Maintain internal records and client communications
The lawful bases we rely on include:
• Performance of a contract
• Legal obligation
• Legitimate interests (e.g., improving our services)
• Consent, where required
5. Sharing Your Data
We do not sell your personal data. We may share it with:
• HMRC and other regulatory bodies
• Accountancy software providers (e.g., Xero, QuickBooks)
• Professional advisers (e.g., accountants or legal representatives)
• Subcontractors or associates assisting with service delivery
All third parties are required to respect the security of your data.
6. Data Retention
We retain personal data for a minimum of 6 years, or as required by tax and financial laws. After this period, we securely delete or anonymise your data.
7. Your Rights
You have the right to:
• Access your personal data
• Request correction of inaccurate data
• Request erasure of data (where applicable)
• Object to or restrict certain processing
• Withdraw consent at any time (if consent was required)
• Lodge a complaint with the Information Commissioner’s Office (ICO)
8. Data Security
We implement appropriate technical and organisational measures to safeguard your data, including secure email systems, password-protected files, and limited access to records.
9. International Transfers
We do not transfer your data outside the UK or EEA. If we ever do, we will ensure appropriate safeguards are in place.
10. Changes to This Privacy Policy
We may update this policy from time to time. The latest version will always be available on request or via our website.
Contact Us
If you have any questions or wish to exercise your rights, please contact:
Name of responsible person: Ruth Codling GDPR Manager
Email: info@ybab.co.uk Phone: 07471422082