Legal
Privacy policy
How we handle your personal data, and the rights you have over it. Last updated September 2026.
Who we are
Cedar Blue Accountants (“we”, “us”) is an accounting firm based at 32 Sussex Road, Dartford, Kent DA1 1SH. We are the data controller for the personal data described in this policy, which means we decide how and why it is used.
Company registration number: [COMPANY NUMBER]
ICO registration reference: [ICO NUMBER]
If you have any question about this policy or about how we handle your data, contact us at contactus@cedarblueaccountants.com or +44 7534 960507.
What this policy covers
This policy covers personal data collected through this website. If you become a client, we will give you a separate, fuller privacy notice covering the data we process in the course of providing accountancy services — that involves far more information than a website enquiry, and it deserves its own document.
What we collect
This website has one form: the consultation enquiry form. When you submit it, we receive:
- Your name — first and last
- Your email address
- Your phone number, if you choose to give one (it is optional)
- Your business type and the service you’re interested in, as selected from the dropdowns
- Your message — whatever you choose to tell us
- Your IP address and the date and time of submission, recorded automatically with the message as a basic anti-spam measure
We do not ask for financial details, bank information, tax references or identity documents through this website. Please don’t send them via the form — if we need them, we will arrange a secure method.
Cookies and analytics
This website sets no cookies and runs no analytics or tracking. There is nothing to consent to, which is why you won’t see a cookie banner.
Our web host keeps standard server logs (IP address, page requested, time, browser type) for security and troubleshooting. These are generated by the hosting infrastructure rather than by us, and we don’t use them to build a profile of you.
Why we use it, and our lawful basis
Under UK GDPR we must have a lawful basis for processing your data. For website enquiries:
- To reply to your enquiry. Lawful basis: legitimate interests — you asked us to get in touch, and responding is what you would reasonably expect.
- To prepare a quote or proposal, if you ask for one. Lawful basis: steps prior to entering a contract.
- To keep our systems secure and prevent spam. Lawful basis: legitimate interests.
We will not add you to a marketing list because you sent an enquiry. If we ever want to send you marketing, we will ask you first and you will be free to say no.
Who sees your data
Enquiries are sent to our own email inbox and read by our staff. We do not sell your data, and we do not share it with third parties for their own marketing.
We rely on these service providers to operate the site:
- Bluehost — web hosting and email. Your enquiry is transmitted and stored on their infrastructure.
- Google Fonts — the site loads its typeface from Google’s servers, which means your browser makes a request to Google and your IP address is visible to them as part of that request.
[CLIENT: list any accounting software, CRM or practice management systems that receive personal data, e.g. Xero, QuickBooks, FreeAgent, Dext.]
We may also disclose information where we are required to by law, or by a regulator or professional body.
Transfers outside the UK
Some of the providers above may process data outside the UK. Where that happens, it is covered by the safeguards UK data protection law requires, such as an adequacy decision or standard contractual clauses.
How long we keep it
- Enquiries that don’t become clients: kept for up to [12 / 24] months, then deleted. This lets us pick up the thread if you come back to us.
- If you become a client: your data moves under our client privacy notice and is kept for as long as we act for you, plus the period required by law and by our professional body — normally at least six years after the relationship ends.
- Server logs: retained by our host per their standard practice, typically a short period for security purposes.
Keeping it secure
The website is served over HTTPS, so what you type into the form is encrypted in transit. Access to the enquiry inbox is restricted to staff who need it. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the data involved.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Rectify it, if it is inaccurate or incomplete
- Erase it, in certain circumstances
- Restrict how we use it, in certain circumstances
- Object to processing based on legitimate interests
- Data portability — receive your data in a portable format
- Withdraw consent, where we relied on consent
Some of these rights are qualified. In particular, where we are legally obliged to retain accounting records, we cannot delete them on request.
To exercise any of these, email contactus@cedarblueaccountants.com. We will respond within one month.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, or 0303 123 1113.
Changes to this policy
If we change how we use personal data, we will update this page and change the date at the top. This version is dated September 2026.
Questions about any of this? Email contactus@cedarblueaccountants.com or get in touch.