Privacy Policy

Cairnpath Accounting (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal information when you visit our website, contact us, or use our services.

​

​

1. Who we are

Cairnpath Accounting is an accounting practice based in Surrey.

Our website address is: http://cairnpathaccounting.com

For the purposes of data protection law, the data controller is:

Cairnpath Accounting

35 Nursery Road, Godalming, Surrey, GU7 3JU
info@cairnpathaccounting.com

​

2. The information we collect

We may collect and process the following personal information:

​

• your name

• your email address

• your telephone number

• your postal address

• details about your project or enquiry

• information you provide through our website contact form, email, or phone

• technical information such as IP address, browser type, device information, and website usage data

• marketing preferences, where you choose to receive updates from us

 

We only collect personal information that is relevant to your enquiry, our services, or the operation of our website, in line with UK GDPR principles of data minimisation and transparency.  

 

3. How we collect your information

We collect information:

​

• when you contact us by email, phone, or through our website

• when you complete a form on our website

• when you ask us for a fee proposal or appointment

• when you instruct us to provide accounting services

• automatically through cookies and similar website technologies

​

4. How we use your information

We may use your personal information to:

​

• respond to your enquiry

• arrange an initial consultation

• prepare and send fee proposals

• provide accounting and related professional services

• manage our relationship with you during a project

• keep project records and administer our business

• improve our website, services, and client experience

• send marketing communications, where you have chosen to receive them

• comply with legal, regulatory, insurance, or professional obligations

 

5. Our lawful bases for processing

Under UK data protection law, we rely on one or more of the following lawful bases:

 

Contract

Where we need to use your information to take steps at your request before entering into a contract, or to perform our contract with you.

 

Legitimate interests

Where it is necessary for the legitimate interests of our business, such as responding to enquiries, managing projects, improving our services, keeping records, or protecting our business, provided your rights do not override those interests.

 

Legal obligation

Where we need to process your information to comply with the law or regulatory requirements.

 

Consent

Where you have given us consent, for example to receive marketing emails. You can withdraw consent at any time.

​

6. Who we share your information with

We may share your information where necessary with:

​​

• local authorities, statutory bodies, or regulators

• website hosts, IT providers, cloud storage providers, and other service providers who support our business

• insurers, legal advisers, or professional bodies

• law enforcement or regulatory authorities where required by law

 

We do not sell your personal data.

 

7. International transfers

We aim to store and process your information in the UK or EEA. If any of our service providers transfer personal data outside the UK, we will take reasonable steps to ensure appropriate safeguards are in place.

 

8. How long we keep your information

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, regulatory, insurance, and professional requirements.

​

As a guide:

• general enquiries: up to 12 months after our last contact

• project records: for as long as reasonably necessary for contractual, insurance, and professional purposes

• marketing records: until you unsubscribe or withdraw consent

• website analytics data: in line with our cookie and analytics settings

 

9. Cookies and website analytics

Our website may use cookies and similar technologies to help it function, understand how visitors use the site, and improve performance.

​

You can manage your cookie preferences through our cookie banner and your browser settings.

 

10. Your rights

Under UK data protection law, you may have the right to:

​

• request access to your personal data

• request correction of inaccurate data

• request erasure of your data

• request restriction of processing

• object to processing

• request transfer of your data in certain circumstances

• withdraw consent at any time, where consent is the lawful basis

​

To exercise any of these rights, please contact us at info@cairnpathaccounting.com

​

11. Complaints

If you have any concerns about how we use your information, please contact us first and we will try to resolve the matter. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection.

​

12. Data security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

​

13. Third-party links

Our website may contain links to other websites. If you follow a link to any external site, please note that those websites have their own privacy policies and we do not accept responsibility for them.

​

14. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page, and the revised version will take effect from the date shown at the top.