PRIVACY POLICY
Our Compliance Commitment
Certified Service Charge Accounts maintains rigorous standards to ensure the protection of client and leaseholder data. This overview explains how we adhere to the UK General Data Protection Regulation and the Data Protection Act 2018 in our accounting practices.

Governance
Applicable Law
Applicable Laws: We operate under the UK GDPR and the Data Protection Act 2018, ensuring all service charge accounting and certifications meet current legal frameworks. Governance & Policies: Our firm maintains comprehensive internal data governance policies, defining how personal information is handled across all departments. Data Processing Agreements: As a specialist provider, we enter into robust Data Processing Agreements with property managers to clearly define our responsibilities as a data processor. Staff Training: Every member of our team undergoes mandatory annual security and privacy training to safeguard client confidentiality.
Data Control
Security Controls: We implement high-level technical and organisational safeguards, including multi-factor authentication and data encryption, to prevent unauthorised access to financial records.
Retention Policy
Data Retention: Personal data is held only for as long as necessary to fulfil statutory accounting requirements and professional standard timelines.
Oversight and Review
Oversight & Review: We perform periodic audits of our data systems and privacy protocols to ensure ongoing compliance with evolving UK legislation and to maintain the highest levels of service integrity.
Exercising Statutory Data Rights
Individuals retain the right to access, amend, or request the deletion of their personal data. For guidance, please refer to the Information Commissioner’s Office (ICO) or contact our compliance officer directly for assistance.
Legal Protocol
This summary outlines our commitment to data transparency and regulatory adherence. It ensures that all stakeholders understand our professional approach to handling sensitive information with the utmost diligence, in accordance with the current UK legal landscape for accounting firms.
Cybersecurity Notice
While we maintain secure systems, clients must manage their own network security. We are not liable for data breaches occurring at the user’s end or via third-party web access points outside our control.