This notice explains how Ulusoy Tax collects and uses personal data. Ulusoy Tax is the trading name of Kürşat Ulusoy MAAT, an AAT Licensed Accountant (Licence No. 1010108). I am the data controller and am registered with the Information Commissioner’s Office (ICO) under registration number ZC151477.
Contact: info@ulusoytax.co.uk
1. The data I collect
- Identity data: name, date of birth, nationality, copies of identity documents (passport, driving licence), a photo of you holding your ID, and the record of a video identity check.
- Contact data: home address, address history, email address and phone number.
- Company data: the companies you are connected with and your role, such as director or person with significant control.
- Financial and tax data: bank statements, bills, accounting records and tax information needed for the services you ask for.
- Payment data: payment confirmations. Card details are handled by Stripe and are not seen or stored by me.
- Enquiry data: anything you send through the website forms, email or messaging.
- Technical data: basic information your browser sends when you use this website.
2. Why I use your data and the legal basis
| Purpose | Legal basis |
|---|---|
| Providing the services you order, including Companies House identity verification, accounts, tax and payroll | Performance of a contract |
| Customer due diligence and record keeping under the Money Laundering Regulations 2017 | Legal obligation |
| Verifying identity and reporting to Companies House as an Authorised Corporate Service Provider | Legal obligation |
| Submissions to HMRC and other authorities on your behalf | Performance of a contract and legal obligation |
| Answering enquiries before you become a client | Steps taken at your request before a contract |
| Running and protecting my practice, including complaints, insurance and professional regulation | Legitimate interests and legal obligation |
I do not sell your data and do not use it for automated decision-making.
3. Who I share it with
- Companies House and HMRC, where your service requires it.
- AAT, my professional body and anti-money laundering supervisor, and the National Crime Agency where the law requires a report.
- My professional indemnity insurer, where needed for a claim or a potential claim.
- Service providers who help me run the practice, such as payment processing (Stripe), website hosting, email and accounting software. They act on my instructions and must keep your data secure.
4. International transfers
Some service providers process data outside the UK. Where this happens, I rely on UK adequacy regulations or on safeguards approved under UK data protection law, such as the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
5. How long I keep it
- Anti-money laundering records, including identity documents: at least 5 years after the end of our relationship, as the Money Laundering Regulations 2017 require.
- Client files, accounting and tax records: normally 7 years after the end of the engagement.
- Enquiries that do not lead to an engagement: up to 12 months.
6. Your rights
You have the right to access your data, to correct it, to ask for it to be erased or restricted, to object to its use, and to data portability. Some rights are limited where I must keep data by law, for example under anti-money laundering rules. To use your rights, email info@ulusoytax.co.uk. I will reply within one month.
7. Security
I keep personal data in access-controlled, password-protected systems and share documents only through secure channels.
8. Cookies
This website uses cookies that are needed for it to work. Payment pages are provided by Stripe, which uses its own cookies under its own privacy policy.
9. Complaints
Please contact me first so I can try to resolve your concern. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Version 1.0 – 5 October 2026