Privacy Policy

US UK Tax Accountants is a sub-brand of TaxYork Ltd (company number 17114519, registered in England and Wales). We are the data controller for personal data collected through this website.

For any question about this policy, or to exercise any of the rights described in section 8, contact hello@usuktaxaccountants.com.

This policy applies to this website. It does not cover the handling of your tax records once an engagement begins — that is governed by the engagement letter and our professional obligations, which are more detailed and more restrictive than this policy.

It also does not cover websites we link to. Where we cite the IRS, FinCEN or GOV.UK, those sites have their own privacy policies.

Information you give us. The contact form asks for your first name, last name and email address, all required, and optionally a phone number and a message describing your situation. Nothing else on this site collects personal data. There is no account, no login and no payment handling here.

Please do not send tax reference numbers, National Insurance or Social Security numbers, dates of birth or account numbers through the contact form. It is not a secure channel for that, and we do not need any of it to answer an enquiry. If we take you on as a client, we will provide a secure route for documents.

Information collected automatically. Our hosting provider processes standard technical data needed to serve the site, including your IP address and browser user agent. When you submit the contact form, your IP address is checked against a short-lived, in-memory rate limit to prevent automated abuse. That check is not stored in a database and does not persist beyond the running server process.

Analytics, only with your consent. If you accept analytics cookies, Google Analytics collects usage data such as pages viewed, approximate location derived from a truncated IP address, and device type. If you decline, or ignore the banner, no analytics is loaded at all. See section 9.

To answer your enquiry — legitimate interests. You have contacted a professional practice expecting a reply, and responding is the obvious and expected use of what you sent. Where the enquiry leads towards an engagement, the basis becomes steps taken at your request prior to entering a contract.

To keep the site working and prevent abuse — legitimate interests in maintaining a functioning, secure website, including spam filtering and rate limiting.

To understand how the site is used — consent. Analytics runs only if you accept it, and you can withdraw that at any time through Cookie Preferences in the footer.

To meet legal and professional obligations — legal obligation. Anti-money-laundering, tax and record-keeping rules apply once an engagement begins.

We do not use your data for automated decision-making or profiling, and we do not sell it or share it for anyone else’s marketing. We will not add you to a mailing list because you sent an enquiry.

We use a small number of service providers who process data on our instructions and are not permitted to use it for their own purposes:

• Vercel Inc. — website hosting and delivery. Processes technical data needed to serve pages, and briefly handles form submissions in transit.
• Resend, Inc. — delivers contact form submissions to our inbox as email. Receives the name, email address, phone number and message you submit.
• Google — analytics, and only where you have accepted analytics cookies. No data reaches Google if you decline.

We may also disclose information where we are legally required to, or to establish or defend legal claims. If the practice is ever restructured or transferred, data may pass to the successor entity under the same protections.

The providers above are US-headquartered, so your data may be processed outside the UK and the European Economic Area. Where that happens, transfers rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or another safeguard recognised under UK data protection law.

This is inherent to a cross-border practice: we serve clients in both the US and the UK, and correspondence frequently crosses the Atlantic by its nature.

Enquiries that do not lead to an engagement are kept for up to 24 months from your last contact with us, then deleted. We keep them that long because cross-border tax questions often resurface a filing season or two later, and it is useful to both sides to have the earlier context.

Where an enquiry becomes an engagement, client records are retained for at least six years after the end of the relationship, as professional, anti-money-laundering and tax record-keeping rules require.

Analytics data is retained by Google according to the retention period configured on the property, after which it is deleted or aggregated. Your cookie preference itself stays in your browser until you change it or clear your browser storage.

Under UK GDPR you have the right to access a copy of your personal data; to have inaccurate data corrected; to have data erased in certain circumstances; to restrict or object to processing, including any processing based on legitimate interests; to data portability; and to withdraw consent at any time where processing relies on consent.

To exercise any of these, email hello@usuktaxaccountants.com. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

You can withdraw analytics consent yourself at any time using Cookie Preferences in the footer of any page.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, or by calling 0303 123 1113. We would rather you raised it with us first so we can put it right.

This site sets no cookies at all unless you accept analytics. What it does use is your browser’s local storage, for two things that are strictly necessary to how the site behaves:

• cookie-consent — records whether you accepted or rejected analytics, so you are not asked repeatedly. Stored until you change it.
• theme — records whether you chose the light or dark appearance. Stored until you change it.

Neither leaves your browser, and neither is used to identify or track you.

If you accept analytics, Google Analytics sets its own cookies (names beginning _ga) to distinguish visitors and sessions. These are set only after you accept, and IP anonymisation is enabled. Rejecting means the analytics script is never loaded, so no such cookie is created.

The site is served over HTTPS with HSTS enforced. The contact form is protected against automated abuse, and submissions are delivered to a monitored mailbox rather than stored in a database on this site.

No transmission over the internet is completely secure, which is why we ask you not to send identifying numbers or tax documents through the contact form.

This site is aimed at adults dealing with their own or their business’s tax affairs. We do not knowingly collect data from children. If you believe a child has sent us personal data, contact us and we will delete it.

We update this policy when our practices or the services we use change. The date at the top shows when it was last revised. Where a change materially affects how we handle data you have already given us, we will tell you directly rather than relying on you noticing the date.

Email hello@usuktaxaccountants.com or use the contact page. Registered company details are on our legal notice.