Last updated
21 October 2026
Privacy Policy
Your privacy matters. Here's exactly what data we collect, how we use it, and the rights you have under UK GDPR.
Who We Are
Tyson Roselyn Accountants Limited (company number 14010662, registered in England and Wales; registered office: Apex House, 2nd Floor, Office 2a, Grand Arcade, North Finchley, London, N12 0EH) is the data controller for the personal data described here ("we", "our", "us"). This policy explains what we collect when you use our website and services, why, who we share it with, how long we keep it and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Information We Collect
We collect the details you give us in our forms, checkouts, your account and messages:
Identity data: name, date of birth, nationality, and for ID verification the photos of your ID document and a selfie.
Contact data: email address, phone number, home, billing and registered office addresses.
Business data: company name and number, details of directors, shareholders and people with significant control, business activity, and the tax and financial details needed for a filing.
Payment data: the card you pay with is held by Stripe, our payment provider. We only see the card type, the last four digits and the expiry date, never the full card number.
Account and order data: your orders, the files you upload or we send you, and the messages between us.
AI assistant chats: the questions you type into the chat on our website and its answers.
Technical data: IP address, browser and device type, kept in our server logs.
Sometimes we receive your details from someone else, for example a fellow director who names you on an order, or from the public register at Companies House.
How We Use It and Why
The law says we must have a lawful basis for each use. Ours are:
To provide the service you order: forming companies, filings with Companies House and HMRC, tax returns, registered office and mail services, your account and payments. Basis: contract.
To charge the card you keep on file for fees you owe on your orders, as you agree at checkout. We email you before taking any such payment (see the Saved cards section of our terms of service). Basis: contract.
To verify identity and carry out anti-money-laundering checks, as we must as a Companies House authorised agent (ACSP), and to keep accounting records. Basis: legal obligation.
ID verification compares your selfie with the photo on your ID document. This uses biometric data, a special category of data, which is only processed with your explicit consent, given before the check starts.
To contact you about a checkout or enquiry you did not finish, to keep our systems secure and prevent fraud, and to improve our website. Basis: our legitimate interests in running and protecting our business, balanced against your rights.
To send you service emails such as receipts, order updates and password resets. Basis: contract. We do not send marketing emails without your consent.
To answer questions in the AI assistant on our website, and to read those chats so we can improve our answers and services. Basis: our legitimate interests. The assistant is an AI, not a person, and does not make decisions about you.
Some details are required by law: Companies House and HMRC set what a filing must contain, and anti-money-laundering rules require ID checks. If you do not give them, we cannot carry out that service.
Your Right to Object
Where we rely on our legitimate interests, you can object at any time and we will stop unless we have compelling grounds to continue. Where we rely on your consent, you can withdraw it at any time, as easily as you gave it. Email us at the address below.
Who We Share It With
We never sell your data. We share it only with:
Companies House and HMRC, to make the filings you order.
Stripe, which takes card payments and runs ID verification for us.
Google, which hosts our website and database (Google Cloud and Firebase), carries our email and provides Google Analytics, Google Tag Manager and Google Ads.
Microsoft, which provides Clarity, the tool that shows us how visitors use our website.
Groq and NVIDIA, which run the AI model behind the assistant on our website and receive the questions typed into it.
Our anti-money-laundering supervisor, the police or other authorities, but only when the law requires it.
Stripe, Google, Microsoft, Groq and NVIDIA act on our instructions under written contracts that require them to keep your data secure.
Transfers Outside the UK
Google, Stripe, Microsoft, Groq and NVIDIA may store or process your data in the United States. These transfers are protected by the UK Extension to the EU-US Data Privacy Framework where the company is certified under it, and otherwise by the UK International Data Transfer Addendum to standard contractual clauses. Ask us for a copy of these safeguards.
How Long We Keep It
ID verification and anti-money-laundering records: 5 years after our business relationship ends, as the Money Laundering Regulations 2017 require.
Orders, invoices and payment records: 6 years from the end of the financial year they relate to, as HMRC requires.
Your account: while it is open, then as above for the orders in it.
Unpaid checkouts, enquiries and quotes: 12 months from our last contact with you.
AI assistant chats: 90 days from the last message.
Server logs: 30 days.
When a period ends, we delete the data or make it anonymous.
Your Rights
You have the right to ask for a copy of your data, to have it corrected, to have it deleted, to restrict how we use it, and to receive it in a portable format. Some rights are limited where the law requires us to keep records, for example anti-money-laundering records. You will not be charged for a request, and we reply within one month.
Cookies
We use cookies that the website needs to work, such as the one that keeps you signed in to your account.
We also use Google Analytics, Google Tag Manager and Microsoft Clarity. They set cookies to show us how visitors use our website, for example which pages they visit, where they click and how far they scroll; Clarity can replay these visits so we can fix pages that are hard to use, with the text typed into forms hidden. We also use Google Ads cookies to see whether our adverts lead to enquiries and orders. They only load if you agree in our cookie banner, where you can accept or reject them all, or choose analytics and advertising separately with Customise. None of them are used on your account pages. You can change your choice at any time with the button below.
Data Security
Your data is encrypted in transit and stored on Google Cloud's secure servers. Only our team members who need it for their work can see it, and every admin action is logged.
Contact Us
To use any of your rights, or with any question about this policy, email support@tysonroselyn.com or write to us at Apex House, 2nd Floor, Office 2a, Grand Arcade, North Finchley, London, N12 0EH. We reply within one month.
If you are unhappy with how we use your data, you can complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint, by phone on 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would appreciate the chance to put things right first.
Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top shows when it last changed.
Strong businesses are built on strong financial foundations. Our role is to give you the clarity, control, and confidence to make better decisions today, and build for what comes next.
