Privacy notice for David Holden (Taxhelp)

Purpose of this notice

This notice describes how I collect and use personal data about you, in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 and any other national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK (‘Data Protection Legislation’).

I take the protection of your privacy very seriously. I will only use your personal information to deliver the services you have requested from me, and to meet my legal responsibilities. Please read the following carefully to understand my practices regarding your personal data and how I will treat it.

About me

David Holden (Taxhelp) is a tax compliance and advisory firm and I am based at 6 Lingfield Road, Gravesend, Kent DA12 5AH.

For the purpose of the Data Protection Legislation and this notice, I am the ‘data controller’. This means that I am responsible for deciding how I hold and use personal data about you. I am required under the Data Protection Legislation to notify you of the information contained in this privacy notice.

How do I collect your personal data?

In the first instance, I obtain information about you when you engage me to deliver my services and/or when you contact me about my services.

I then also obtain information when you contact me by e-mail, telephone or post and from third parties and/or publicly available resources (for example, from your employer or from Companies House).

What type of information do I collect from you?

The personal information I collect from you will vary depending on which services you engage me to deliver. The personal information I collect might include your name, address, telephone number, email address, your Unique Tax Reference (UTR) number, your National Insurance number and bank account details.

I might also hold details of the contact I have had with you in relation to the provision, or the proposed provision, of my services, details of services you have received from me, my correspondence and communications with you and information about any enquiries and complaints you make to me.

Change of purpose

Where I need to use your personal data for another reason, other than for the purpose for which I collected it, I will only use your personal data where that reason is compatible with the original purpose.

How is your information used?

I may process your personal data for purposes necessary for the performance of my contract with you and to comply with my legal obligations.

I may process your personal data for the purposes of my own legitimate interests provided that those interests do not override any of your own interests, rights and freedoms which require the protection of personal data. This includes processing for marketing, business development, statistical and management purposes.

I may process your personal data for certain additional purposes with your consent, and in these limited circumstances where your consent is required for the processing of your personal data then you have the right to withdraw your consent to processing for such specific purposes.

Please note that I may process your personal data for more than one lawful basis depending on the specific purpose for which I am using your data.

In general terms, and depending on which services you engage me to deliver, as part of providing my agreed services I may use your information to:

  • contact you by post, email or telephone
  • verify your identity where this is required
  • understand your needs and how they may be met
  • provide you with information related to my services and my events and activities that you request from me or which I feel may interest you, provided you have consented to be contacted for such purposes
  • notify you about any changes to my services
  • maintain my records in accordance with applicable legal and regulatory obligations
  • process financial transactions
  • prevent and detect crime, fraud or corruption.

If you refuse to provide me with certain information when requested, I may not be able to perform the contract I have entered into with you. Alternatively, I may be unable to comply with my legal or regulatory obligations.

I may also process your personal data without your knowledge or consent, in accordance with this notice, where I am legally required or permitted to do so.

Data retention

I will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected.

When assessing what retention period is appropriate for your personal data, I take into consideration:

  • the requirements of my business and the services provided
  • any statutory or legal obligations
  • the purposes for which I originally collected the personal data
  • the lawful grounds on which I based my processing
  • the types of personal data I have collected
  • the amount and categories of your personal data and
  • whether the purpose of the processing could reasonably be fulfilled by other means.

Who has access to your information?

I will not sell or rent your information to any third parties.

I will not share your information with third parties for marketing purposes.

Data sharing

I will share your personal data with third parties where I am required by law, (for example HMRC) where it is necessary to administer the relationship between us or where I have another legitimate interest in doing so.

Third parties includes third party service providers completing tasks and providing services to you on my behalf, for example to process payroll, or bookkeeping, for specialist professional advice or for IT or banking services.

The third-party service providers are required to take commercially reasonable and appropriate security measures to protect your personal data. I only permit my third-party service providers to process your personal data for specified purposes and in accordance with my instructions.

I may also need to share your personal data with a regulator or to otherwise comply with the law, for example, to comply with a court order or for the purposes of prevention and detection of crime, fraud or corruption.

How you can access and update your information

Keeping your information up to date and accurate is important to me. I commit to regularly review and correct where necessary, the information that I hold about you. If any of your information changes, please email or write to me, or call me.

You have the right to ask for a copy of the information I hold about you (see also Your rights below).

Security precautions in place to protect the loss, misuse or alteration of your information

Whilst I strive to protect your personal information, I cannot guarantee the security of any information you transmit to me, and you do so at your own risk.

Once I receive your information, I make my best effort to ensure its security on my systems. 

I have put in place commercially reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, I limit access to your personal data to those other third parties who have a business need to know. They will only process your personal data on my instructions and they are subject to a duty of confidentiality.

I have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where I am legally required to do so.

Your choices

I may occasionally contact you by post, email or telephone with details of any changes in legal and regulatory requirements or other developments that may be relevant to your affairs and, where applicable, how I may assist you further. If you do not wish to receive such information from me, please confirm this by not ticking the opt-in box when you sign the letter of engagement which I send to you.

Your rights

Access to your information: You have the right to request a copy of the personal information about you that I hold.

Correcting your information: I want to make sure that your personal information is accurate, complete and up to date and you may ask me to correct any personal information about you that you believe does not meet these standards.

Deletion of your information: You have the right to ask me to delete personal information about you where:

  • you consider that I no longer require the information for the purposes for which it was obtained
  • you have validly objected to my use of your personal information – see ‘Objecting to how I may use your information’ below
  • my use of your personal information is contrary to law or my other legal obligations
  • I am using your information with your consent and you have withdrawn your consent – see ‘withdrawing consent to use your information’ below.

Restricting how I may use your information: In some cases, you may ask me to restrict how I use your personal information. This right might apply, for example, where I am checking the accuracy of personal information about you that I hold or assessing the validity of any objection you have made to my use of your information. The right might also apply where there is no longer a basis for using your personal information but you do not want me to delete the data. Where this right is validly exercised, I may only use the relevant personal information with your consent, for legal claims or where there are other public interest grounds to do so.

Objecting to how I may use your information: Where I use your personal information to perform tasks carried out in the public interest then, if you ask me to, I will stop using that personal information unless there are overriding legitimate grounds to continue. You have the right at any time to require me to stop using your personal information for direct marketing purposes.

Transferring your information: You may request the transfer of your personal data to you or another data controller if the processing is based on consent (rather than a legal requirement), carried out by automated means and this is technically feasible.

Withdrawing consent to use your information: In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please let me know. Once I have received notification that you have withdrawn your consent, I will no longer process your personal information (personal data) for the purpose or purposes you originally agreed to, unless I have another legitimate basis for doing so in law.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, I may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, I may refuse to comply with the request in such circumstances.

I may need to request specific information from you to help me confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

Changes to my privacy notice

I keep this privacy notice under regular review and will place any updates on Paper copies of the privacy notice may also be obtained from David Holden, 6 Lingfield Road, Gravesend, Kent DA12 5AH.

This privacy notice was last updated on 25 May 2018.

Contact information

If you have any questions or comments about this Privacy Policy please contact me by post or e-mail:

Data Governance, David Holden, 6 Lingfield Road, Gravesend, Kent DA12 5AH 0r


I seek to resolve directly all complaints about how I handle your personal information but you also have the right to lodge a complaint with the Information Commissioner’s Office at

Information Commissioner’s Office

Wycliffe House

Water Lane




Telephone – 0303 123 1113 (local rate) or 01625 545 745