Last updated: August 2026

Tranmere Bookkeeping is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect your personal data when you use our website or contact us.

We handle personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation and the Data Protection Act 2018.

1. Who we are

For the purposes of UK data protection law, Tranmere Bookkeeping is the data controller responsible for the personal data described in this policy.

Business name: Tranmere Bookkeeping
Address: 12 Station Parade. Harrogate. HG1 1UE
Email: nicola@tranmerebookkeeping.co.uk
Telephone: 07751 705 550

You can use these contact details if you have any questions about this policy, want to exercise your data protection rights or wish to make a complaint about how we have handled your personal data.

2. What this policy covers

This policy applies to personal data collected through this website and through communications resulting from its use.

Our website may contain links to websites operated by other organisations. We are not responsible for how those organisations collect, use or protect your personal data. You should review their privacy information before providing personal data through an external website.

3. Personal data we collect

When you contact us, we may collect:

• your name
• your email address
• your telephone number, where provided
• your business or organisation name, where relevant
• information included in your enquiry or message
• any other information you choose to provide

When you use our website, we may also collect limited technical information, including:

• your IP address
• your browser and device type
• the pages you visit
• the date and time of your visit
• the website or source that referred you to us
• approximate location information
• information about how you interact with our website and forms
• technical information used to identify spam, malicious activity or security threats

4. How we collect your personal data

We normally collect personal data directly from you when you:

• complete an enquiry or contact form
• contact us by email or telephone
• request information, a quotation, an appointment or a service
• communicate with us about an existing or potential business relationship

We also collect limited technical and website usage information automatically when you visit or interact with our website.

5. How and why we use your personal data

We only use personal data where we have a lawful reason to do so.

Responding to enquiries and requests

We use the information you provide to understand and respond to your enquiry, provide requested information, prepare a quotation or arrange an appointment.

Our lawful basis is our legitimate interest in responding to people who contact us and operating our business effectively.

Providing services

If you become a customer or client, we use your personal data to provide the agreed services, communicate with you, manage payments and administer our relationship.

Where our agreement is with you personally, our lawful basis is the performance of our contract with you.

Where you act on behalf of a business or organisation, our lawful basis is our legitimate interest in providing and managing the agreed services.

We may also process personal data where necessary to comply with legal obligations, including accounting and tax requirements, and to manage and protect our business.

Protecting our website and communications

We process limited technical information to protect our website and forms against spam, automated submissions, fraud, malicious activity and other security threats.

Our lawful basis is our legitimate interest in maintaining the security and proper operation of our website and communications.

Understanding website use

We collect limited website usage information to understand how visitors find and use our website, which pages are viewed and whether website forms are completed.

Our lawful basis is our legitimate interest in understanding and improving the performance, content and usability of our website.

Meeting legal obligations

We may use or retain personal data where necessary to comply with the law, respond to a lawful request, establish or defend legal rights, prevent crime or cooperate with a regulator or public authority.

Our lawful basis may be compliance with a legal obligation or our legitimate interest in protecting our legal rights.

Marketing communications

We do not use personal data submitted through our website forms to send marketing communications unless you have asked to receive them or we otherwise have a lawful basis for doing so.

Where marketing relies on consent, you may withdraw your consent at any time by contacting us or using the unsubscribe option provided.

6. Website forms and email delivery

When you submit a website form, the personal data you provide is sent to us by email.

A temporary copy of the outgoing email may be retained within the website’s email delivery system. This allows us and, where necessary, our website support provider to confirm that the message was sent, investigate delivery problems and recover or resend an enquiry.

The temporary copy is retained only for as long as reasonably necessary for email monitoring, troubleshooting and recovery. It is then deleted automatically.

7. Website analytics

We collect limited information about how visitors use our website so that we can understand general website traffic and performance.

This may include:

• pages viewed
• referral source
• approximate location
• browser and device type
• date and time of the visit
• whether a website form was submitted

The analytics information is stored within the website and is not shared with an external advertising or analytics provider.

Our analytics system does not use cookies. Technical information may be processed briefly to produce general visitor statistics and understand repeat visits, but raw IP addresses are not retained.

The information is not used to identify visitors by name or to create advertising profiles.

8. Spam prevention and website security

Pages containing an enquiry form use a third party security service to help distinguish genuine visitors from automated spam and malicious activity.

When you visit or interact with a protected form page, the service may process information including:

• your IP address
• browser and device information
• information about your interaction with the page
• security and risk indicators

This information is used to protect the website and its forms.

The service is only loaded on pages containing a protected form. Its provider may process personal data outside the UK in accordance with its own privacy terms and applicable data protection safeguards.

9. Interactive maps

Our website may include interactive maps supplied by a third party provider.

Where an interactive map is available and consent is required, the map remains blocked until you choose to allow it through the website’s cookie settings.

When you choose to load a map, its provider may receive information including your IP address, browser and device information, approximate location and information about how you interact with the map.

The provider processes this information under its own privacy terms and may process it outside the UK.

You do not need to load an interactive map to contact us or use the main features of our website.

10. Cookies and similar technologies

Our website may use cookies and similar technologies for essential website functions, security, visitor preferences and optional third party content.

Further information about the technologies used, their purposes and how you can manage your choices is provided in our Cookie Policy and through the website’s cookie settings.

You can change your choices for non essential cookies and similar technologies at any time through the website’s cookie settings.

11. Sharing your personal data

We do not sell, rent or trade personal data.

We may share personal data with trusted service providers where this is necessary to operate our website or business. These may include:

• website hosting providers
• email and email delivery providers
• website maintenance and technical support providers
• website security and spam prevention providers
• mapping and embedded content providers
• professional advisers
• regulators, courts, law enforcement bodies or public authorities where disclosure is required or permitted by law

Our website support provider may have limited access to website systems and email delivery records where this is necessary to maintain the website, investigate technical problems or recover an enquiry that was not received correctly.

We require service providers acting on our behalf to protect personal data and use it only for the purposes agreed with us.

12. International transfers

Some of our service providers may store or process personal data outside the UK.

Where UK data protection law requires safeguards for an international transfer, we rely on an approved transfer mechanism. This may include transferring personal data to a country recognised as providing adequate protection or using approved contractual safeguards.

You may contact us for further information about safeguards relevant to your personal data.

13. How long we keep your personal data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected.

When deciding how long to retain personal data, we consider whether it is still needed to:

• respond to an enquiry
• provide or administer a service
• manage a customer or client relationship
• provide technical support or recover an email
• meet legal, accounting, insurance or regulatory requirements
• establish or defend legal rights

Temporary email delivery records are retained only for as long as reasonably necessary to monitor email delivery, investigate technical problems and recover or resend messages. They are then deleted automatically.

Personal data that is no longer required is deleted through the normal operation of our systems and backup schedules.

14. How we protect your personal data

We use reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.

These measures may include:

• secure website hosting
• encrypted website connections
• restricted administrator access
• strong passwords and additional account security
• website security monitoring
• software updates and maintenance
• secure backups
• access controls for email and business systems

No website or electronic communication system can be guaranteed to be completely secure. However, we take proportionate steps to reduce the risk of unauthorised access, misuse or loss.

15. Your data protection rights

Depending on the circumstances, you may have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct inaccurate or incomplete personal data
• ask us to delete personal data where there is no lawful reason to continue holding it
• ask us to restrict how personal data is used in certain circumstances
• object to processing based on legitimate interests
• request certain personal data in a commonly used and machine readable format
• withdraw consent where processing is based on consent
• complain about how your personal data has been handled

These rights do not apply in every situation and may be subject to legal exemptions.

You have the right to object to our use of your personal data where we rely on legitimate interests.

To exercise a right, contact us using the details in Section 1. We may need to confirm your identity before responding.

There is normally no fee for exercising a data protection right. We will respond within the period required by data protection law.

16. Data protection complaints

You can contact us if you have a concern or complaint about how we collect, use, retain or protect your personal data.

Please use the contact details in Section 1 and make it clear that your enquiry is a data protection complaint.

We will acknowledge your complaint within 30 days. We will investigate it without undue delay, keep you informed where appropriate and tell you the outcome.

You also have the right to raise a concern with the Information Commissioner’s Office, the UK regulator for data protection.

You can find information about raising a concern on the Information Commissioner’s Office website.

We would welcome the opportunity to consider your concern directly, but this does not affect your right to contact the Information Commissioner’s Office.

Changes to this policy

We may update this Privacy Policy to reflect changes to our website, services, legal obligations or how we handle personal data.

The current version will be published on this page. The date at the beginning of the policy shows when it was last updated.