Privacy and website storage

Who is responsible for your information?

Reza & Co Limited is responsible for the personal information collected through this website. Questions about this notice can be sent to admin@rezaco.co.uk.

Information handled after someone becomes a client may also be covered by the practice's engagement and client-record arrangements.

What information do we collect?

The contact form may collect:

• Your name and email address.
• An optional telephone number.
• The service you are asking about and whether you are an existing client.
• The general message you choose to provide.

The Self Assessment questionnaire may collect:

• Your name, email address and the tax year you need help with.
• The income sources and circumstances you select.
• Your answers to the relevant guided questions.
• Later answers to specific points shown under “Things to confirm”.
• Submission, checklist and staff-review status information.

The questionnaire is an initial information-gathering service. It does not ask for tax documents, Unique Taxpayer References, National Insurance numbers, bank details or payment information. Please do not enter those details into free-text answers.

Our hosting and security providers may also process limited technical information, such as an IP address and request details, where needed to deliver and protect the website, check that a form submission is made by a person and limit repeated misuse.

How do we use it?

We use website enquiry and questionnaire information to:

• Respond to your enquiry and arrange an appropriate follow-up.
• Take steps you request before potentially entering into a client relationship.
• Understand which Self Assessment circumstances may apply.
• Identify information that needs to be confirmed and prepare likely next steps.
• Protect the website and contact form from spam or misuse.
• Keep reasonable business records and meet legal or professional obligations.

Depending on the circumstances, we rely on steps taken at your request before a contract, our legitimate interests in managing genuine enquiries and operating the questionnaire securely, or a legal obligation. We do not use the questionnaire or contact form for solely automated decisions or marketing sign-ups.

Who helps us provide the website?

The website uses Vercel for hosting, Cloudflare for domain and security services, protected form requests and questionnaire storage, Resend to deliver private links and non-sensitive notifications, and Microsoft 365 for the relevant Reza & Co staff mailbox. These providers process the information needed for their part of the service.

We do not sell personal information. Information may also be shared with professional advisers or public authorities where this is necessary and lawful.

How long do we keep the information?

We keep an enquiry only for as long as reasonably needed to answer it, manage any follow-up and meet applicable legal or professional obligations. If you become a client, relevant information may then be retained under the practice's client-record arrangements.

An online Self Assessment questionnaire record is scheduled for automatic deletion 90 days after it is started. If you become a client, information needed for the engagement may be kept separately under the practice's client-record arrangements. The private client link itself expires after 14 days.

Website storage and cookies

This website currently stores a light-or-dark display preference in your browser's local storage. It is used only to remember the theme you select and is not used to identify or track you.

We do not currently use advertising or visitor-analytics cookies. Hosting and security providers may use technologies that are strictly necessary to deliver and protect the website. We will update this notice and introduce an appropriate choice mechanism before enabling any non-essential tracking.

Your choices and rights

Depending on the circumstances, you may ask for access to your personal information, correction, deletion, restriction, transfer, or object to its use. Contact us at the email address above. You can also raise a concern with the UK Information Commissioner's Office.