PRIVACY NOTICE
1. ABOUT US AND THE PURPOSE OF THIS NOTICE
Dales Evans & Co Limited (‘Dales Evans’) is an accountancy and tax advisory firm. We are registered in England and Wales as a limited liability company under number 2883725 and our registered office is at 88/90 Baker Street, London W1U 6TQ.
For the purposes of the Data Protection Legislation and this notice, Dales Evans is the ‘Data Controller’ and is registered with the ICO (reference Z8601403). As a Data Controller, this means that we are responsible for deciding how we hold and use personal data about you. We are required by the UK Data Protection Act 2018 / UK GDPR to notify you of the information contained in this Privacy Notice.
Dales Evans maintains Records of Processing Activities (ROPA) as required by GDPR Article 30, and where appropriate Data Protection Impact Assessments (DPIA) as per GDPR Article 35.
Our contact details for data protection matters are recorded in Section 13 below.
2. THE KIND OF INFORMATION WE HOLD ABOUT YOU
The information Dales Evans holds about you may include the following:
- your personal details (such as your name, address and contact information)
- information you have provided to us in support of legislative or regulatory requirements
- communications and correspondence between you and Dales Evans
- details of any services you have requested and/or received from us
- information about any complaints and enquiries you have made to Dales Evans
- information we receive from other sources, such as publicly available information
Sensitive personal data: Article 9 of GDPR specifies a set of personal data categories that are 'sensitive' and that require special consideration by data controllers. This website and any services available from this website do not knowingly collect or process any sensitive personal data. Where the provision of our professional services requires us to process sensitive personal data, we will do so only on an appropriate lawful basis and will provide you with information at the point of collection.
Children's personal data: this website and any services available from it are not directed to children under 13. If you learn that a child under 13 has provided us with personal information without parental consent, please contact us (see Section 13 below) so that we can take appropriate action.
3. HOW WE MAY COLLECT YOUR PERSONAL DATA
Dales Evans obtains your personal data directly from you when:
- you request a proposal from us in respect of the professional services we provide
- you engage Dales Evans to provide services and also during the provision of those services
- you contact us by email, telephone, post or social media
Dales Evans may also obtain your personal data indirectly:
- from your employer
- from our clients during the provision of our services
- from third parties and/or publicly available resources (e.g. Companies House)
4. HOW WE USE PERSONAL DATA WE HOLD ABOUT YOU
4.1 Dales Evans may process your personal data:
4.1.1 for purposes necessary for the performance of our contract with you, your employer or our clients and to comply with our legal obligations. This may include processing your personal data where you are an employee, subcontractor, supplier or customer of our client.
4.1.2 for our own legitimate interests provided that those interests do not override any of your own interests, rights and freedoms which require the protection of personal data. This includes processing for marketing to existing clients, IT and network administration, business development activities, the detection and prevention of fraud, and statistical and management purposes.
4.1.3 for compliance with legislative and or regulatory requirements for which Dales Evans, as Data Controller, has a legal responsibility. This will include, for example, ensuring our clients are compliant with ‘Know Your Client’ (KYC) and ‘Anti Money Laundering’ (AML) requirements.
4.1.4 with your specific consent, for example if you have voluntarily provided Dales Evans with your personal information for us to contact you, provide you with information, attend an event, or similar.
4.2 Note that we may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data. In some circumstances we may anonymise the personal data so that it can no longer be associated with you, in which case we may use it without further notice to you.
4.3 Where Dales Evans identified a need to use your personal data for any reason other than the purpose for which we originally collected it, we will only use your personal data where that reason is compatible with the original purpose. If we need to use your data for a new purpose, we will notify you and communicate our legal basis for this new processing.
5. DATA SHARING
We will share your personal data with third parties where we are required by law, where it is necessary to administer the relationship between us or where we have another legitimate interest in doing so. This may include sharing your personal data with a regulator or to otherwise comply with the law.
‘Third parties’ includes third-party service providers, which may include IT and cloud service providers, professional advisory services, insurance services and banking services. We only permit third-party service providers to process your personal data for specified purposes and in accordance with our instructions.
We may share your personal data with other third parties, for example in the context of the possible sale or restructuring of the business. We may also need to share your personal data with a regulator or to otherwise comply with the law.
6. DATA RETENTION
6.1 Dales Evans will only retain your personal data for as long as is necessary to fulfil the purposes for which it is was originally collected. When assessing what retention period is appropriate for your personal data, we take into consideration the requirements of our business and the services provided, any statutory or legal obligations and the purposes for which we originally collected the personal data.
6.2 Where you have engaged Dales Evans to provide you with professional services, we are entitled to hold your personal data as part of our records after you cease to instruct us. We hold that data not only to satisfy various legal obligations which our profession is subject to, but also because we have a legitimate interest in keeping accurate records of the services which we have provided to you.
6.3 However, we do not store your data indefinitely and we do not (without your specific agreement) perform an archiving service for current or former clients. Accordingly, you can expect us to dispose of your data approximately seven years after you cease to instruct us in most cases.
7. TRANSFERRING PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)
Your personal data may be transferred outside the UK and the European Economic Area (EEA), including where our third-party service providers process data in such locations. While some countries have adequate protection for personal data under applicable laws, in other countries steps will be necessary to ensure appropriate safeguards apply to it. Where we make such a transfer, we will ensure that an appropriate safeguard is in place, such as UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Further details of the safeguards we rely on are available on request, contact details are in Section 13 below.
8. DATA SECURITY
We have put in place commercially reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have an authorised business need to know. They will only process your personal data in strict accordance with our written instructions and their confidentiality agreement.
We have put in place procedures to deal with any suspected data security breach (including data loss or theft) and will promptly notify you and any applicable regulator (e.g. the Information Commissioners Office) of a suspected breach where we are legally required to do so.
9. RIGHTS OF ACCESS, CORRECTION, ERASURE, AND RESTRICTION
It is important that the personal data Dales Evans holds about you is accurate and current. Should your personal information change, please notify us of any changes of which we need to be made aware by contacting us, using the contact details below.
Under certain circumstances, you have the right to request:
9.1 Access to your personal data, and to understand the purposes for its processing.
9.2 Provide, change or withdraw your consent for processing, where consent is the legal basis for processing.
9.3 The correction of any incorrect or incomplete personal data that we may be holding about you.
9.4 A copy of your personal data for you to move elsewhere (under specific circumstances).
9.5 A restriction to processing of your personal data whilst a data processing objection is investigated.
9.6 Deletion of your personal data, although there may be valid reasons why we are unable to do this.
If you want to exercise any of the above rights, please contact us.
If Dales Evans does not address your data subject request, or we have failed to provide you with a valid reason why we have been unable to do so, you have the right to make a complaint to the ICO via their website https://ico.org.uk/make-a-complaint/ or by phone on 0303 123 1113.
10. WEBSITE COOKIES
The Dales Evans website uses cookies to record log data. We use session-based and persistent cookies, depending on how you use or interact with this website. By using our website, you agree to our declared use of cookies as explained below.
Cookies are small text files sent by us to your computer/mobile device, or from your computer/mobile device to us, each time you visit our website. They are unique to you or your web browser. Session-based cookies last only while your browser is open and are automatically deleted when you close your browser. Persistent cookies last until you or your browser delete them or until they expire.
We use cookies on our website help us collect information. This may also include third-party cookies which may collect Information about you via our website and across other websites.
Visit www.google.com for details of the privacy controls available to Google users, including those relating to websites that use Google Analytics and other Google services. There are also details of how Google uses information from sites or apps that use Google services.
11. EXTERNAL LINKS
Hyperlinks from the Dales Evans website to external websites are provided by us in good faith. User diligence is required, as we accept no liability for the consequences of following those links.
12. CHANGES TO THIS NOTICE
Any changes we may make to our privacy notice in the future will be updated on our website at www.dalesevans.co.uk. This privacy notice was last updated on 20th August 2026.
13. CONTACT US
If you have any questions regarding this Privacy Notice, you would like to exercise any of your data subject rights, or you wish to make a complaint, please contact dataprotection@dalesevans.co.uk.
Updated: August 24 2026
1. ABOUT US AND THE PURPOSE OF THIS NOTICE
Dales Evans & Co Limited (‘Dales Evans’) is an accountancy and tax advisory firm. We are registered in England and Wales as a limited liability company under number 2883725 and our registered office is at 88/90 Baker Street, London W1U 6TQ.
For the purposes of the Data Protection Legislation and this notice, Dales Evans is the ‘Data Controller’ and is registered with the ICO (reference Z8601403). As a Data Controller, this means that we are responsible for deciding how we hold and use personal data about you. We are required by the UK Data Protection Act 2018 / UK GDPR to notify you of the information contained in this Privacy Notice.
Dales Evans maintains Records of Processing Activities (ROPA) as required by GDPR Article 30, and where appropriate Data Protection Impact Assessments (DPIA) as per GDPR Article 35.
Our contact details for data protection matters are recorded in Section 13 below.
2. THE KIND OF INFORMATION WE HOLD ABOUT YOU
The information Dales Evans holds about you may include the following:
- your personal details (such as your name, address and contact information)
- information you have provided to us in support of legislative or regulatory requirements
- communications and correspondence between you and Dales Evans
- details of any services you have requested and/or received from us
- information about any complaints and enquiries you have made to Dales Evans
- information we receive from other sources, such as publicly available information
Sensitive personal data: Article 9 of GDPR specifies a set of personal data categories that are 'sensitive' and that require special consideration by data controllers. This website and any services available from this website do not knowingly collect or process any sensitive personal data. Where the provision of our professional services requires us to process sensitive personal data, we will do so only on an appropriate lawful basis and will provide you with information at the point of collection.
Children's personal data: this website and any services available from it are not directed to children under 13. If you learn that a child under 13 has provided us with personal information without parental consent, please contact us (see Section 13 below) so that we can take appropriate action.
3. HOW WE MAY COLLECT YOUR PERSONAL DATA
Dales Evans obtains your personal data directly from you when:
- you request a proposal from us in respect of the professional services we provide
- you engage Dales Evans to provide services and also during the provision of those services
- you contact us by email, telephone, post or social media
Dales Evans may also obtain your personal data indirectly:
- from your employer
- from our clients during the provision of our services
- from third parties and/or publicly available resources (e.g. Companies House)
4. HOW WE USE PERSONAL DATA WE HOLD ABOUT YOU
4.1 Dales Evans may process your personal data:
4.1.1 for purposes necessary for the performance of our contract with you, your employer or our clients and to comply with our legal obligations. This may include processing your personal data where you are an employee, subcontractor, supplier or customer of our client.
4.1.2 for our own legitimate interests provided that those interests do not override any of your own interests, rights and freedoms which require the protection of personal data. This includes processing for marketing to existing clients, IT and network administration, business development activities, the detection and prevention of fraud, and statistical and management purposes.
4.1.3 for compliance with legislative and or regulatory requirements for which Dales Evans, as Data Controller, has a legal responsibility. This will include, for example, ensuring our clients are compliant with ‘Know Your Client’ (KYC) and ‘Anti Money Laundering’ (AML) requirements.
4.1.4 with your specific consent, for example if you have voluntarily provided Dales Evans with your personal information for us to contact you, provide you with information, attend an event, or similar.
4.2 Note that we may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data. In some circumstances we may anonymise the personal data so that it can no longer be associated with you, in which case we may use it without further notice to you.
4.3 Where Dales Evans identified a need to use your personal data for any reason other than the purpose for which we originally collected it, we will only use your personal data where that reason is compatible with the original purpose. If we need to use your data for a new purpose, we will notify you and communicate our legal basis for this new processing.
5. DATA SHARING
We will share your personal data with third parties where we are required by law, where it is necessary to administer the relationship between us or where we have another legitimate interest in doing so. This may include sharing your personal data with a regulator or to otherwise comply with the law.
‘Third parties’ includes third-party service providers, which may include IT and cloud service providers, professional advisory services, insurance services and banking services. We only permit third-party service providers to process your personal data for specified purposes and in accordance with our instructions.
We may share your personal data with other third parties, for example in the context of the possible sale or restructuring of the business. We may also need to share your personal data with a regulator or to otherwise comply with the law.
6. DATA RETENTION
6.1 Dales Evans will only retain your personal data for as long as is necessary to fulfil the purposes for which it is was originally collected. When assessing what retention period is appropriate for your personal data, we take into consideration the requirements of our business and the services provided, any statutory or legal obligations and the purposes for which we originally collected the personal data.
6.2 Where you have engaged Dales Evans to provide you with professional services, we are entitled to hold your personal data as part of our records after you cease to instruct us. We hold that data not only to satisfy various legal obligations which our profession is subject to, but also because we have a legitimate interest in keeping accurate records of the services which we have provided to you.
6.3 However, we do not store your data indefinitely and we do not (without your specific agreement) perform an archiving service for current or former clients. Accordingly, you can expect us to dispose of your data approximately seven years after you cease to instruct us in most cases.
7. TRANSFERRING PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)
Your personal data may be transferred outside the UK and the European Economic Area (EEA), including where our third-party service providers process data in such locations. While some countries have adequate protection for personal data under applicable laws, in other countries steps will be necessary to ensure appropriate safeguards apply to it. Where we make such a transfer, we will ensure that an appropriate safeguard is in place, such as UK adequacy regulations, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Further details of the safeguards we rely on are available on request, contact details are in Section 13 below.
8. DATA SECURITY
We have put in place commercially reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have an authorised business need to know. They will only process your personal data in strict accordance with our written instructions and their confidentiality agreement.
We have put in place procedures to deal with any suspected data security breach (including data loss or theft) and will promptly notify you and any applicable regulator (e.g. the Information Commissioners Office) of a suspected breach where we are legally required to do so.
9. RIGHTS OF ACCESS, CORRECTION, ERASURE, AND RESTRICTION
It is important that the personal data Dales Evans holds about you is accurate and current. Should your personal information change, please notify us of any changes of which we need to be made aware by contacting us, using the contact details below.
Under certain circumstances, you have the right to request:
9.1 Access to your personal data, and to understand the purposes for its processing.
9.2 Provide, change or withdraw your consent for processing, where consent is the legal basis for processing.
9.3 The correction of any incorrect or incomplete personal data that we may be holding about you.
9.4 A copy of your personal data for you to move elsewhere (under specific circumstances).
9.5 A restriction to processing of your personal data whilst a data processing objection is investigated.
9.6 Deletion of your personal data, although there may be valid reasons why we are unable to do this.
If you want to exercise any of the above rights, please contact us.
If Dales Evans does not address your data subject request, or we have failed to provide you with a valid reason why we have been unable to do so, you have the right to make a complaint to the ICO via their website https://ico.org.uk/make-a-complaint/ or by phone on 0303 123 1113.
10. WEBSITE COOKIES
The Dales Evans website uses cookies to record log data. We use session-based and persistent cookies, depending on how you use or interact with this website. By using our website, you agree to our declared use of cookies as explained below.
Cookies are small text files sent by us to your computer/mobile device, or from your computer/mobile device to us, each time you visit our website. They are unique to you or your web browser. Session-based cookies last only while your browser is open and are automatically deleted when you close your browser. Persistent cookies last until you or your browser delete them or until they expire.
We use cookies on our website help us collect information. This may also include third-party cookies which may collect Information about you via our website and across other websites.
Visit www.google.com for details of the privacy controls available to Google users, including those relating to websites that use Google Analytics and other Google services. There are also details of how Google uses information from sites or apps that use Google services.
11. EXTERNAL LINKS
Hyperlinks from the Dales Evans website to external websites are provided by us in good faith. User diligence is required, as we accept no liability for the consequences of following those links.
12. CHANGES TO THIS NOTICE
Any changes we may make to our privacy notice in the future will be updated on our website at www.dalesevans.co.uk. This privacy notice was last updated on 20th August 2026.
13. CONTACT US
If you have any questions regarding this Privacy Notice, you would like to exercise any of your data subject rights, or you wish to make a complaint, please contact dataprotection@dalesevans.co.uk.
Updated: August 24 2026