Privacy Policy

Last updated: October 2026

At MSH Accounting, we take the privacy and security of your personal information seriously.

This Privacy Policy explains how we collect, use, store and protect personal information when you use our website, contact us or engage us to provide accountancy, tax, bookkeeping, payroll, CIS, VAT or business support services.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

MSH Accounting provides accountancy, tax and business support services to individuals and businesses.

Business name: MHSH Consultancy Limited t/a MSH Accounting
Address: 27 Blackmore Avenue, Bideford, Devon, EX39 3TG
Email:matt@mhshconsultancy.co.uk
Telephone:  07827837793
Website: mshaccounting.co.uk
ICO registration number: 

For the purposes of UK data protection law, MSH Accounting is the data controller for personal information covered by this Privacy Policy, except where we act as a data processor on behalf of a client.

The personal information we collect depends on your relationship with us and the services we provide.

This may include:

• Your name, address and contact details
• Date of birth
• National Insurance number and Unique Taxpayer Reference (UTR)
• Employment and payroll information
• Business and company information
• Income, expenditure and taxation information
• Bank and financial information
• Accounting and bookkeeping records
• VAT and CIS information
• Identification documents
• Information required for identity verification and anti-money laundering checks
• Correspondence between you and MSH Accounting
• Information you provide through our website, email, telephone or in person
• Technical information collected when you use our website, where applicable

Where necessary to provide our services or meet our legal obligations, we may also process other categories of personal information.

We will only collect information that is reasonably necessary for the purposes for which it is being used.

We may obtain personal information:

• Directly from you
• From your business or employer
• From your employees, representatives or professional advisers
• From HM Revenue & Customs (HMRC)
• From Companies House
• From accounting, bookkeeping or payroll systems
• From banks and financial institutions where appropriate
• From publicly available sources
• From third parties where you have authorised them to provide information to us
• Through our website and online enquiry forms

We may use your personal information to:

• Provide accountancy, taxation, bookkeeping, payroll, CIS, VAT and business support services
• Prepare accounts, tax returns and other financial documents
• Manage payroll and employment-related calculations
• Prepare and submit information to HMRC and Companies House
• Communicate with you about the services we provide
• Respond to enquiries and provide quotations
• Maintain our client records
• Manage our relationship with you
• Process invoices and payments
• Verify identity and carry out anti-money laundering checks
• Comply with our legal, regulatory and professional obligations
• Establish, exercise or defend legal claims
• Prevent and detect fraud or other unlawful activity
• Manage and improve our business and website

We will not use your personal information for purposes that are incompatible with the reasons for which it was originally collected unless permitted or required by law.

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

Contract – where processing your information is necessary to provide services you have asked us to provide or to take steps before entering into an agreement with you.

Legal obligation – where we are required to process information to comply with our legal, regulatory, taxation, accounting or anti-money laundering obligations.

Legitimate interests – where processing is necessary for the legitimate operation of our business, provided those interests do not override your rights and interests.

Consent – where we have specifically asked for and received your consent for a particular use of your information.

Where we process special category personal data or criminal offence information, we will only do so where an appropriate additional legal condition applies.

As an accountancy service provider, we may be required to undertake identity verification, customer due diligence and other checks to meet applicable anti-money laundering requirements.

This may require us to obtain and retain identification documents and other information about you, your business and, where applicable, beneficial owners or other relevant individuals.

We may use third-party identity verification or compliance services where appropriate.

We do not sell your personal information.

Where necessary, we may share personal information with organisations including:

• HM Revenue & Customs (HMRC)
• Companies House
• Relevant regulatory, supervisory or law enforcement authorities
• Professional advisers
• Accounting, bookkeeping, payroll and taxation software providers
• IT, cloud storage and data hosting providers
• Banks and financial institutions
• Identity verification and anti-money laundering service providers
• Other service providers that support our business

We will only share information where there is an appropriate reason to do so and will take reasonable steps to ensure personal information is appropriately protected.

Where a third party processes information on our behalf, we require appropriate data protection arrangements to be in place.

Some of the technology and service providers we use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable UK data protection requirements and that appropriate safeguards are in place where required.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to comply with our legal, regulatory, taxation and professional obligations.

Different categories of information may be subject to different retention periods.

When information is no longer required, we will securely delete, destroy or anonymise it where appropriate.

We take appropriate technical and organisational measures to protect personal information against accidental or unlawful loss, misuse, alteration, unauthorised access or disclosure.

These measures may include secure systems, password protection, access controls, data backups and appropriate security procedures.

Access to personal information is limited to people who reasonably require it to perform their duties.

Depending on the circumstances and the lawful basis on which we process your information, you may have rights including:

• The right to be informed about how your personal information is used
• The right to access personal information we hold about you
• The right to have inaccurate information corrected
• The right to request deletion of your information in certain circumstances
• The right to request restriction of processing in certain circumstances
• The right to data portability in certain circumstances
• The right to object to certain types of processing
• Rights relating to automated decision-making and profiling, where applicable
• The right to withdraw consent where processing is based on consent

These rights are not absolute and may be subject to exemptions or legal requirements that require us to retain or continue processing certain information.

To exercise any of your data protection rights, please contact us using the details provided in this Privacy Policy.

We will only send electronic marketing communications where we have an appropriate lawful basis to do so.

You can ask us to stop sending marketing communications at any time by contacting us or by using the unsubscribe option included in relevant marketing emails.

Opting out of marketing will not affect communications that are necessary for us to provide accountancy or other services to you.

Our website may use cookies and similar technologies to help it operate correctly, understand how visitors use the website and improve the user experience.

Where required, we will ask for your consent before placing non-essential cookies on your device.

Further information about the cookies used on this website should be provided in our Cookie Policy and/or cookie consent settings.

Our website may contain links to websites operated by third parties.

MSH Accounting is not responsible for the privacy practices or content of third-party websites. We recommend reviewing the privacy information provided by those organisations before providing personal information to them.

We may update this Privacy Policy from time to time to reflect changes to our services, business practices or legal and regulatory requirements.

The latest version will be published on our website with the date it was last updated.

If you have any questions about this Privacy Policy, how we use your information or wish to exercise your data protection rights, please contact:
Business name: MHSH Consultancy Limited t/a MSH Accounting
Address: 27 Blackmore Avenue, Bideford, Devon, EX39 3TG
Email:matt@mhshconsultancy.co.uk
Telephone:  07827837793

If you are unhappy with how we have handled your personal information, you also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's data protection regulator.

Further information is available from the Information Commissioner's Office.