Privacy Policy

Last Updated: June 2026

1. About Us
SG Advisory (Scotland) Limited is a company registered in Scotland under company number SC876921.
Registered Office:
5 South Charlotte Street
Edinburgh
EH2 4AN
For the purposes of UK data protection legislation, SG Advisory (Scotland) Limited is the data controller responsible for your personal information.
If you have any questions about this Privacy Policy or how we process your personal data, please contact:
Sandi Grubb
Email: [email protected]
ICO Registration Number: ZC113265
________________________________________
2. Purpose of This Privacy Policy
This Privacy Policy explains how SG Advisory (Scotland) Limited collects, uses, stores and protects personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection laws.
This policy applies to visitors to our website, prospective clients and clients who engage us to provide accounting, tax and advisory services.
________________________________________
3. The Personal Information We Collect
We may collect, use and store the following types of personal information:
Information you provide directly
• Name
• Email address
• Telephone number
• Postal address
• Business details
• Information relating to your tax affairs, accounts or financial position
• Any information you provide through our website contact form, email, telephone or social media channels
Information collected for compliance purposes
To comply with anti-money laundering regulations and professional obligations, we may collect:
• Photographic identification
• Proof of address
• Information required to verify identity and, where appropriate, source of funds
Information collected automatically
When you visit our website, we may automatically collect:
• IP address
• Browser type and version
• Device information
• Website usage data
• General location information
________________________________________
4. How We Collect Your Information
We may collect personal information when:
• You enquire about our services
• You engage us to provide services
• You complete a website contact form
• You communicate with us by email, telephone, social media or post
• Information is provided by authorised third parties acting on your behalf
• Information is obtained from publicly available sources such as Companies House
________________________________________
5. How We Use Your Information
We use personal information to:
• Respond to enquiries
• Provide accounting, tax and advisory services
• Verify identity and comply with anti-money laundering regulations
• Manage our client relationships
• Maintain business records
• Meet legal and regulatory obligations
We will only use your personal information where we have a lawful basis for doing so.
________________________________________
6. Lawful Bases for Processing
Under UK GDPR, we rely on one or more of the following lawful bases:
Contract
Processing is necessary to provide services you have requested or to take steps before entering into a contract.
Legal Obligation
Processing is necessary to comply with legal and regulatory requirements, including tax, anti-money laundering and professional obligations.
Legitimate Interests
Processing is necessary for the legitimate interests of our business, provided those interests do not override your rights and freedoms.
Consent
Where required, we will obtain your consent before processing personal information. You may withdraw your consent at any time.
________________________________________
7. Who We Share Information With
We may share personal information where necessary with:
• HM Revenue & Customs (HMRC)
• Professional advisers
• Regulatory or supervisory bodies
• Anti-money laundering verification providers
• Cloud-based practice management software providers
• Accounting software providers including Xero, FreeAgent and QuickBooks
• IT and technology service providers
• Government bodies, courts or law enforcement agencies where required by law
We do not sell personal information to third parties.
________________________________________
8. International Transfers
Some of our software providers may process data outside the United Kingdom.
Where this occurs, we will ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR requirements.
________________________________________
9. How Long We Keep Information
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, regulatory and professional obligations.
In most cases, client records will be retained for at least six years after the end of our engagement, although certain records may be retained for longer where required by law, regulation or ongoing legal proceedings.
Information relating to prospective clients who do not engage our services will generally be retained for up to twelve months.
________________________________________
10. How We Protect Your Information
We take appropriate technical and organisational measures to safeguard personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures include:
• Secure cloud-based systems
• Password protection and access controls
• Secure data storage
• Confidentiality obligations
• Regular review of security procedures
While we take reasonable steps to protect personal information, no method of electronic transmission or storage can be guaranteed to be completely secure.
________________________________________
11. Your Rights
Under UK GDPR, you may have the following rights:
• The right to access your personal information
• The right to have inaccurate information corrected
• The right to request erasure of personal information
• The right to restrict processing
• The right to object to processing
• The right to data portability
• The right to withdraw consent where consent is the lawful basis for processing
If you wish to exercise any of these rights, please contact us using the details provided in this policy.
We will normally respond within one month.
________________________________________
12. Cookies and Website Analytics
Our website may use cookies and similar technologies to improve user experience, monitor website performance and understand how visitors use our website.
You can control cookies through your browser settings.
Further information may be provided in a separate Cookie Policy where applicable.
________________________________________
13. Third-Party Websites
Our website may contain links to external websites.
We are not responsible for the privacy practices or content of third-party websites and encourage you to review their privacy policies before providing personal information.
________________________________________
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Any updates will be published on our website and the revised version will take effect immediately upon publication.
________________________________________
15. Complaints
If you are unhappy with how we have handled your personal information, please contact us first so that we can try to resolve your concerns.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk
________________________________________
16. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal information, please contact:
Sandi Grubb
SG Advisory (Scotland) Limited
Email: [email protected]
Registered Office:
5 South Charlotte Street
Edinburgh
EH2 4AN