Privacy Policy

Last updated: 8 July 2026

NDA Silva Ltd ("we", "us") is a bookkeeping and accounts practice registered in England and Wales (company number 15851110), supervised for anti-money laundering purposes by the International Association of Bookkeepers (IAB). We are committed to protecting the personal data of our clients, their employees, and visitors to our website, and to handling it in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.

Who this policy covers

This policy applies to personal data we process when you visit ndasilva.co.uk or portal.ndasilva.co.uk, submit one of our online forms, engage us for bookkeeping, payroll, or accounts services, or interact with our social media presence, including content we publish through connected applications.

Information we collect

• Contact details — name, email address, phone number, and business details when you enquire about or engage our services.
• Financial and accounting records — bookkeeping, payroll, VAT, and tax information we process on behalf of client businesses as part of our engagement.
• Employee information — where we run payroll for a client, we process personal data about their employees (such as names, National Insurance numbers, pay and tax details) provided through our onboarding and leaver forms.
• Identity verification data — documents and information we are required to collect for client due diligence under the Money Laundering Regulations 2017.
• Technical data — limited technical information (such as browser type) collected by our hosting providers to serve and secure our websites. We do not run advertising trackers.

How we use your information

• To provide bookkeeping, payroll, VAT, and accounts services under our engagement with you (performance of a contract).
• To meet our legal and regulatory obligations, including anti-money laundering client due diligence and filing obligations to HMRC and Companies House (legal obligation).
• To respond to enquiries and administer our client relationships (legitimate interests).
• To publish content about our services on our own social media channels. Our publishing tools post to accounts we control and do not collect data about other social media users.

Who we share it with

We share personal data only where necessary to deliver our services or meet legal obligations:

• HMRC and Companies House — for filings and correspondence made on your behalf as your agent.
• Software providers — we use reputable providers to run our practice, including Xero (accounting records), Google Workspace (email and documents), Zoho (forms), and Netlify (website hosting). Each processes data under its own security and privacy commitments.
• Our regulators — the IAB or law enforcement where we are legally required to do so, including obligations under the Proceeds of Crime Act 2002.

We do not sell personal data to anyone.

How long we keep it

We retain client records for as long as needed to provide our services and to meet legal requirements. Records relating to anti-money laundering due diligence are kept for five years after the end of a client relationship, and accounting and tax records are retained in line with HMRC requirements (generally six years). Enquiry data from people who do not become clients is deleted within twelve months.

Social media and connected applications

We maintain business profiles on social media platforms, including Instagram, and use our own publishing application ("NDA Silva Publisher") to schedule and publish content to accounts we own. This application does not access, collect, or store personal data belonging to other users of those platforms. Data you share by interacting with our social media profiles (for example, commenting on a post) is processed by the relevant platform under its own privacy policy.

Your rights

Under UK data protection law you have rights to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Some rights are limited where we must retain records to meet legal obligations. To exercise any of these rights, contact us using the details below. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Data deletion requests

To request deletion of your personal data, email us at the address below with the subject line "Data deletion request". We will confirm receipt and respond within one month. Where the law requires us to retain certain records (for example under the Money Laundering Regulations), we will explain what must be kept and for how long, and delete everything else.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised.