Privacy Notice

Privacy Notice

Privacy Notice

Last updated: July 2026

This Privacy Notice explains how Mark Wolfe & Co collects, uses, stores and protects personal information.

1. Who We Are

1. Who We Are

Mark Wolfe & Co is a trading name of BosBai Ltd.

BosBai Ltd is the data controller responsible for the personal information described in this notice.

Company number: 13990971

Registered office:
29 Main Road
Windermere
LA23 1DX

Email:
info@mwaccounts.co.uk

Telephone:
07546 720388

2. The Information We Collect

2. The Information We Collect

The personal information we collect depends on the nature of our relationship with you.

It may include:

Your name, address, email address and telephone number.

Information about your business, employment, directorships or professional activities.

Information submitted through our website enquiry form, including your business name, business type, accounting software and the support you require.

Financial, accounting, taxation, payroll and business records supplied when you become a client.

Identity documents and information required for anti-money-laundering and client-verification checks.

Details of shareholders, directors, employees, subcontractors, customers, suppliers or other individuals where this is relevant to the services we provide.

Correspondence and records of communications by email, telephone, post or through the website.

Technical information relating to use of the website, such as general device, browser, referral and country information provided through privacy-focused website analytics.

Business contact information obtained from publicly available sources, professional directories, lead-generation services, referrals and business websites.

We do not normally request sensitive personal information through the general website enquiry form. Please only provide information that is relevant to your enquiry.

3. How We Collect Information

3. How We Collect Information

We may collect personal information:

Directly from you when you contact us, complete the website enquiry form, request a quotation or become a client.

From another person or organisation acting with your authority, including a previous accountant, adviser, employer, company or business partner.

From HM Revenue & Customs, Companies House and other government or regulatory bodies where appropriate.

From publicly available business sources, including Companies House records, company websites, professional directories and lead-generation platforms.

Through the software and online services used to provide our accountancy and business services.

4. How and Why We Use Your Information

4. How and Why We Use Your Information

We may use personal information to:

Respond to enquiries and provide quotations.

Take steps at your request before entering into an engagement.

Set up and manage client relationships.

Provide accountancy, taxation, bookkeeping, payroll, VAT, business advisory and related professional services.

Communicate with clients, prospective clients and authorised third parties.

Complete identity, anti-money-laundering and other regulatory checks.

Prepare and submit information to HM Revenue & Customs, Companies House and other relevant authorities.

Maintain accounting, tax, regulatory and professional records.

Administer invoices, payments and the operation of the practice.

Protect the security and integrity of our systems and services.

Establish, exercise or defend legal claims.

Maintain and improve our services, website and business operations.

Send relevant information about our accountancy services where permitted by law.

5. Our Lawful Bases

5. Our Lawful Bases

Depending on the circumstances, we rely on one or more of the following lawful bases:

Contract / Steps Before Entering Into a Contract

Where information is supplied in connection with an enquiry about accountancy services, or where processing is necessary to take steps before entering into an engagement or to perform the services agreed with you.

Legal Obligation

Where processing is necessary to comply with tax, accounting, company law, anti-money-laundering, regulatory or other legal obligations.

Legitimate Interests

Where appropriate for operating, securing and improving the website and managing business enquiries, provided those interests are not overridden by your rights and interests.

Consent

For optional advertising and measurement technologies where consent is required. You may withdraw your consent at any time through the website’s cookie controls.

6. Business Development and Marketing

6. Business Development and Marketing

We may use business contact information to introduce our accountancy services to businesses and professional contacts where we believe those services may be relevant.

Contact information may come from publicly available business records, company websites, professional directories, lead-generation platforms, referrals or previous communications.

We rely on our legitimate interests for appropriate business-to-business marketing unless consent is required by law.

You may ask us to stop sending marketing communications at any time by replying to the communication or emailing:

info@mwaccounts.co.uk

We may retain a minimal suppression record after an opt-out so that we can respect your preference and avoid contacting you again.

7. Who We May Share Information With

7. Who We May Share Information With

Where necessary and appropriate, we may share personal information with:

HM Revenue & Customs, Companies House and other government, tax or regulatory authorities.

Professional and regulatory bodies, including ICAEW, where required.

Banks, pension providers and other financial institutions where authorised or necessary.

Our professional indemnity insurers, legal advisers and other professional advisers.

Email, document storage, website hosting, secure backup and information-technology providers.

Framer, which hosts the website and processes information submitted through the website form on our behalf.

Google LLC, as a provider of advertising measurement and tag-management services, where Google Ads conversion tracking and Google Tag Manager are used.

Cloud accounting, bookkeeping, payroll, tax, identity-verification, anti-money-laundering, electronic-signature and practice-management software providers.

Xero, QuickBooks and other accounting platforms where these are used for a client engagement.

Previous or successor accountants and advisers where you have authorised the transfer.

Contractors or service providers who are subject to appropriate confidentiality and data-protection obligations.

Law enforcement agencies, courts or other parties where disclosure is required by law or necessary to protect legal rights.

A prospective purchaser or successor if the practice or company is sold, transferred or reorganised.

We do not sell personal information to third parties.

8. International Data Transfers

8. International Data Transfers

Some service providers we use, including Google, may process information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate level of protection is in place.

This may include relying on UK adequacy regulations or appropriate legal safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to standard contractual clauses, where required.

9. How Long We Keep Information

9. How Long We Keep Information

We keep personal information only for as long as it is reasonably required for the purpose for which it was collected and to meet our legal, regulatory, tax and professional obligations.

Our usual retention periods include:

Enquiry and prospective-client records that do not result in an engagement are normally retained for up to two years after the last meaningful contact.

Client, accounting and tax records are normally retained for approximately seven years after the end of the relevant engagement or accounting period.

Identity and anti-money-laundering records are retained for the period required by applicable law.

Records may be retained for longer where required by law, professional rules, an ongoing enquiry, a dispute, a legal claim or another legitimate reason.

Marketing suppression records may be retained for longer so that we can continue to honour an opt-out request.

When information is no longer required, it is securely deleted or anonymised where reasonably practicable.

10. Cookies, Advertising and Conversion Tracking

10. Cookies, Advertising and Conversion Tracking

We use cookies and similar technologies where necessary to operate the website and, with your consent, to measure the effectiveness of our advertising.

We may use Google Ads conversion tracking to understand whether people who interact with our advertisements subsequently take actions on our website, such as submitting an enquiry or contacting us. This may involve processing advertising click identifiers, cookie or device identifiers, browser and device information, referral information and details of conversion events.

Optional advertising and measurement technologies will only be used in accordance with your cookie choices. You can accept or reject optional cookies using the website’s cookie controls.

Google Tag Manager

Google Tag Manager may be used to manage and deploy website tags, including Google Ads conversion tracking. It acts as the tag-management layer through which those services are controlled.

Google Ads

Google Ads conversion tracking helps us measure the effectiveness of our advertising by recording actions taken after someone interacts with an advertisement. Where consent is required, advertising cookies and related tracking technologies will not be used unless that consent has been provided.

Information generated through Google Ads may be processed by Google in accordance with Google’s own privacy terms and policies.

11. Security

11. Security

We use reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

These measures may include access controls, passwords, secure cloud software, backups, device security and confidentiality obligations.

No internet transmission or electronic storage system can be guaranteed to be completely secure, but we take reasonable steps appropriate to the nature of the information we handle.

12. Your Data-Protection Rights

12. Your Data-Protection Rights

Depending on the circumstances and the lawful basis being used, you may have the right to:

Ask for access to the personal information we hold about you.

Ask for inaccurate or incomplete information to be corrected.

Ask for personal information to be deleted.

Ask us to restrict how personal information is used.

Object to certain uses of your personal information, including direct marketing.

Request the transfer of information you provided to us in a portable format.

Withdraw consent where processing is based on consent.

These rights are not absolute and may be subject to legal or regulatory exceptions.

To make a request, email:

info@mwaccounts.co.uk

We may need to confirm your identity before acting on a request.

13. Data-Protection Complaints

13. Data-Protection Complaints

If you have a concern or complaint about how we have handled your personal information, please contact us first so that we can investigate it.

Email:

info@mwaccounts.co.uk

Please use the subject line:

Data Protection Complaint

You may also write to:

BosBai Ltd trading as Mark Wolfe & Co
29 Main Road
Windermere
LA23 1DX

We will acknowledge receipt of a data-protection complaint within 30 days and will take appropriate steps to investigate and respond without undue delay.

If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone:
0303 123 1113

Website:

14. Automated Decision-Making

14. Automated Decision-Making

We do not currently make decisions about individuals based solely on automated processing where those decisions produce legal or similarly significant effects.

15. Information About Other People

15. Information About Other People

If you provide personal information about another person, you should ensure that you are entitled to provide it and that they understand how their information may be used.

16. Changes to This Notice

16. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our services, technology, legal obligations or working practices.

The latest version will always be published on this page with the date of the most recent update.