Privacy Policy

Last updated: 31 August 2026

Brooks Lawford Accounting Limited (“Brooks Lawford“, “we“, “us“, “our“) is committed to protecting your privacy. This policy explains what personal data we collect when you use this website (brookslawford.com), why we collect it, how we use it, and what rights you have.

This policy is written to comply with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (“PECR”).

1. Who we are

Brooks Lawford Accounting Limited is a company registered in England and Wales under company number 12289292.

Registered office: 5 Beaufort Court, Admirals Way, London, E14 9XL, United Kingdom.

We are the data controller for the personal data described in this policy.

Contact us about privacy:

Email: [email protected]
Post: 5 Beaufort Court, Admirals Way, London, E14 9XL, United Kingdom
Phone: +44 20 3150 1020

2. What personal data we collect

We collect personal data in two ways: when you submit information to us directly, and — only if you consent — through analytics cookies that measure how this website is used.

2.1 Contact and quote request forms

When you submit our contact form or “Get a Quote” form, we collect:

Your name
Your email address
Your phone number
The subject/message you send us
On the “Get a Quote” form: the services and industries you select as relevant to your enquiry

2.2 Information you give us in other ways

If you contact us by phone, email, or in person, we may keep a record of that correspondence and any personal data you choose to share with us (for example, when discussing a potential engagement).

2.3 Analytics data (consent only)

If you accept analytics cookies through our cookie banner, we use Google Analytics and Microsoft Clarity to understand how visitors use this website. These tools may collect:

Pages viewed, time on page, and the links you click
Approximate location (country/city level, derived from your IP address)
Device, browser, and screen size
How you arrived at the site (for example, a search engine or a direct visit)
Anonymised recordings of on-page interaction such as scrolling and clicks (Microsoft Clarity), with form fields and text input masked by default

None of these tools run until you give consent. If you decline, or ignore the banner, no analytics cookies are set and no data is sent to Google or Microsoft. You can change your choice at any time through the cookie settings on this site. Full detail of each cookie is in our Cookie Policy.

3. Why we use your data and our legal basis

Purpose	Personal data used	Legal basis under UK GDPR
Responding to your enquiry or quote request	Name, email, phone, message, selected services/industries	Article 6(1)(b) — necessary to take steps at your request prior to entering into a contract, and/or Article 6(1)(f) — our legitimate interest in responding to enquiries
Maintaining records of correspondence	Name, email, phone, correspondence content	Article 6(1)(f) — legitimate interest in keeping accurate business records
Measuring how this website is used	Analytics data described in section 2.3	Article 6(1)(a) — your consent, given through the cookie banner
Complying with our legal and regulatory obligations (e.g. as a firm supervised under the Money Laundering Regulations 2017)	Client identification and due diligence information collected once an engagement begins	Article 6(1)(c) — necessary for compliance with a legal obligation

We do not use your personal data for automated decision-making or profiling.

4. Who we share your data with

We may share your personal data with:

Service providers who process data on our behalf, such as our IT service providers (website hosting, email, and the contact-form software used on this site).
Analytics providers, where you have consented — Google (Google Analytics) and Microsoft (Microsoft Clarity). See section 5 for international transfers.
Professional and regulatory bodies, where required (for example HMRC as our anti-money laundering supervisor).

We do not sell your personal data. We do not share your data with third parties for their own marketing purposes.

4.1 External services loaded on this website

Google Fonts (fonts.googleapis.com) — this website loads its typefaces from Google’s servers. Your device’s IP address is sent to Google as part of that request. This does not involve cookies.
YouTube — a video on this site is hosted by YouTube. The video player is blocked until you consent to it; if you consent, YouTube may set its own cookies.
Google Analytics and Microsoft Clarity — blocked until you consent, as described in section 2.3.

5. International transfers

If you consent to analytics cookies, the data described in section 2.3 is processed by Google and Microsoft, whose infrastructure includes servers outside the United Kingdom, including in the United States. Both providers rely on the UK Extension to the EU–US Data Privacy Framework and on Standard Contractual Clauses with the UK Addendum as safeguards for those transfers.

If you do not consent to analytics cookies, no data from your visit is transferred to those providers.

Personal data you send us through the contact or quote forms is handled by us in the United Kingdom.

6. How long we keep your data

Enquiry and quote request data: kept for as long as needed to deal with your enquiry and to keep an accurate record of our correspondence, unless a client engagement begins — in which case applicable professional and tax record-keeping rules apply (typically a minimum of six years for accounting records under UK tax legislation).
Records connected to an active client engagement: kept in accordance with our engagement letter and applicable professional standards.
Analytics data: retained by Google Analytics and Microsoft Clarity in line with their standard retention settings for this site.

7. Your rights

Under the UK GDPR, you have the right to:

Access — ask us for a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate or incomplete data.
Erasure — ask us to delete your data, where applicable.
Restriction — ask us to limit how we use your data.
Portability — ask us to provide your data in a portable format, where applicable.
Object — object to our use of your data where we rely on legitimate interests.
Withdraw consent — where we rely on your consent, withdraw it at any time. For analytics cookies you can do this through the cookie settings on this site.

To exercise any of these rights, contact us using the details in Section 1.

7.1 How to complain

If you are unhappy with how we have handled your personal data, you have the right to complain to us directly first, using the contact details in Section 1. We will respond to your complaint.

You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO):

Website: ico.org.uk/make-a-complaint
Phone: 0303 123 1113

8. Children’s data

This website is intended for business use by adults. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page shows when it was last revised.