Privacy and cookies.

Who we are

Heart and Soul Accounting Limited is the data controller for personal data collected through this website. We are registered in England and Wales, company number 16136918, at 2a Torrington Road, Portsmouth, PO2 0TP, and registered with the Information Commissioner’s Office, registration number [new company ICO number to follow; the registration is being moved from Hayley’s sole-trader record to the company]. Contact us about your data at info@heartandsoulaccounting.co.uk.

What we collect, and why

• Enquiry form: your name, email, turnover band, company type, years trading, sector and anything you choose to tell us, so we can reply and decide together whether we are a good fit. Lawful basis: steps taken at your request before entering into a contract.
• Bookings and payments: your name, email and booking details for calls and Unstuck Sessions. Card payments are taken by Stripe, which acts as an independent controller for payment data; we never see or store your full card details. Lawful basis: performance of a contract.
• Enquiry assistant: the messages you type into the website chat, so it can answer questions about our packages, fees and booking. The assistant is provided by [AI provider], which processes the messages on our instructions as our processor. Conversations are kept for 30 days and then deleted. Please do not type confidential financial figures into the chat. Lawful basis: our legitimate interest in answering visitors’ questions, balanced against your interests by keeping the scope narrow and the retention short.
• Two-minute check: your answers, and your email address only if you ask for your result to be sent to you. Lawful basis: consent.
• Analytics: how the site is used, through Google Analytics, only if you accept analytics cookies. Lawful basis: consent, which you can withdraw at any time from the “Cookie settings” link in the footer.
• Emails and calls: correspondence with you, kept as a record of our dealings. Lawful basis: contract and legitimate interests.

Who we share it with

Only the service providers that help us run the website and bookings, each under a written contract: website hosting (GoDaddy), online booking ([booking tool]), card payments (Stripe), the enquiry assistant ([AI provider]), email and document storage (Microsoft 365), and Google Analytics if you have accepted analytics cookies. Some of these providers process data in the United States. Where they do, transfers are covered by the UK Extension to the EU-US Data Privacy Framework or by the UK International Data Transfer Addendum. We never sell personal data.

How long we keep it

• Enquiries that do not become clients: 12 months from your last contact with us.
• Unstuck Session bookings and receipts: six years after the end of the financial year, for tax and accounting records.
• Enquiry assistant conversations: 30 days.
• Client records: for as long as the law and ICAEW’s rules require, normally six years after the engagement ends.

Your rights

You can ask to see the personal data we hold about you, have it corrected or deleted, object to or restrict how we use it, ask for a copy in a portable form, and withdraw consent at any time where consent is our basis. Email info@heartandsoulaccounting.co.uk. We respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Cookies

Essential cookies keep the site working and remember your cookie choice. Analytics cookies are set only if you choose “Accept analytics” in the banner, and you can change your choice at any time from the “Cookie settings” link in the footer. The booking calendar and payment form load only when you open them, and may set their own cookies at that point.

Last reviewed: November 2026