Introduction
BSMART (also referred to as “we”, “us”, “our” in this privacy policy) provides accounting, bookkeeping, and other financial management services to all accountants and enterprises across the United Kingdom. Any information that you share with us remains with us only. We do not share any of your information (personal or professional details) with any third party. This privacy policy will help you understand how we interact with you and how your information is secured with us. We would also like you to know that we have aligned our privacy policies with the EU General Data Protection Regulation, UK GDPR and the Data Protection Act 2018 as amended (GDPR) supporting this initiative taken by the UK Parliament by implementing the directives in the United Kingdom. The processing of personal data by BSMART, such as the name, contact number, and email address of a person visiting our website shall always be in line with the General Data Protection Regulation (GDPR). As the controller, BSMART has implemented multiple securities to ensure the complete protection of data submitted and processed through this website.
If after going through our privacy policy you have any queries, then you can contact:
Name – Prashant Shah
Email Id – prashant.shah@bsmartpartners.com
Contact Number – +44 7809 423816

Defining Audiences
We are defining audiences on the basis of their level of interaction with us-
1 Website Visitors (also referred to as “Visitors”) – If you have visited our website but have not interacted with us over the Live Chat option or filled out any form sharing your details, then you will be referred to as a visitor.
Respondents – If you have interacted and shared your details with us to get in touch with you, then you will be defined as a “Respondent”.
Client – If you are already availing of our services, then you are our “Client”.

Controller and Processor
BSMART acts as both data Processor and Controller as defined in the directive and GDPR.

Clients and Respondents will also act as Controller for the data BSMART have on them and BSMART will be the Processor. Clients and Respondents have the right to see the information we have on them and edit, modify or delete any information they want from our database.

Who is collecting data?
On the website, visitor data is collected by BSMART with the help of third-party tools like Google Analytics and Zendesk. The third-party tools do not retain any of your information and neither are legally allowed to store or use your data. All data and information related to you reside with us only.
Data is also collected directly by BSMART when the data is shared by the clients so that we can complete the jobs our clients want us to complete. This data is stored in cloud data storage platforms where clients have full control to decide what they want to keep on this platform and what they don’t. We do not retain any of the information on any other platform or within local servers and neither are we legally allowed to use this data for any other purpose. All data and information related to our clients reside on this platform.

How is data collected?
Data is collected in the following ways –
Cookie Data – Cookies are small pieces of information sent by a website to a Visitor’s hard disk. Cookies cannot be used to run programs or deliver viruses to your computer. By continuing to visit the website, you agree to the placement of cookies on your device. A temporary cookie may also be used on protected and unprotected sections of our site in order to relay information that is input on one page of the site by the shareholder to other areas that require the same information (e.g. different financial calculators). This relieves the user of having to input the same data on multiple pages. Temporary cookies will not be placed on the computer hard drive of a user, and will be used only during the current session; they are discarded once the user terminates their session. Cookies are activated only during visits to BSMART’s website and do not track activity once a user leaves the website.
Google Analytics – We use Google Analytics to collect information related to the pages the visitor has visited, time spent on that particular page and other standard log information. Google Analytics is not allowed to have access to your Personally Identifiable Information (PII) that you share with us.
Lead Form – Visitors may share their information with us by filling up the lead forms. Lead forms usually contain name, contact number and email address. In general, this information is used by our counsellors and accountants to reach out to you and sort out your queries. All the information shared through lead forms remains with us only.
Zendesk Chat – This live chat is used and operated by BSMART only. Any information you share over the live chat remains with us only. We do not allow Zendesk to receive or store any information you might have shared over the live chat.
Newsletter Subscription – The newsletter subscription is only received by visitors to our website who share their name and email ID with us.

Client Servers: Client servers belong to client and access to these servers are provided by the client to BSMART. Access to the data is for the purposes defined mutually by the Client and BSMART. All data and information on these client servers reside with the client only.
Emails: Data is shared by the clients at times through emails as well. This data remains with us only and is utilised for the purposes as mutually agreed by the Client and BSMART.

Declaration of Sub-Processing
BSMART requires the services of three organisations that act as Data Processor for us in the provision of our services to you:

Google Analytics: It helps us to track the movement of a Visitor within our website and how much time is spent by that Visitor along with other standard log information. They do not capture, store or use any personally identifiable data that you as a Respondent or Client share with us. You can visit Google’s Privacy Policy for more information.
Zendesk Chat: Zendesk is a chat option which is used and operated by BSMART. Zendesk is legally not allowed to store or use any data that you have shared with BSMART. You can visit Zendesk’s Privacy Policy on GDPR for more information.
Mailchimp: As part of the registration process for our monthly e-newsletter, we collect personal information. We use that information for these reasons: to tell you about stuff you’ve asked us to tell you about; to contact you if we need to obtain or provide additional information; to check our records are right and to check every now and then that you’re happy and satisfied. We don’t rent or trade email lists with other organisations and businesses. We use a third-party provider, MailChimp, to deliver our newsletter. We gather statistics around email openings and clicks using industry-standard technologies to help us monitor and improve our e-newsletter. For more information, please see MailChimp’s privacy notice. You can unsubscribe to general mailings at any time of the day or night by clicking the unsubscribe link at the bottom of any of our emails or by emailing our data protection officer.
Access to various platforms: Clients provide access to various platforms to BSMART to carry out the work. These are completely controlled by the clients. BSMART doesn’t have access to any other platform except the ones provided by the clients.
External Links
This website may include relevant hyperlinks to external websites not controlled by BSMART. Whilst all reasonable care has been exercised in selecting and providing any such links, you are advised to exercise caution before clicking any external links. We cannot guarantee the ongoing suitability of external links, nor do we continually verify the safety or security of the contents which may be provided to you. You are advised, therefore, that your use of external links is at your own risk and we cannot be responsible for any damages or consequences caused by your use of them.
About Sensitive Personal Data
GDPR specifies a set of personal data categories which are considered to be “sensitive”, and which require special consideration by Data Controllers. This website, and any services available from this website, do not knowingly collect or process any sensitive personal data.

About Children’s Personal Data
This website, and any services available from this website, are not directed to children under the age of 13. If you learn that a child under the age of 13 has provided us with their personal information without having parental consent, please contact us immediately so that we can take appropriate action.

Data Rights for Respondents and Clients
As prescribed within data protection regulations, you have several rights connected to the provision of your personal data to BSMART using this website. These include your rights to request that BSMART:
confirms to you what personal data it may hold about you, if any, and for what purposes
changes the consent which you have provided in relation to your personal data
corrects any inaccurate or incomplete personal data which may be held about you
provides you with a complete copy of your personal data for you to move elsewhere
if permissible, stop processing your personal data, whilst an objection from you is being resolved
restricts the processing of any of your personal data
if permissible, permanently erase all your personal data promptly, and confirm to you that it has done so (there may be reasons why we may be unable to do this)
You can reach out to us for any request relating to your personal data.

Retention and Deletion of Data
Data of Respondents and Clients are kept by us to ensure that we are able to provide you services and further information related to it. Data of Clients are kept all the time in our secured databases and will not be modified or deleted until requested by the Client himself. When a Client stops taking our services from us, automatically all personal data related to that client will be deleted from our databases, except those details that are required to be maintained by statutory requirements. Data of respondents are retained until the time to fulfil the purpose for which it was collected or as required by applicable laws or regulations.
At all times, BSMART will ensure that the amount of personal data retained by BSMART is limited, accurate and relevant and is necessary in relation to the purpose for which it is processed in order to meet the data minimisation principle.

How to access and modify your data?
If you would like to know all the data that we possess about you or would like to edit or delete data, then you can contact us and we will give you the full right to access and modify your data.

Our Legal Basis For Using Your Data
Everything we do with records about individuals – obtaining the information, storing it, using it, sharing it, even deleting it – will have an acceptable legal basis. We keep a record of when consent was given by an individual to record their data and how to use it. We also keep a record of how that data was shared (e.g. on the website, on a form, verbally) and what they actually consented to.

We also retain the right to reveal the Client’s or Respondent’s information without their prior permission if it is required by law to initiate any legal proceedings against that person or if we believe that person is responsible for infringing rights and property belonging to BSMART or to others who could be harmed by the user’s activities or of persons who could (deliberately or otherwise) transgress upon these rights and property. We are permitted to disclose personal information when we have good reason to believe that this is legally required.

How we follow the six principles of GDPR
Principle 1 – Fair, Lawful and Transparency
We will ensure that all your personal data are handled by us only and only for the services that you have authorised. While collecting data from you, we will ensure that there is transparency, and you understand that you are giving us authorization to connect with you. Your data will not be used for any other services or any unlawful activity.

Principle 2 – Purpose
Visitors who share their data with us become Respondents and Respondents who avail of our services become our Clients. The purpose of receiving the data is to connect with you and solve your queries. The purpose of having Clients’ data is to ensure we complete the work undertaken and we update them about our latest services.

Principle 3 – Adequacy
If you are our Client, then we will require documents related to your business or work to ensure that we do our work diligently and accurately. We do not require any sensitive information and would like you to refrain from sharing such information with us unless explicitly required by law or necessary for filing your taxes or any other services provided by BSMART.
If you are Respondent, then we will have only basic personal information about you unless you have shared any other details with us.

Principle 4 – Accuracy
We will ensure that the data you have provided is not altered at any stage and will take every possible necessary steps to verify the authenticity of the data that is provided. Accurate information is very essential to our services.

Principle 5 – Retention
If you are our Client, then we will require having your data with us till the time you opt out of our service. However, if during the period of availing our service, you would like to modify or delete some data, then you can let us know and we will do that right away. If you are Respondent, then at any time you can choose to delete all the data we have on you.

Principle 6 – Rights
You will have the right to access a copy of your information we have, the right to object to the processing of your data, the right to prevent direct marketing, and editing of your personal data.

Acceptance of these conditions
We assume that all Visitors, Respondents and Clients have read this page carefully. If someone does have any query regarding this policy, then please contact us. If you do not agree to this policy, then please refrain from using our website and services.

Changes to Privacy Policy
We may change this policy from time to time. However, all the changes will be compliant with GDPR to ensure the safety and protection of your personal data. If you continue using our website or services after we have changed our policy then it means that you have accepted our revised policies.

Right to make a Complaint
BSMART takes complaints seriously.
In the event that you wish to make a complaint about how your personal data is processed by BSMART (or any third party listed in this privacy policy) then please make your complaint to the following:

Name – Prashant Shah
Email id: Prashant.shah@bsmartpartners.com
Contact Number – +44 7809 423816

_______________________
This Privacy Notice confirms the type of and lawful basis for the processing of your personal data that we carry out and your rights in relation to this processing.

_______________________

We process your personal data to pursue the following legitimate interests:
To provide various financial services to our clients.
To inform our marketing department where the processing enables us to enhance, modify, personalise or otherwise improve our services/communications with the benefit of the customer.
To identify and prevent fraud.
To enhance the security of our networks and information systems.
To better understand how people interact with our social media and websites.
To enable us to review and offer you any of our existing or planned services.

Categories of Personal Data Obtained
We confirm that we process the following types of personal data:
Name, address (home/business), date of birth and other personal details of our individual clients* and customers of our clients*.
PAYE number, VAT number and similar information of our individual clients and customers of our clients.
Financial information, including bank details of our individual clients and customers of our clients.

The Recipients of your Personal Data
Your personal data will be received and processed by BSMART.

The Retention Periods for your Personal Data
We will store your personal data for a period of seven years from the end of such association with you to enable us to respond to further enquiries on your accounting matters which may be raised by HMRC, other external bodies, stakeholders or you.

Your Rights
Under the General Data Protection Regulations, you have the following rights in relation to your personal data.
A right to be informed as to what personal data we are processing.
A right of access to your personal data.
A right to rectify any inaccuracies in your personal data.
A right to erasion of your personal data
A right to restrict processing.
A right to data portability.
A right to object to the processing of personal data.
A right to object to automated decision-making, including profiling.
A number of these rights only apply in certain circumstances and you may wish to take independent advice if you wish to exercise any. Please note in particular that you have the right to object to our processing carried out to pursue any of our legitimate interests at any time. We would then cease processing your personal data unless we formed the view that the legitimate interest(s) are compelling enough to override your individual rights. If you wish to object to our processing of your personal data to do so, please contact us at info@bsmartpartners.com as soon as possible so that we can add your name to our opt-out list. We will confirm our response to any objection no later than one month after your request.

Source of Your Personal Data
We obtain your personal data from our clients who are typically accountancy firms and small to medium size business enterprises.

Updates to this Section
We reserve the right to update or amend this section at any time to reflect changes in our practices or amendments to Google’s terms of service or privacy policy. We recommend reviewing this section periodically for the latest information on our use of Google Fonts.