Privacy Notice.

This Privacy Notice explains how Luvero Accounting Ltd collects, uses, stores, and protects personal information. It covers people who contact us, prospects on our waiting list, website visitors, and clients who engage us to provide accountancy services.

01About this notice

This Privacy Notice explains how Luvero Accounting Ltd ("Luvero", "we", "us", "our") collects, uses, stores, and protects personal information about the people we interact with — clients, prospective clients on our waiting list, website visitors, and members of the public who contact us. It applies to information collected through our website at luvero.uk, through email and telephone, through our waiting list and client onboarding processes, and through the course of providing accountancy and advisory services.

We are committed to processing personal information lawfully, fairly, and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

02Who we are

Luvero Accounting Ltd is the data controller for the personal information described in this notice.

• Company name: Luvero Accounting Ltd
• Registered in: England and Wales
• Registered office: Sparkhouse, Rope Walk, Lincoln, LN6 7DQ
• Company registration number: 10972036
• AAT Licence number: 10113057
• ICO registration number: ZB334664
• General contact: [email protected]
• Data protection contact: [email protected] (please mark your message "FAO Data Protection")

If you have any questions about this notice or about how we handle your information, please contact us at the email address above.

03The information we collect

Depending on how you interact with us, we collect and process the following categories of personal information.

Enquiry and waiting list information

When you contact us or complete our waiting list form, we collect:

• Your name, email address, telephone number, and preferred contact method
• Your business name and type, what your business does, approximate turnover range, headcount, year-end date, and company number where applicable
• The services you are interested in and details of your current bookkeeping software
• Your reasons for considering Luvero, your timing, and how you heard about us
• Any other context you choose to share with us

Client information

Once you become a client and engage us under an engagement letter, we additionally collect:

• Identity verification documents (passport, driving licence, proof of address) required under anti-money laundering legislation
• Financial and accounting records necessary to provide our services — bank statements, invoices, payroll information, tax records, and similar
• Details of any directors, shareholders, beneficial owners, and authorised contacts within your business
• Any other information necessary for us to act for you

Website visitor information

When you visit luvero.uk, our hosting provider records limited technical information about your visit — pages requested, time of request, referrer URL, and broad geographic region. During our closed-intake period from May to November 2026 we do not use analytics cookies, marketing pixels, or third-party tracking on this website. See our Cookies Notice for full detail.

Information from third parties

We may receive information about you from referrers, your previous accountant (where you have authorised the handover), Companies House, HMRC, and credit reference agencies where required for anti-money laundering checks.

04How we collect it

We collect personal information when:

• You submit our waiting list form
• You contact us by email, telephone, or social media
• You become a client and complete our onboarding process
• We provide services to you and your business under an engagement
• A third party refers you to us with your knowledge

We do not collect information about you covertly or without your awareness.

05Why we collect it and the lawful basis

We collect and use personal information for specific purposes, and each use has a lawful basis under UK GDPR. The table below summarises the main purposes.

Purpose	Lawful basis
Responding to enquiries and managing the waiting list	Legitimate interest (responding to your request) plus consent given on the waiting list form
Assessing whether we can take on your business as a client	Legitimate interest (running our practice)
Providing accountancy services under an engagement letter	Performance of a contract
Anti-money laundering checks and record-keeping	Legal obligation (Money Laundering Regulations 2017)
Filing returns and correspondence with HMRC and Companies House	Legal obligation
Sending occasional practice updates to existing clients	Legitimate interest (keeping you informed)
Defending or pursuing legal claims	Legitimate interest

06Who we share it with

We share personal information only where necessary, with the following categories of recipient:

• Tax and regulatory authorities — HMRC, Companies House, and other UK authorities where we have a legal obligation to file or respond on your behalf
• Software providers that host or process information on our behalf, including our practice management software, our cloud bookkeeping software (Intuit QuickBooks), email and document storage providers, payroll software, and similar. All such providers are bound by data processing agreements and process information only on our instructions
• Professional advisers including our solicitors, insurers, and the Association of Accounting Technicians (AAT, our regulatory body), where necessary
• Law enforcement and regulators where required by law, court order, or where we have a statutory duty to report

We do not sell your personal information to anyone. We do not share it with marketing companies or data brokers.

07How long we keep it

We keep personal information only for as long as necessary for the purposes set out above, and in line with our professional and legal obligations:

• Waiting list enquiries that do not result in onboarding: up to 12 months from the date of your enquiry, after which we delete the record unless you have asked us to keep it longer
• Client records (active engagements): for the duration of our engagement with you
• Client records (after engagement ends): 7 years from the end of the engagement, in line with HMRC requirements and our AAT professional obligations
• Anti-money laundering identity verification records: 5 years from the end of the client relationship, in line with the Money Laundering Regulations 2017
• Marketing or update communications: until you unsubscribe or ask us to stop

After these periods we securely delete or anonymise records.

08Where we store it and how we protect it

We store personal information on systems hosted in the United Kingdom and the European Economic Area. Some of our software providers (including Intuit QuickBooks) are based in the United States; transfers to the US are protected by appropriate safeguards including the UK Extension to the EU-US Data Privacy Framework and standard contractual clauses where applicable.

We apply industry-standard security measures including encryption in transit and at rest, role-based access controls, multi-factor authentication on systems holding personal information, and regular review of the security of the software we use.

09Your rights

Under UK GDPR you have the following rights in relation to personal information we hold about you:

• Right of access — to request a copy of the information we hold about you
• Right to rectification — to ask us to correct information that is inaccurate or incomplete
• Right to erasure — to ask us to delete information we no longer need to hold (subject to legal retention obligations described above)
• Right to restrict processing — to ask us to limit how we use your information
• Right to data portability — to ask us to provide your information in a portable format
• Right to object — to object to our use of your information where we rely on legitimate interest
• Right to withdraw consent — where our use of your information is based on consent, to withdraw it at any time
• Right to complain — to lodge a complaint with the Information Commissioner's Office (see section 11)

Exercising these rights is free and we will respond within one month of receiving a valid request.

10How to exercise your rights

To exercise any of these rights, please email us at [email protected] with the subject line "Data Protection — [your name]". We may need to verify your identity before we can respond, particularly for access and erasure requests. Where we are unable to act on a request — for example, where we have a legal obligation to retain the information for AML or HMRC purposes — we will explain why and what other options are available to you.

11How to complain

If you are unhappy with how we have handled your personal information, please tell us first — email [email protected] and we will do our best to put things right.

You can also complain to the Information Commissioner's Office (ICO), the UK regulator for data protection:

• Website: ico.org.uk
• Telephone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

12Changes to this notice

We may update this notice from time to time to reflect changes in how we operate or in the law. Where changes are significant, we will tell existing clients and active waiting list contacts directly. The "Last updated" date at the top of this page shows when the most recent revision was made.