This Privacy Notice explains how Luvero Accounting Ltd collects, uses, stores, and protects personal information. It covers people who contact us, prospects on our waiting list, website visitors, and clients who engage us to provide accountancy services.
This Privacy Notice explains how Luvero Accounting Ltd ("Luvero", "we", "us", "our") collects, uses, stores, and protects personal information about the people we interact with — clients, prospective clients on our waiting list, website visitors, and members of the public who contact us. It applies to information collected through our website at luvero.uk, through email and telephone, through our waiting list and client onboarding processes, and through the course of providing accountancy and advisory services.
We are committed to processing personal information lawfully, fairly, and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Luvero Accounting Ltd is the data controller for the personal information described in this notice.
If you have any questions about this notice or about how we handle your information, please contact us at the email address above.
Depending on how you interact with us, we collect and process the following categories of personal information.
When you contact us or complete our waiting list form, we collect:
Once you become a client and engage us under an engagement letter, we additionally collect:
When you visit luvero.uk, our hosting provider records limited technical information about your visit — pages requested, time of request, referrer URL, and broad geographic region. During our closed-intake period from May to November 2026 we do not use analytics cookies, marketing pixels, or third-party tracking on this website. See our Cookies Notice for full detail.
We may receive information about you from referrers, your previous accountant (where you have authorised the handover), Companies House, HMRC, and credit reference agencies where required for anti-money laundering checks.
We collect personal information when:
We do not collect information about you covertly or without your awareness.
We collect and use personal information for specific purposes, and each use has a lawful basis under UK GDPR. The table below summarises the main purposes.
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and managing the waiting list | Legitimate interest (responding to your request) plus consent given on the waiting list form |
| Assessing whether we can take on your business as a client | Legitimate interest (running our practice) |
| Providing accountancy services under an engagement letter | Performance of a contract |
| Anti-money laundering checks and record-keeping | Legal obligation (Money Laundering Regulations 2017) |
| Filing returns and correspondence with HMRC and Companies House | Legal obligation |
| Sending occasional practice updates to existing clients | Legitimate interest (keeping you informed) |
| Defending or pursuing legal claims | Legitimate interest |
We share personal information only where necessary, with the following categories of recipient:
We do not sell your personal information to anyone. We do not share it with marketing companies or data brokers.
We keep personal information only for as long as necessary for the purposes set out above, and in line with our professional and legal obligations:
After these periods we securely delete or anonymise records.
We store personal information on systems hosted in the United Kingdom and the European Economic Area. Some of our software providers (including Intuit QuickBooks) are based in the United States; transfers to the US are protected by appropriate safeguards including the UK Extension to the EU-US Data Privacy Framework and standard contractual clauses where applicable.
We apply industry-standard security measures including encryption in transit and at rest, role-based access controls, multi-factor authentication on systems holding personal information, and regular review of the security of the software we use.
Under UK GDPR you have the following rights in relation to personal information we hold about you:
Exercising these rights is free and we will respond within one month of receiving a valid request.
To exercise any of these rights, please email us at [email protected] with the subject line "Data Protection — [your name]". We may need to verify your identity before we can respond, particularly for access and erasure requests. Where we are unable to act on a request — for example, where we have a legal obligation to retain the information for AML or HMRC purposes — we will explain why and what other options are available to you.
If you are unhappy with how we have handled your personal information, please tell us first — email [email protected] and we will do our best to put things right.
You can also complain to the Information Commissioner's Office (ICO), the UK regulator for data protection:
We may update this notice from time to time to reflect changes in how we operate or in the law. Where changes are significant, we will tell existing clients and active waiting list contacts directly. The "Last updated" date at the top of this page shows when the most recent revision was made.