Last updated: September 2026

Lava Sky Accounting Limited (“Lava Sky Accounting”, “we”, “us” or “our”) is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains what personal information we collect, how and why we use it, who we may share it with, how long we keep it and the rights you have in relation to your personal information.

​

1. Who we are

Lava Sky Accounting Limited provides bookkeeping and accounting services to individuals, sole traders and businesses.

For the purposes of UK data protection law, Lava Sky Accounting Limited is the data controller for the personal information described in this Privacy Policy, except where we process personal information solely on behalf of a client.

You can contact us about this Privacy Policy or your personal information at:

Lava Sky Accounting Limited
Email: contact@lava-sky.co.uk
Website: www.lava-sky.co.uk
Company number: 15539173
Registered in England and Wales
Registered office: Suite A, 82 James Carter Road, Mildenhall, IP28 7DE

​

2. What personal information we collect

The information we collect will depend on your relationship with us and the services you use. It may include:

• your name, address, telephone number and email address;

• information you provide when making an enquiry or contacting us;

• information you provide when becoming or being a client;

• financial, accounting, tax and business information required to provide our services;

• payment and transaction information;

• records of our communications with you;

• information you provide if you choose to receive marketing communications;

• information you provide when leaving a review or testimonial;

• identity and verification information used for anti-money laundering and other regulatory checks, which may include copies of identity documents, proof of address and information about source of funds or source of wealth where required; and

• technical information about how you use our website, such as your IP address, device and browser information, pages visited and how you arrived at our website.

Where necessary to provide accounting, bookkeeping, payroll or tax services, we may also process personal information about your employees, customers, suppliers or other individuals that you provide to us.

Payroll information may include details such as pay, tax, National Insurance, pension contributions, deductions and absence or sickness information. Where necessary, this may include special category personal information, such as health information or trade union information. We only process this type of information where it is relevant to the services we provide and where permitted by law.

​

3. How we collect your information

We may collect personal information:

• directly from you when you contact us, complete a form, become a client or use our services;

• when you use our website;

• through email, telephone, online meetings or other communications;

• through accounting, bookkeeping, payroll, client-management and document-management systems;

• from third parties where necessary to provide our services;

• from identity verification and anti-money laundering service providers; and

• from publicly available sources where appropriate, such as Companies House.

If we obtain personal information about you from another source, we will handle it in accordance with applicable data protection law.

​

4. How and why we use your information

We only use personal information where we have a lawful reason for doing so.

​

Respond to enquiries and discuss our services with you

Our lawful basis is our legitimate interests and/or taking steps at your request before entering into a contract.

​

Set up and manage your relationship with us

Our lawful basis is the performance of our contract with you.

​

Provide bookkeeping, accounting, payroll and tax services

Our lawful basis is the performance of our contract with you and/or compliance with our legal obligations.

​

Carry out identity verification, anti-money laundering and other regulatory checks

Our lawful basis is compliance with our legal and regulatory obligations.

​

Maintain accounting, tax and business records

Our lawful basis is compliance with our legal obligations and/or our legitimate interests.

​

Process payments, invoices and payment reminders

Our lawful basis is the performance of our contract and our legitimate interests in managing our business.

​

Communicate with clients about the services we provide

Our lawful basis is the performance of our contract and/or our legitimate interests.

​

Prevent fraud and protect our business, website and systems

Our lawful basis is our legitimate interests and/or compliance with our legal obligations.

​

Meet legal, tax, regulatory and professional requirements

Our lawful basis is compliance with our legal obligations.

​

Operate, analyse and improve our website and services

Our lawful basis is our legitimate interests and, where consent is required for cookies or similar technologies, your consent.

​

Send marketing communications

Our lawful basis is consent or our legitimate interests, where permitted by law.

​

Where we rely on legitimate interests, we consider whether our interests are balanced against your rights and interests.

​

Where we rely on consent, you can withdraw your consent at any time.

​

5. Who we share your information with

We do not sell your personal information.

Access to personal information within Lava Sky Accounting is limited to people who need it for their role. This may include employees and authorised subcontractors, who are expected to handle personal information securely and confidentially.

Where necessary, we may also share personal information with trusted organisations that help us operate our business or provide services to our clients. These may include:

• accounting and bookkeeping software providers, which may include Xero and QuickBooks;

• client-management, workflow and document-management providers, which may include Engager and Hubdoc;

• identity verification and anti-money laundering providers, which may include Xama;

• cloud storage, email and IT providers, which may include Google Workspace;

• website and booking providers, which may include Wix and TidyCal;

• website analytics providers, including Google Analytics;

• payment and payment-management providers, which may include Adfin;

• payroll software providers;

• subcontractors or other professional service providers where appropriate;

• HM Revenue & Customs (HMRC), Companies House and other regulatory or public authorities where required;

• insurers, legal advisers and other professional advisers; and

• other organisations where we are legally required to disclose information.

Where another organisation processes personal information on our behalf, we take appropriate steps to ensure that information is handled securely and in accordance with applicable data protection requirements.

​

6. International transfers

Some of the service providers and technology platforms we use may process or store personal information outside the UK.

Where personal information is transferred internationally, we take appropriate steps to ensure that it is protected in accordance with UK data protection law. This may include relying on applicable adequacy regulations or using approved contractual safeguards where required.

You can contact us if you would like further information about the safeguards used for international transfers of your personal information.

​

7. How long we keep your information

We keep personal information only for as long as is reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, tax, regulatory and professional requirements.

Different types of information may therefore be kept for different periods.

When deciding how long to retain information, we consider:

• why we collected and use the information;

• our legal, tax and regulatory obligations;

• professional requirements applicable to our services;

• whether the information may be required to establish, exercise or defend legal claims; and

• whether there is an ongoing client or contractual relationship.

When personal information is no longer required, we will securely delete or anonymise it where appropriate.

​

8. Keeping your information secure

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, disclosure or alteration.

We also expect employees, subcontractors and service providers who have access to personal information to use appropriate security measures and to keep that information confidential.

Although we take reasonable steps to protect personal information, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

​

9. Cookies and website analytics

Our website uses cookies and similar technologies to help the website operate correctly and to understand how visitors use it.

Some cookies are essential for the website to function. Other cookies may be used for purposes such as analytics and improving the performance of the website.

We use Google Analytics 4 (GA4) to help us understand how visitors find and use our website. Google Analytics may collect information such as pages visited, interactions with the website, approximate location, device and browser information and how visitors arrived at the website.

We use this information to understand website performance and help us improve our website and services.

Where consent is required, non-essential cookies and similar technologies will only be used after you have provided your consent. Where cookie preference controls are available on our website, you can use these to manage or withdraw your consent.

You can also control cookies through your browser settings.

The cookies and technologies used on our website may change from time to time as we update our website and the services we use.

​

10. Marketing communications

We do not currently operate a regular marketing mailing list. However, where permitted by law, we may contact you from time to time with information about our services that we think may be relevant to you.

Where consent is required, we will obtain it before sending marketing communications. Where we rely on legitimate interests, we will only do so where permitted by law and where our interests are not overridden by your rights and interests.

You can ask us to stop sending marketing communications at any time by using any unsubscribe option included in the communication or by contacting us at contact@lava-sky.co.uk.

Stopping marketing communications will not prevent us from contacting you where necessary to provide services to you or meet our legal or contractual obligations.

​

11. Your data protection rights

Depending on the circumstances, you may have rights in relation to your personal information, including the right to:

• ask for access to the personal information we hold about you;

• ask us to correct inaccurate or incomplete information;

• ask us to delete your personal information in certain circumstances;

• ask us to restrict how your information is used in certain circumstances;

• object to certain uses of your personal information;

• receive certain personal information in a portable format where applicable; and

• withdraw your consent at any time where we rely on consent.

These rights do not apply in every circumstance, and there may be situations where we are legally permitted or required to continue processing or retaining your information.

To exercise any of these rights, please contact us at contact@lava-sky.co.uk.

Your right to object

Where we process your personal information on the basis of our legitimate interests, you may have the right to object to that processing.

You also have the right to object at any time to the use of your personal information for direct marketing purposes.

​

12. Complaints

If you have concerns about how we use your personal information, please contact us in the first instance at contact@lava-sky.co.uk.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

You can find further information about the ICO and your data protection rights on the ICO website.

​

13. Third-party websites

Our website may contain links to websites operated by other organisations.

We are not responsible for the privacy practices of third-party websites. We recommend reviewing their privacy information before providing them with personal information.

​

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, the way we use personal information or applicable legal requirements.

The latest version will always be published on this website. The date at the top of this policy shows when it was last updated.

​