Privacy policy

Who We Are

Xeinadin Limited

8th Floor Becket House, 36 Old Jewry, London, United Kingdom, EC2R 8DD

Registered No. 11354408. Registered in England and Wales.

Email: [email protected]

Xeinadin Limited acts as a data controller and, in certain circumstances, as a data processor, as explained below.

Xeinadin Limited processes personal data in accordance with the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

 

Our Role

Depending on the service provided, we may act as:

  • Data Controller: where we decide how and why personal data is processed (for example, when providing accountancy, tax or advisory services directly to clients).
  • Data Processor: where we process personal data on behalf of a client, such as when providing payroll services. In these cases, the client (e.g. the employer) remains the data controller.


When we act as a processor, individuals should refer to their employer’s privacy notice.

 

What Information We Collect

We may collect:

  • Contact details (name, address, email, phone number)
  • National Insurance number or government-issued identification (where legally required)
  • Financial and tax information
  • Payroll and employment information
  • AML/KYC documentation
  • Website usage data (cookies, device information)


We only collect information necessary to provide services or meet legal obligations.

 

Why We Use Your Information

We process personal data to:

  • Provide accountancy and advisory services
  • Prepare and submit tax returns
  • Process payroll
  • Comply with HMRC and anti-money laundering laws
  • Manage payments and client relationships
  • Improve our website and marketing


Our lawful bases for processing personal data are:

  • To fulfil our contractual obligations with our clients
  • To comply with our legal obligations (including HMRC and anti-money laundering requirements)
  • Legitimate interests (including business administration, IT security, fraud prevention and service improvement)
  • Consent (for marketing and certain cookies)

 

Who We Share Data With

We may share information with:

  • HMRC
  • Banks and financial institutions
  • Accounting and payroll software providers
  • Professional advisers and insurers
  • Regulators or law enforcement where required
  • We may contact you by email, telephone or SMS to remind you of outstanding balances and may use third-party communication providers to do so
  • Where necessary, we may also share relevant personal data with regulated solicitors to recover unpaid fees or enforce contractual rights. This processing is based on our legitimate interests and, where applicable, for legal claims.


All third-party service providers are required to process personal data only in accordance with our instructions and are subject to contractual obligations to implement appropriate technical and organisational security measures.

 

International Transfers

Where personal data is transferred outside the UK, we rely on approved safeguards such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or UK adequacy regulations, and assess transfer risks where required.

 

How Long We Keep Data

Client records are generally retained for six years from the end of the relevant accounting period in line with HMRC record-keeping requirements. Longer retention may apply where required under the Money Laundering Regulations 2017, other statutory obligations, or for the establishment, exercise or defence of legal claims.

Where we act as a data processor (e.g. payroll), retention is determined by our client and legal requirements.

 

Your Rights

You have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion (where legally permitted)
  • Object to certain processing
  • Restrict processing
  • Data portability
  • Withdraw consent (where applicable)
  • Complain to the Information Commissioner’s Office (ICO)


To exercise any of your rights contact [email protected]

You can lodge a complaint with the Information Commissioner’s Office (ICO) at http://www.ico.org.uk

 

Cookies & Website Analytics

We use cookies and Google Analytics to analyse website usage and improve performance. Analytics may collect device and usage data, including IP address information.

 

Advertising & Google Ads

We use Google Ads to promote our services. This may involve limited use of hashed contact data for audience matching, based on our legitimate interests. You can object at any time.

Advertising cookies are only used where you provide consent.

If you have any queries, contact the DPO at [email protected]


Read our full Privacy Notice here: Xeinadin Limited Privacy Statement