Privacy Policy

Littlefoot Bookkeeping Services. Last updated: 13th July 2026

1. Who we are

Littlefoot Bookkeeping Services is run by Angela Boxwell, AAT Licensed Bookkeeper (AAT licence number 1001319), based at 39 Salisbury Avenue, Coventry, CV3 5DA.

For the purposes of data protection law, Angela Boxwell trading as Littlefoot Bookkeeping Services is the data controller responsible for your personal data. We are registered with the Information Commissioner’s Office (ICO), registration number ZA155774.

If you have any questions about this policy or how your data is handled, you can contact us at angela@littlefootbookkeeping.co.uk or by post at the address above.

2. What data we collect

Depending on how you interact with us, we may collect:

If you contact us through the website or by email or phone: Your name, email address, phone number, and the content of any message you send us.

If you become a client:

  • Identity documents used for client due diligence (for example, passport or driving licence, and proof of address), which we are required to collect under the Money Laundering Regulations 2017
  • Financial and accounting records needed to provide bookkeeping, VAT, self-assessment, or year-end accounts services
  • Correspondence with HMRC or other bodies made on your behalf
  • Details entered into accounting software (such as Xero or QuickBooks) that you give us access to

If you visit the website: We may collect certain technical information through website analytics, such as your IP address, browser type, device information and pages visited through cookies and similar technologies. See our Cookie Policy for details.

3. How we use your data and our legal basis

PurposeLegal basis
Responding to an enquiryLegitimate interest, in dealing with your enquiry
Providing bookkeeping, VAT, or accounts services under a client agreementPerformance of a contract
Carrying out client due diligence and identity verificationLegal obligation, under the Money Laundering Regulations 2017
Reporting to HMRC or other authorities where requiredLegal obligation
Keeping records for AAT practice assurance or regulatory reviewLegal obligation and legitimate interest, in maintaining our licence
Sending you service updates relevant to work in progressPerformance of a contract

We do not use your data for marketing without your separate consent, and we do not sell your data to any third party.

4. International transfers

Some of our service providers may store or process personal data outside the UK. Where this happens, we ensure appropriate safeguards are in place in accordance with UK data protection law.

5. Client due diligence and anti-money laundering

As an AAT licensed bookkeeper, Littlefoot Bookkeeping Services is supervised by AAT for anti-money laundering compliance. Before taking on a new client, we are legally required to verify your identity and, where relevant, the identity of anyone connected with your business. We use Veriphy to carry out this verification.

Records collected for this purpose are kept for as long as the client relationship continues, and for five years afterwards, in line with the Money Laundering Regulations 2017.

6. Who we share your data with

We may share your data with:

  • HMRC and other government bodies, where required to carry out your instructions or comply with the law
  • Veriphy, for identity verification purposes
  • AAT, if requested as part of a practice assurance review or regulatory investigation
  • Our accounting software providers (Xero or QuickBooks), where you have asked us to work within your account
  • Our professional indemnity insurer, if a claim or circumstance needs to be reported
  • Krystal, our website hosting provider, which stores any details submitted through the contact form on this site
  • Google, whose Gmail service we use for email correspondence, including with clients

We do not share your data with any third party for their own marketing purposes.

Krystal is a UK-based hosting provider, so data stored with them stays within the UK. Google’s Gmail service may store or process data outside the UK, including in the United States. Where this happens, Google applies its own safeguards, including Standard Contractual Clauses approved for use under UK GDPR, to protect your data. You can find more detail in Google’s own privacy policy.

7. How long we keep your data

  • We retain client records for as long as required by law, professional obligations and our legitimate business interests. In most cases this will be seven years after the end of the accounting period or tax year to which the records relate.
  • Client due diligence records: five years after the end of the client relationship, in line with the Money Laundering Regulations 2017
  • Enquiry details from people who do not become clients: no longer than twelve months

8. Your rights

Under UK GDPR, you have the right to:

  • Ask for a copy of the personal data we hold about you
  • Ask us to correct inaccurate data
  • Ask us to delete your data, where we are not required to keep it for legal reasons
  • Ask us to restrict how we use your data
  • Object to certain uses of your data
  • Ask for your data to be provided in a portable format

To exercise any of these rights, contact us at angela@littlefootbookkeeping.co.uk. If you are unhappy with how we have handled your data, you also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

9. How we protect your data

We take reasonable technical and organisational steps to keep your data secure, including restricting access to client files and using reputable, secure software providers for accounting and communication.

10. Cookies

Our website may use cookies to help it run and to understand how it is used. Full details are in our separate Cookie Policy.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.