Privacy Policy
Thank you for visiting our site, and supporting our AI-driven R&D tax relief service. This Privacy Policy has been written to reassure you that the personal information you provide to us is dealt with safely and securely. Further information is given below.
If you have any questions please contact us at policies@nhal.uk
Who We Are:
We are Nelson Handley Associates Ltd, a company incorporated in England and Wales under company 10636419. Our ICO registration number is ZB071279 .
We comply with the following regulations:
• Privacy and Electronic Communications (EC Directive) Regulations 2003
• Electronic EU Regulations 2011
• Current Data Protection Laws
• EU General Data Protection Regulations (GDPR).
What Does This Policy Cover?
This Privacy Policy applies only to your use of our service (the "Service") and our websites: claridian.co.uk and chat.aiaccountant.uk. Our sites may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.
What Are My Rights?
Under the GDPR, you have the following rights, which we will always work to uphold:
• The right to be informed about our collection and use of your personal data.
• The right to access the personal data we hold about you
• The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete.
• The right to be forgotten, i.e. the right to ask us to delete or otherwise dispose of any of your personal data.
• The right to restrict (i.e. prevent) the processing of your personal data.
• The right to object to us using your personal data for a particular purpose or purposes.
• The right to data portability. This means that, if you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to re-use with another service or business in many cases.
• Rights relating to automated decision-making and profiling.
It is important that your personal data is kept accurate and up-to-date. If any of the personal data we hold about you changes, please keep us informed as long as we have that data.
If you need any assistance with any of the above topics please contact the Data Protection Officer at policies@nhal.uk
Further information about your rights can also be obtained from the Information Commissioner’s Office or your local Citizens Advice Bureau.
If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office.
What Data Do You Collect and How is it Shared?
We collect data in the following manner:
If you register with the Service, we will ask for the following information:
​
• Email Address
• Your qualifications and experience relevant to your R&D tax relief claim
• The names, salaries, and R&D activities of staff and agency staff who form part of your R&D claim
If we sell our business then the personal information that we hold will be part of the transferred assets. If we are required to do so by law, or in order to enforce or apply our terms of use. This includes exchanging information with other organisations for the purposes of fraud protection and credit risk reduction and also law enforcement agencies.
How We Use Your Information:
We will use the information that you have given to us purely for the means that you have requested and in this case either to complete your R&D tax relief claim, confirm your identity, inform you of the status of your application, or provide you with electronic copies of relevant documents.
We will not pass your details onto any third parties for other means. In our marketing, if we discuss your application as part of a case study, we will not include personally identifiable information, the name of your company, or precise details of your innovation.
Data Retention:
If you register for the service, we will store your personal information for 1 month after your last contact. If you order the service, we will store your personal information for 1 year after your last contact, unless you request we retain your personal information for longer.
Our Legal Process for Processing:
We process data under the following lawful basis as defined by the ICO.
Consent: If we have received unambiguous permission to process your data to contact you via various forms of medium, in this case via email or phone, to alert you or discuss with you the status of your R&D tax relief claim, we process your data with your consent.
Contract: we may need to process personal data to fulfil a contractual obligation.
Legal Obligation: we may need to process data to fulfil legal requirements.
Our Marketing:
We may provide you with information about various products and services where we feel may be of interest to you based on the information that you have provided. We will not share your details with any third parties for marketing purposes.
Third Party Privacy Policy:
Our Site may, from time to time, contain links to third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
​
Our Service is hosted on the Internet and your information may pass through technical platform providers. Please note that these platform providers have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these technical platforms.
Third Parties:
To provide our Service to you in the form of storing data, communicating with you, and for other reasons we will use third-party contractors to perform certain functions, these companies are:
• Open AI
• Amazon Web Services
• Wix
These companies are GDPR compliant and they will ensure that your data is secure.
Where We Store Your Personal Data:
We will store or transfer your personal data within the United Kingdom or within the European Economic Area (the “EEA”). The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein. This means that your personal data will be fully protected under the Data Protection Legislation, GDPR, and/or to equivalent standards by law.
Data Security:
We are committed to ensure that your personal data is protected at all times. The data we hold is held on securely encrypted servers and is protected against loss or misuse. We use the advice of the ICO and work within their regulations as well as that of the EU GDPR regulations which came into effect on 25th May 2018.
If you chose to send us information via email, we cannot guarantee the security of this information. Once we have received your information, we will use strict procedures and security features to ensure it is dealt with in accordance with this Privacy Notice.
How Can I Access My Personal Data?
If you want to know what personal data we have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a “subject access request”.
All subject access requests should be made in writing and sent to policies@nhal.uk
There is not normally any charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.
We will respond to your subject access request within one month of receiving it. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.
​
Please note that our primary route of contact and the principle way we confirm the identity of users is their email address. Therefore, subject access requests should be made by email.
Changes to Our Privacy Policy
We review our Privacy Notice on a frequent basis to check that it accurately reflects how we deal with your information. You should check this page regularly to see the most up to date information.
This Privacy Notice was last updated 6th June 2024.
How to Contact Us:
If you have any questions, comments and requests regarding this privacy policy, you are welcome to contact us via email addressed to our Data Protection Officer / Compliance Department at policies@nhal.uk