Privacy Policy
Last updated: August 2026
FleX Bookkeeping & Analytics ('we', 'us', 'our') is committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.
Who we are
FleX Bookkeeping & Analytics is a family-run bookkeeping and financial analytics business operating in the United Kingdom. We are the data controller for the personal information we hold about you. If you have any questions about this policy or how we handle your data, please contact us at [email protected].
What data we collect
We may collect and process the following personal data: your name and contact details (email address, phone number); information you provide when completing our contact or enquiry form; business information you share with us in the course of providing bookkeeping services; financial records and documents necessary to carry out our services; and technical data such as your IP address and browser type when you visit our website.
How we use your data
We use your personal data to respond to enquiries and provide our bookkeeping and analytics services; to fulfil our contractual obligations to you; to comply with our legal and regulatory obligations (including HMRC requirements); to send you service-related communications; and to improve our website and services. We will never sell your personal data to third parties.
Legal basis for processing
We process your personal data on the following legal bases: performance of a contract (where we are providing services to you); compliance with a legal obligation (such as tax and accounting regulations); your consent (where you have provided it, for example by submitting our contact form); and our legitimate interests in running and improving our business, where these are not overridden by your rights.
Data sharing
We may share your data with trusted third-party service providers who assist us in delivering our services, such as Xero (accounting software), Syft Analytics, and our cloud storage providers. All third parties are required to handle your data securely and in accordance with UK GDPR. We may also disclose your data where required by law, such as to HMRC or other regulatory bodies.
Data retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Financial records are typically retained for a minimum of six years in line with HMRC requirements. Contact enquiry data is retained for up to two years.
Your rights
Under UK GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data (where applicable); object to or restrict our processing of your data; request portability of your data; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, please contact us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
Our website may use essential cookies to ensure it functions correctly. We do not use tracking or advertising cookies without your consent. You can control cookie settings through your browser at any time.
Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.
Contact us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: [email protected]