Privacy Notice

This notice explains how Baghlali Consulting Limited (“we”, “us”) handles personal data as a data controller under the UK GDPR and the Data Protection Act 2018.

Who we are

Baghlali Consulting Limited is a company registered in England and Wales under company number 11340335. Registered office: 5 Halsbrook Road, SE3 8QU.

For any privacy question, contact us at contact@bcladvisory.co.uk.

The information we collect

• Contact details such as your name, email address and telephone number.
• Details of your business and the services you are enquiring about.
• Information required for client acceptance and identity verification, where you go on to become a client.
• Accounting, payroll and tax records that you provide to us so we can carry out the agreed work.
• Technical information such as essential cookie data needed for this site to work.

How we use it

• To respond to your enquiry and discuss how we might help.
• To carry out our engagement and deliver professional services.
• To meet legal and regulatory obligations, including anti-money laundering requirements and record-keeping duties.
• To manage our own accounts, billing and internal administration.

Our lawful bases

We rely on your consent or on steps taken at your request before entering a contract when handling enquiries; on performance of a contract when delivering services; on legal obligation for anti-money laundering, tax and company filing duties; and on our legitimate interests in running and protecting the practice.

Sharing your information

We do not sell personal data. We share it only where necessary: with HM Revenue & Customs, Companies House and other authorities where we are required or authorised to do so; with carefully selected software and hosting providers that support our work; and with professional advisers or insurers where relevant. Where a provider processes data outside the UK, we take steps to ensure an appropriate level of protection.

How long we keep it

Enquiries that do not lead to an engagement are normally deleted within twelve months. Client records, including identity verification records, are generally retained for at least six years after the end of our engagement, in line with legal and regulatory requirements.

Security

We apply appropriate technical and organisational measures to protect personal data. Please do not send identity documents or other sensitive material through the contact form on this website — we will provide a secure method once we begin our client acceptance process.

Your rights

You may ask for access to your personal data, correction of inaccurate data, erasure where applicable, restriction of or objection to processing, and portability. You may also withdraw consent where we rely on it. To exercise any right, email contact@bcladvisory.co.uk.

If you are not satisfied with our response, you may complain to the Information Commissioner’s Office at ico.org.uk.

Changes

We may update this notice from time to time. The version published on this page is the one that applies.