Privacy Policy
Last updated: 17 June 2026
1. Who we are
Annual-accounts.co.uk is operated by Drummond Advisory Ltd, a company registered in England and Wales (company number 15208903). Our registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
Andy Drummond ACA (ICAEW member 1882910) is the data controller responsible for this service. You can contact us at any time at andy@annual-accounts.co.uk.
We are committed to handling your personal data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What data we collect
We collect the following categories of information when you use our service:
Information you provide directly:
• Your name and email address
• Your company name and company number
• Financial information about your company (income, expenses, assets, and liabilities) as entered via our onboarding form
• Your Companies House authentication code (used solely to submit filings on your behalf)
• Prior year filing details where relevant
Information collected automatically:
• Basic website analytics (pages visited, time on site) via our analytics provider
• Payment transaction data processed by Stripe (we do not store card details ourselves)
3. Why we collect your data and our legal basis
We process your data for the following purposes:
• To prepare and file your statutory accounts and CT600 corporation tax return — lawful basis: performance of a contract
• To communicate with you about your filing, including requesting missing information and confirming submission — lawful basis: performance of a contract
• To act as your agent with HMRC and Companies House — lawful basis: performance of a contract
• To process payment via Stripe — lawful basis: performance of a contract
• To use AI-assisted tools to prepare draft accounts and tax returns as part of delivering the service — lawful basis: performance of a contract
• To improve our service and understand how the website is used — lawful basis: legitimate interests
• To send you important service updates (e.g. changes to pricing or terms) — lawful basis: legitimate interests
4. Who we share your data with
We share your data only where necessary to deliver the service:
• HMRC and Companies House — to submit your statutory filings on your behalf
• Tally — our onboarding form, through which you provide your financial and company information. Tally is hosted in Europe. Tally's privacy policy is available at tally.so/help/privacy-policy
• Airtable — we use Airtable to manage client records and track the progress of filings. Airtable's privacy policy is available at airtable.com/privacy
• Apple iCloud Drive — we store client working files and draft accounts using Apple iCloud Drive. Apple is based in the United States; data stored in iCloud is protected by Standard Contractual Clauses approved under UK data protection law. Apple's privacy policy is available at apple.com/legal/privacy
• Anthropic, Inc. — we use Anthropic's AI tools to assist with preparing draft accounts and tax returns. Financial and company information you provide is processed by Anthropic as part of this workflow. Anthropic is based in the United States; data transferred to Anthropic is protected by Standard Contractual Clauses approved under UK data protection law. Anthropic's privacy policy is available at anthropic.com/legal/privacy
• Stripe — to process your payment securely. Stripe's privacy policy is available at stripe.com/gb/privacy
• Our email provider — used to communicate with you about your filing
• Instantly — we use Instantly to manage email outreach to prospective customers. If you received an email from us before becoming a customer, your email address and name were processed by Instantly for that purpose. Instantly's privacy policy is available at instantly.ai/privacy
We do not sell your data to third parties. We do not share your data with advertisers or marketing platforms.
5. How long we keep your data
We retain your data for as long as necessary to fulfil the purposes for which it was collected, and to comply with our legal obligations. In practice:
• Financial and filing records are retained for a minimum of six years in line with standard UK accounting and tax requirements
• Email communications are retained for up to three years
• If you request deletion and there is no overriding legal obligation to retain the data, we will delete it within 30 days
6. Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
• Right of access — you can request a copy of the data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can ask us to delete your data where there is no overriding legal reason to retain it
• Right to restriction — you can ask us to restrict processing of your data in certain circumstances
• Right to portability — you can ask us to provide your data in a portable format
• Right to object — you can object to processing based on legitimate interests
To exercise any of these rights, please contact us at andy@annual-accounts.co.uk. We will respond within one month.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
7. Cookies and analytics
Our website uses cookies to help it function and to understand how visitors use it. We use a third-party analytics service to collect anonymised data about page visits and user behaviour. This data is not used to identify individuals.
You can control cookie preferences through your browser settings. Blocking certain cookies may affect how the website functions.
8. Security
We take appropriate technical and organisational measures to protect your data from unauthorised access, disclosure, or loss. Your financial information is transmitted over encrypted connections (HTTPS). Payment processing is handled entirely by Stripe and card details are never transmitted to or stored by us.
As a small service operated by a qualified chartered accountant, your data is accessed only by us and the third-party processors listed in section 4. It is not shared with anyone else.
9. Changes to this policy
We may update this privacy policy from time to time. If we make material changes, we will notify existing customers by email. The date at the top of this page indicates when it was last updated.
10. Contact us
For any questions about this privacy policy or how we handle your data, please contact:
Andy Drummond ACA
Drummond Advisory Ltd
andy@annual-accounts.co.uk
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
11. Previous versions
Previous versions of this Privacy Policy are available here: