GDPR Compliance

Last Updated: May 15, 2026

Our Commitment to Data Protection

brisk-tax Limited is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our data protection responsibilities seriously and have implemented appropriate measures to ensure your personal data is processed lawfully, fairly, and transparently.

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for the performance of a contract with you
• Legal Obligation: Processing is necessary to comply with legal obligations
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests

Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data under certain conditions, particularly where processing is based on legitimate interests.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

Rights Related to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not currently use automated decision-making processes.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us at:

Email: [email protected]

We will respond to your request within one month of receipt. If your request is complex or we receive multiple requests from you, we may extend this period by a further two months, in which case we will inform you and explain the reason for the delay.

Data Subject Access Requests

To submit a data subject access request, please provide the following information:

• Your full name and contact details
• A description of the information you are requesting
• Proof of identity (we may require this to verify your identity)

Data Protection Officer

For questions specifically related to data protection and GDPR compliance, you may contact our Data Protection Officer at:

Email: [email protected]

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay, and no later than 72 hours after becoming aware of the breach. The notification will include:

• The nature of the personal data breach
• The likely consequences of the breach
• The measures taken or proposed to address the breach

International Data Transfers

We do not routinely transfer personal data outside the United Kingdom. If circumstances require an international transfer, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Our standard retention periods are:

• Client service records: 7 years after service completion
• Financial records: 7 years as required by HMRC
• Marketing communications: Until you withdraw consent or unsubscribe
• Website analytics: 26 months

Complaints

If you wish to make a complaint about how we handle your personal data, please contact us directly at [email protected]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us immediately.

Updates to This Notice

We may update this GDPR compliance notice from time to time to reflect changes in our practices or legal requirements. The updated version will be indicated by an updated "Last Updated" date at the top of this page.