Privacy Policy

Last updated: November 18, 2025

Data Controller Information

Paragon Tally

25 Canada Square

Canary Wharf

London, E14 5LQ

United Kingdom

Email: [email protected]

Phone: +44 20 7528 4173

Our Commitment to Data Protection

At Paragon Tally, we take your privacy seriously and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you interact with our website and services.

We comply with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy provides transparency about our data practices and your rights regarding your personal information.

Information We Collect

Personal Information You Provide

When you use our contact forms or engage our services, we may collect personal information including your name, email address, company name, phone number, and any details you provide in your messages or inquiries. This information is collected directly from you when you voluntarily submit it through our website or correspondence.

The legal basis for processing this information is your consent when submitting forms, and our legitimate business interests in responding to inquiries and providing accounting services.

Automatically Collected Information

When you visit our website, we automatically collect certain technical information through cookies and similar technologies. This may include your IP address, browser type, device information, pages visited, time spent on pages, and referring website addresses.

We collect this data to understand how visitors use our website, improve functionality, and ensure security. The legal basis is our legitimate interest in maintaining and improving our services.

Cookies and Tracking Technologies

We use cookies to enhance your browsing experience, analyze website traffic, and remember your preferences. Cookies are small text files stored on your device that help us recognize you on return visits.

For detailed information about the specific cookies we use and how to manage them, please refer to our Cookie Policy. You can control cookie settings through your browser or our cookie preference center.

Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Contact form submissions are typically retained for two years unless you request earlier deletion. Website analytics data is retained for 26 months in accordance with standard industry practices.

If you become a client, we retain your information for the duration of our professional relationship and for seven years afterward to comply with accounting and tax regulations in the United Kingdom.

How We Use Your Information

Service Provision and Communication

We use your personal information to respond to your inquiries, provide requested accounting services, and communicate with you about your account or service requests. This includes sending confirmations, updates, and relevant service-related information.

Website Improvement and Analytics

We analyze website usage data to understand visitor behavior, identify popular content, and improve our website functionality. This helps us enhance user experience and ensure our website meets the needs of our visitors.

Marketing Communications

With your consent, we may send you information about our services, industry insights, or updates that we believe may be of interest to you. You can opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us directly.

Legal Compliance and Security

We may process your data to comply with legal obligations, protect our rights and property, prevent fraud, and ensure the security of our website and services. This includes maintaining audit trails and responding to lawful requests from authorities.

Third-Party Sharing

We do not sell your personal information to third parties. We may share your data with trusted service providers who assist us in operating our website, conducting our business, or providing services to you. These providers are contractually obligated to protect your information and use it only for the purposes we specify. We may also disclose information when required by law or to protect our legal rights.

How We Protect Your Data

Security Measures

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include encrypted data transmission, secure server infrastructure, and regular security assessments.

Data Encryption and Storage

Personal data transmitted through our website is encrypted using industry-standard SSL/TLS protocols. Data stored on our systems is protected through encryption at rest, access controls, and regular backups to secure facilities within the European Economic Area.

Access Controls and Monitoring

Access to personal data is restricted to authorized personnel who require it to perform their job functions. We maintain detailed access logs, conduct regular audits, and provide ongoing training to our staff on data protection principles and practices.

Breach Notification Procedures

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay and within 72 hours of becoming aware of the breach, in accordance with UK GDPR requirements.

Your Privacy Rights

Right to Access Your Personal Data

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will provide this information in a commonly used electronic format within one month of your request.

Right to Rectification and Erasure

You can request correction of inaccurate personal data or deletion of your data when it is no longer necessary for the purposes for which it was collected. We will respond to such requests promptly, though certain legal obligations may require us to retain specific information.

Right to Data Portability

Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance from us.

Right to Object to Processing

You have the right to object to processing of your personal data based on our legitimate interests or for direct marketing purposes. We will cease such processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

How to Exercise Your Rights

To exercise any of these rights, please contact us using the contact information provided at the top of this policy. We will respond to your request within one month and may ask you to verify your identity before processing your request to ensure data security.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

  • Avoid filling out contact forms, account registrations, or any data-submitting features
  • Disable cookies through your browser settings (see our Cookie Policy for more details)
  • Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly and confirm when the deletion has been completed.

Please note that we may need to retain certain information for legal or regulatory purposes even after you request deletion. We will inform you if this applies to your request.

Additional Information

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete such information promptly.

International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom. If we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to protect your information in accordance with data protection laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a revised "Last updated" date. We encourage you to review this policy periodically.

Contact Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information provided at the beginning of this document. We are committed to addressing your privacy concerns and will respond to all inquiries in a timely manner.