Privacy Policy

Privacy Policy

Last updated: July 20, 2025

This Privacy Policy describes how Direct Revenue Services Ltd ("we", "our", "us") collects, uses, and protects your personal data when you visit DirectRevenueServices.co.uk (the "Site") or use our services ("Services"). By accessing the Site or engaging our Services, you consent to the practices described in this policy.

1. Data Controller

Direct Revenue Services Ltd (Company No. 16579788) is the data controller responsible for processing your personal data.

Contact:
70 Mountain Road, Thornhill, Dewsbury, West Yorkshire, WF12 0BP
Email: care@directrevenueservices.co.uk
Phone: 0113 487 4234

2. Personal Data We Collect

We collect and process the following categories of personal data:

1. Account & Contact Information: Name, email, phone number, postal address.

2. Financial & Tax Data: Income details, tax returns, bank statements, property/rental income records, dividend statements, pension records, foreign income documents.

3. Identification Documents: Passport, driving licence, National Insurance number (for verification).

4. Usage Data: IP address, browser type, pages visited, time stamps, cookies and tracking data.

5. Communications: Support tickets, email correspondence, call recordings (with consent).

3. How We Use Your Data

We process your personal data for these purposes:

• Service Delivery: Preparing and filing tax returns, accounts, benefits claims, and handling HMRC correspondence.

• Verification & Compliance: Verifying identity, ensuring anti‑fraud measures, and meeting regulatory obligations (e.g., HMRC, GDPR).

• Communication: Responding to enquiries, sending updates, invoices, and notifications about Services.

• Marketing (with consent): Sending newsletters, offers, and promotional content which you may opt out of at any time.

• Site Improvement: Analysing usage data to enhance Site performance and user experience.

4. Legal Basis for Processing

We rely on the following lawful bases under the UK GDPR:

• Contract Performance: Processing necessary to fulfil our Services and engagement with you.

• Legal Obligation: Complying with HMRC, financial, and anti‑money laundering regulations.

• Legitimate Interests: Improving our Services, preventing fraud, and securing the Site (where interests are not overridden by your rights).

• Consent: For marketing communications and call recording (you may withdraw consent at any time).

5. Data Sharing & Disclosure

We may share your data with:

1. Accountants & HMRC: To deliver tax and accounting Services and communicate with HMRC on your behalf.

2. Service Providers: IT hosting, payment processors, and professional advisors under strict confidentiality.

3. Regulatory Authorities: If required by law, court order, or regulatory investigation.

4. Group Companies: For administrative and compliance purposes within the Direct Revenue Services Ltd group.

We never sell your personal data to third parties.

6. Cookies & Tracking

Our Site uses cookies and similar technologies to:

• Remember preferences and session information.

• Analyse Site traffic and user behaviour via Google Analytics (anonymised IP).

You can manage cookie settings through your browser. For more details, see our Cookie Notice [link].

7. International Transfers

If your data is transferred outside the UK, we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner’s Office (ICO).

8. Data Retention

We retain personal data only as long as necessary for:

• The purposes stated in this policy.

• Compliance with statutory retention periods (e.g., 6 years for tax records).

After retention periods expire, data is securely deleted or anonymised.

9. Your Rights

Under UK GDPR, you have the right to:

• Access and obtain a copy of your personal data.

• Rectify inaccurate or incomplete data.

• Erase data ("right to be forgotten") where lawful.

• Restrict or object to processing.

• Data portability for data you supplied.

• Withdraw consent at any time (without affecting prior processing).

To exercise any right, contact care@directrevenueservices.co.uk. We will respond within one month.

10. Security Measures

We implement appropriate technical and organisational measures, including:

• Encryption of data in transit (TLS) and at rest.

• Access controls and authentication protocols.

• Regular security audits and vulnerability assessments.

11. Children’s Privacy

Our Services are not directed at children under 16. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this Privacy Policy periodically. We’ll post changes on the Site with a revised "Last updated" date. Continued use constitutes acceptance of updates.

---

By using DirectRevenueServices.co.uk, you acknowledge that you have read, understood, and agree to this Privacy Policy.