MAAT qualified Taunton, Somerset UK-wide support
Clear pricingResponsiveProfessional
Legal & website information

Privacy Policy

How GAM Tax collects, uses, protects and retains personal information received through this website.

Privacy notice

Your information, explained clearly.

This privacy notice explains how GAM Tax and Accounting Services, trading as GAM Tax and Accounting Services where applicable, collects and uses personal information about website visitors, people making enquiries, prospective and current clients, suppliers and other business contacts.

Data controllerGAM Tax and Accounting Services Privacy contactinfo@gamtax.co.uk Last reviewed10 September 2026

1. Who we are and what this notice covers

GAM Tax and Accounting Services is the data controller for the personal information described in this notice. GAM Tax is based in Taunton, Somerset and provides accountancy, tax, bookkeeping and finance support to clients throughout the UK.

Contact details: info@gamtax.co.uk, 07581 058703. Business address: Taunton, Somerset.

This notice covers information handled through the website and, where you become or are a client, information processed in connection with enquiries, onboarding and professional services. A letter of engagement may contain additional service-specific information.

2. Personal information we may use

  • Identity and contact information — name, postal address, email address, telephone number, date of birth and preferred contact method.
  • Business information — trading details, company or partnership information, directors, beneficial owners, business activities and relevant registrations.
  • Tax and financial information — Unique Taxpayer Reference, National Insurance number, tax references, income, expenses, bank or transaction information, accounts, bookkeeping records, invoices and other information needed for the services requested.
  • Identity and compliance records — identification documents and information used for client due diligence, anti-money laundering checks and risk assessment where required.
  • Enquiry and communication records — messages, emails, call notes, WhatsApp messages, requested services and calculator estimates you choose to send to us.
  • Website and security information — IP address, browser/device information, timestamps, server logs and security events generated by the website, hosting or security providers.
Please use secure channels for sensitive documents

Do not send passwords, complete payment-card details or identity documents through the public website form or ordinary WhatsApp messages. We will confirm an appropriate method for exchanging sensitive records once required.

3. Where personal information comes from

Most information is provided directly by you. We may also receive information from an authorised representative, your employer or business, another professional adviser, publicly available registers such as Companies House, HMRC or another authority, or a service provider used for identity and compliance checks. Where someone gives us information about another person, they should have authority or another lawful reason to do so.

4. Why we use information and our lawful bases

Enquiries, quotes and onboardingTo respond to you, understand what you need, assess whether we can act and take steps at your request before entering into a contract. We rely on steps before a contract and, where relevant, legitimate interests in managing genuine business enquiries.
Providing accountancy and tax servicesTo perform agreed services, communicate with you, maintain records and administer the engagement. We generally rely on contract and legitimate interests, together with legal obligations where they apply.
Identity, anti-money laundering and regulatory checksTo verify identity, understand ownership/control, assess risk and meet legal or professional obligations applicable to accountancy service providers. We rely on legal obligation and, where appropriate, legitimate interests.
Tax, accounts and regulatory submissionsTo prepare or submit information to HMRC, Companies House or other bodies when instructed or required as part of an engagement. We rely on contract and any applicable legal obligation.
Billing, debt management and legal claimsTo issue invoices, keep accounting records, collect sums due and establish, exercise or defend legal claims. We rely on contract, legal obligation and legitimate interests.
Website operation and securityTo deliver the site, prevent abuse, investigate faults and keep systems secure. We rely on legitimate interests in operating a safe and reliable website.
MarketingWe do not add website enquirers to a general marketing list by default. If marketing is introduced, we will use an appropriate lawful basis and comply with the Privacy and Electronic Communications Regulations for electronic marketing.

Where we rely on legitimate interests, those interests include responding to genuine enquiries, administering and improving the practice, securing systems, maintaining business records and protecting legal rights. We consider whether those interests are overridden by your rights and reasonable expectations.

You are not generally required to provide personal information merely to browse the website. If you make an enquiry, we need enough contact information to reply. If you become a client, certain identity, tax, financial and compliance information may be required by contract, law or professional requirements; without it we may be unable to act or continue acting.

5. Special category and criminal-offence information

We do not ask for special category information or criminal-offence information through the public enquiry form. It may occasionally appear in records relevant to professional work. If we need to process this type of information, we will do so only where a valid additional legal condition applies and with appropriate safeguards.

6. Who we may share information with

We only share information where there is a proper reason. Depending on the engagement, recipients may include:

  • HMRC, Companies House and other public authorities or regulators;
  • accounting, bookkeeping, tax, document-management, email, hosting, IT, security and cloud-service providers;
  • identity-verification or anti-money laundering service providers;
  • professional advisers, insurers, legal advisers and debt-recovery providers where necessary;
  • subcontractors or specialist advisers involved in your work where permitted and appropriately protected; and
  • another organisation where you instruct us to disclose information or the law requires it.

GAM Tax does not sell personal information. Service providers should only use information for the services they provide to us and subject to appropriate confidentiality and data-protection arrangements.

7. International transfers

Some technology providers may process or make support access to information from countries outside the UK. Where UK data-protection law requires safeguards for an international transfer, we expect the relevant provider or arrangement to use an approved mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, as applicable. You can ask us for further information about relevant safeguards.

WhatsApp is a third-party communication service. If you choose to use it, Meta/WhatsApp's own privacy terms and international processing arrangements also apply.

8. How long we keep information

Enquiries that do not become client mattersNormally up to 24 months, unless a longer period is reasonably needed for a dispute, legal claim or another documented purpose.
Client files, correspondence and working recordsNormally up to 6 years after the end of the relevant engagement or relationship, unless law, professional requirements, a dispute or another legitimate need requires a different period.
Anti-money laundering recordsWhere the Money Laundering Regulations apply, relevant customer due-diligence and transaction records are normally retained for 5 years from the end of the business relationship or completion of the relevant transaction, subject to applicable law.
Website/security logsRetained for the period reasonably required for security, fault diagnosis and provider operations. Exact periods may depend on the hosting or security provider.

We may securely delete, anonymise or retain information for longer where required by law or where necessary to establish, exercise or defend legal claims.

9. Your data-protection rights

Depending on the circumstances and lawful basis, you may have rights to be informed, access your personal information, correct inaccurate information, request erasure, restrict processing, object to certain processing and receive certain information in a portable format. Where processing is based on consent, you may withdraw consent.

Rights are not absolute and exemptions can apply. We normally respond to valid rights requests without undue delay and within one calendar month, subject to the rules on identity checks, clarification and extensions for complex or multiple requests.

Your right to object

If we process your information on the basis of legitimate interests, you may have a right to object. If direct marketing is ever used, you have an absolute right to object to the use of your personal information for direct marketing.

To exercise a right, email info@gamtax.co.uk. We may ask for proportionate information to verify identity.

10. Security and data breaches

We use proportionate technical and organisational measures intended to protect personal information from unauthorised access, accidental loss, misuse or disclosure. Measures may include access controls, secure hosting, software updates, backups and appropriate provider arrangements. No internet or email system can be guaranteed completely secure.

If a personal-data breach occurs, we will assess it and make notifications to affected people and/or the ICO where the law requires this.

11. Questions, rights requests and data-protection complaints

Contact info@gamtax.co.uk if you have a privacy question, want to exercise a right or believe we have not handled your personal information correctly.

For a data-protection complaint, tell us what happened, what information or activity concerns you and what outcome you are seeking. We will acknowledge a data-protection complaint within 30 days, take appropriate steps to investigate it, keep you informed where necessary and provide an outcome without unjustifiable or excessive delay.

See our Data Protection Complaints Procedure for more detail. You may also complain to the Information Commissioner's Office. The ICO recommends giving the organisation an opportunity to resolve the matter first in most cases. Current complaint routes are available at ico.org.uk/make-a-complaint.

12. Automated decision-making, children and changes

The website calculator does not make automated decisions about whether GAM Tax will accept or refuse a client. It only calculates indicative prices from the options selected.

The website and professional services are not directed at children. If information about a child is relevant to a client's tax or accounting matter, it will be handled only where necessary and with an appropriate lawful basis.

We review this notice when our services, technology providers or legal obligations change. The review date at the top of the page identifies the current version.