Privacy Policy

This Privacy Policy explains how AR Payroll & Consultancy Ltd, operating AR Bookkeeping, collects, uses, stores and protects personal data and business data when providing accountancy, bookkeeping, payroll, VAT and HMRC Making Tax Digital related services.

This policy also covers the AR Bookkeeping software used by AR Payroll & Consultancy Ltd to manage client records, VAT preparation, payroll information, bookkeeping workflows and HMRC authorisation processes.

1. Who we are

AR Payroll & Consultancy Ltd is a UK-based accountancy, bookkeeping and payroll service provider.

AR Payroll & Consultancy Ltd
272 Brixton Hill
London
SW2 1HP
Email: info@ar-bookkeeping.com
Telephone: 02037437144

2. Information we collect

We may collect and process the following information:

• Client names, business names and contact details.
• Company registration details, VAT numbers and tax references.
• Bookkeeping records, sales records, purchase records and bank information.
• Payroll records, employee details and employer PAYE information.
• VAT return information and Making Tax Digital records.
• HMRC authorisation information and OAuth access tokens where required.
• Correspondence, support messages and service records.
• Technical information needed to operate, secure and audit our software.

3. Why we use your information

We use information to:

• Provide bookkeeping, payroll, VAT and accountancy services.
• Prepare VAT records and support VAT return workflows.
• Connect to HMRC services where authorised by the client.
• Maintain accurate client and business records.
• Meet legal, tax, accounting and regulatory obligations.
• Protect our systems, prevent misuse and maintain audit records.
• Communicate with clients about services and support.

4. HMRC and Making Tax Digital

Where a client authorises us to connect to HMRC services, AR Bookkeeping may use HMRC OAuth authorisation to access VAT information and support Making Tax Digital workflows. We do not ask clients to provide Government Gateway passwords.

HMRC access tokens and refresh tokens are stored server-side and are used only for authorised HMRC API access. Live VAT submission controls remain restricted and subject to internal checks before use.

5. Lawful basis for processing

We process personal data where necessary for contract performance, legal obligations, legitimate business interests, consent where required, and compliance with tax and accounting duties.

6. Who can access information

Access to client information is restricted to authorised personnel and systems used to provide our services. We do not sell personal data.

7. Third-party services

We may use trusted technology providers to host, secure and operate our website, software and business systems. These may include hosting, database, email and software infrastructure providers.

8. Data storage and security

We take reasonable technical and organisational steps to protect data against unauthorised access, loss, misuse or disclosure. This includes access controls, server-side storage of sensitive credentials and audit records where appropriate.

9. Data retention

We keep records for as long as necessary to provide services, comply with legal and tax obligations, resolve disputes and maintain accounting records. Retention periods may vary depending on the type of record and legal requirements.

10. Data breach process

If a data breach occurs, we will investigate, contain the issue, record what happened, rotate affected credentials where necessary and notify relevant authorities or affected individuals where legally required.

11. Your rights

Under UK data protection law, individuals may have rights to access, correct, erase, restrict or object to processing of their personal data, subject to legal and regulatory limits.

12. Contact

Questions about this Privacy Policy can be sent to info@ar-bookkeeping.com.

Last updated: 29 June 2026