Privacy Policy

Introduction

Cornerstone Payroll Limited ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://cornerstone-payroll.co.uk and use our services.

We are registered in England and Wales. Our registered office is:

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Contact us through our website contact form
• Subscribe to our newsletter or communications
• Engage our services
• Correspond with us by email, phone, or other means

This information may include:

• Name and contact details (email address, phone number, postal address)
• Company name and position
• Financial and payroll information (for service delivery)
• Any other information you choose to provide

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and usage, including:

• IP address
• Browser type and version
• Pages visited and time spent on pages
• Referring website addresses
• Operating system

How We Use Your Information

We use the information we collect for the following purposes:

• To provide and deliver our accounting and payroll services
• To respond to your enquiries and provide customer support
• To send you updates, newsletters, and marketing communications (with your consent)
• To comply with legal obligations and regulatory requirements
• To improve our website, services, and customer experience
• To protect against fraud and unauthorised transactions
• To maintain accurate financial and business records

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

• Contractual necessity: Processing is necessary for the performance of our services
• Legal obligation: Processing is required to comply with accounting, tax, and regulatory requirements
• Consent: You have given explicit permission for specific processing activities
• Legitimate interests: Processing is necessary for our legitimate business interests, such as improving services and preventing fraud

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service providers: We may share information with trusted third-party service providers who assist us in operating our business (e.g., cloud hosting, payment processors)
• Legal requirements: We may disclose information when required by law or to protect our rights and comply with legal processes
• HMRC and regulatory bodies: As required to fulfil our obligations as an accounting service provider
• Professional advisors: Lawyers, auditors, and other professional advisors bound by confidentiality obligations

Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission and storage
• Secure server infrastructure with regular security updates
• Access controls and authentication requirements
• Regular security assessments and audits
• Staff training on data protection and confidentiality
• Secure backup and disaster recovery procedures

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. For accounting and payroll records, we typically retain data for a minimum of six years to comply with HMRC requirements and professional accounting standards.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data (subject to legal obligations)
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data to another organisation
• Right to object: Object to certain types of processing
• Right to withdraw consent: Withdraw consent for processing based on consent

To exercise any of these rights, please contact us at [email protected].

Cookies

Our website uses cookies to enhance your browsing experience. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a revised "Last updated" date.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: