Privacy Policy | Sivapalan Morgan

SIVAPALAN MORGAN - PRIVACY POLICY

Last updated: 08/06/2026

This Privacy Policy explains how we collect and use personal information when you visit our website, contact us or use our accountancy and advisory services. We are committed to protecting your privacy and handling your personal data fairly and lawfully.

When we mention “Sivapalan Morgan”, “we”, “us” or “our” in this policy, we are referring to the accountancy firm based in Cardiff, United Kingdom.

WHO WE ARE

Sivapalan Morgan is a forward‑thinking accountancy firm providing accountancy and professional advisory services to individuals and businesses in the UK and internationally.

Details of the data controller:

Business name: Sivapalan Morgan
Trading entity: Sivapalan & Co Ltd (Company number 08791809)
Registered office: 168 City Road, Cardiff, Wales, CF24 3JE, United Kingdom
Main Cardiff office: The Old Bank Buildings, 207‑209 Richmond Road, Cardiff, UK
Other offices: Zeistpad 7, Almere, The Netherlands; Sivakami Amman Temple, Sivakami Amman Kovil Road, Karainagar, Sri Lanka; 501 Godrej Platinum, Hebbal, Karnataka, 560024, India; Prodigy P03 P04 P05, Building 10, Bay Square, Business Bay, Burj Khalifa District, Dubai, UAE
Telephone: +44 (0)29 20 304 411
Email (general enquiries): inf@sivapalanmorgan.com
Website: sivapalanmorgan.com

For the purposes of UK data protection law, Sivapalan & Co Ltd is the data controller for personal data collected through this website and in connection with our services.

If you have any questions about this policy or how we handle your data, please contact us using the details above.

THE PERSONAL DATA WE COLLECT

We only collect data that we need to operate our website, respond to enquiries and deliver our accountancy, tax and advisory services.[sivapalanmorgan]

We may collect the following information:

Identity data – for example, your name, title, organisation and role.
Contact data – for example, your email address, telephone number, postal address and any other contact details you provide.
Enquiry and communication data – information you provide when you contact us via website forms, email, phone, social media or in person, including details about your business, finances and the services you are interested in.
Client and engagement data – information we collect and create as part of providing professional services to you, which may include financial records, tax information, payroll information and other documentation relevant to our engagement.
Usage and technical data – information about how you use our website, such as IP address, browser type and version, device identifiers, operating system, time zone setting, approximate location and pages you visit. This may be collected through cookies, analytics and similar technologies.
Marketing and communication preferences – your preferences for receiving marketing from us and your communication settings.

We do not intentionally collect special category data (such as health information, racial or ethnic origin, political opinions or religious beliefs) through our website. If you choose to include this kind of information in what you send us, you do so voluntarily, and we will handle it carefully and only use it to respond to your enquiry or deliver our services.

2. HOW WE COLLECT YOUR DATA

We collect personal data in the following ways:

Directly from you - when you complete a contact form on our website, email or call us, sign up to our services or meet with us as a client or potential client.
Automatically when you use our website - through cookies and similar technologies that collect usage and technical data so we can understand how visitors use our site and maintain its security and performance.
From third parties - from professional contacts, referrals, intermediaries and publicly available sources where permitted by law, and from analytics providers or advertising platforms if we run campaigns and track performance.

3. HOW WE USE YOUR PERSONAL DATA AND LEGAL BASES

We will only use your personal data when the law allows us to and for clear, specific purposes. These include:

Responding to enquiries and providing initial advice - to respond to website enquiries, emails, calls and requests for quotes or consultations. We rely on our legitimate interests in responding to potential and existing clients and, where appropriate, on taking steps at your request before entering into a contract.
Providing accountancy, tax and advisory services - to deliver account preparation, tax compliance, payroll, bookkeeping, advisory and related professional services. We rely mainly on the performance of a contract with you or your organisation, and on our legitimate interests in delivering professional services and keeping records.
Client onboarding, compliance and risk management - to carry out identity checks and anti‑money laundering procedures where required. We rely on our legal obligations and our legitimate interests in managing legal and regulatory risks.
Managing our relationship with you - to send engagement letters, service updates, administrative communications and to handle feedback or complaints. We rely on the performance of a contract and our legitimate interests in maintaining client relationships.
Website operation, security and improvements - to operate, maintain and improve our website, including monitoring usage, troubleshooting issues and analysing performance. We rely on our legitimate interests in operating an effective, secure website.
Marketing and business development - to send newsletters, updates or invitations to events where permitted. We rely on consent where required, or on our legitimate interests for certain business‑to‑business contacts and existing clients, in line with UK marketing rules.
Legal, regulatory and business purposes - to comply with legal obligations, respond to requests from authorities, and manage or defend legal claims. We rely on our legal obligations and our legitimate interests in protecting our business.

We will not use your personal data for purposes that are materially different from those described in this policy without informing you and, where necessary, obtaining your consent.

4. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies to:

Make the site function properly and securely.
Remember certain preferences where applicable.
Help us understand how visitors use our website and improve its performance.

Where required, we will ask for your consent before setting non‑essential cookies, such as analytics or marketing cookies. You can manage or withdraw your consent using the cookie banner (where available) or through your browser settings. Please note that blocking some cookies may affect how the site functions.

5. SHARING YOUR PERSONAL DATA

We do not sell your personal data and we do not share it with third parties for their own independent marketing purposes. We may share your data with:

Service providers who supply IT, hosting, website, email, data storage, document management, analytics, CRM and other systems we use to run our business and deliver services.
Professional advisers, such as lawyers, insurers, bankers, auditors and other advisers where necessary to manage our business and handle legal or regulatory issues.
Authorities and regulators, such as HM Revenue & Customs, law enforcement or regulatory bodies, when we are required to do so by law or to respond to lawful requests.
Other parties in connection with a business transaction, such as a merger, reorganisation, business sale or acquisition. In such cases, we only share what is necessary and under appropriate confidentiality obligations.

Where we use third‑party service providers, they may only process your data on our instructions, must keep it confidential, and must protect it in line with data protection law.

6. INTERNATIONAL TRANSFERS

Because we have offices and clients outside the UK and may use service providers whose systems are located overseas, your personal data may be transferred outside the UK in certain circumstances.

When this happens, we will ensure that appropriate safeguards are in place, such as:

Adequacy regulations confirming that the destination country offers an adequate level of protection; and/or
Standard contractual clauses and other measures approved under UK data protection law.

You can contact us if you would like more information about how we protect your data when it is transferred internationally.

7. HOW LONG WE KEEP YOUR DATA

We keep your personal data only for as long as necessary to fulfil the purposes described in this policy, including to meet legal, accounting and reporting requirements.

As a guide:

Enquiries, where you do not become a client, are normally kept for up to around 12 to 24 months after our last meaningful contact.
Client and engagement records are typically kept for around 6 to 7 years from the end of the engagement or our relationship, to comply with tax, accounting and regulatory requirements and to manage potential legal claims.
Website and analytics data is kept for the period configured in our analytics tools, usually up to around 26 months.

When data is no longer needed, we will securely delete, anonymise or archive it.

8. YOUR RIGHTS

Under UK data protection law, you have certain rights in relation to your personal data, subject to some conditions and exemptions:

The right of access - to obtain a copy of your personal data and information about how we process it.
The right to rectification - to have inaccurate or incomplete data corrected.
The right to erasure - to ask us to delete your data in certain circumstances.
The right to restriction - to ask us to restrict the processing of your data in certain circumstances.
The right to object - to object to processing based on our legitimate interests, and to object at any time to direct marketing.
The right to data portability - to receive your personal data in a commonly used format and have it transferred to another organisation, where applicable.
The right to withdraw consent - where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.

If you wish to exercise any of these rights, please contact us using the details in the “Who we are” section.

You also have the right to complain to the UK Information Commissioner’s Office (ICO) if you are unhappy with how we use your data. Further information is available on the ICO’s website or by calling them. We would, however, appreciate the chance to deal with your concerns before you contact the ICO, so please contact us in the first instance.

9. MARKETING COMMUNICATIONS

We may send you information about our services, events or news that we think may be relevant to you or your organisation. We will do this where:

You have requested information from us or purchased services and have not opted out of marketing.
You have given us your consent.
We are otherwise permitted to do so under UK direct marketing rules, for example in certain business‑to‑business contexts.

You can ask us to stop sending you marketing messages at any time by following the unsubscribe instructions in our emails or by contacting us directly. We may still send you non‑marketing communications that are necessary for the performance of a contract or our legal obligations.

10. HOW WE PROTECT YOUR DATA

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures include access controls, secure systems and policies that limit access to those who need it for legitimate business purposes.

However, no method of transmission over the internet or electronic storage is completely secure. You share information with us at your own risk and we encourage you to take steps to keep your own devices and accounts secure.

11. THIRD‑PARTY WEBSITES

Our website may contain links to third‑party websites, social media platforms or resources. Clicking on those links may allow third parties to collect or share data about you. We do not control these third‑party sites and are not responsible for their privacy practices.

We encourage you to read the privacy policy of every website you visit.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or how we process personal data. When we do, we will update the “Last updated” date at the top of this page and, where appropriate, notify you via our website or by email.

Please review this page periodically to stay informed about how we use your personal data.