LEGAL
Privacy & Cookie Notice
How AMF & Co. Limited collects, uses and protects your information, and the cookies we use on this website.
Privacy notice
Last updated: 11 October 2026
This notice explains how AMF & Co. Limited collects, uses and protects personal information about people who visit our website, get in touch with us, or become our clients.
Who we are
AMF & Co. Limited is the controller of the personal information described in this notice. That means we decide how and why it’s used.
Registered in England and Wales, company number 16411277
Registered office: Unit C Aldow Enterprise Park, Manchester, M12 6AE
Email: enquiries@amfco.uk
Admin enquiries: Admin@amfco.uk
Registered with the Information Commissioner’s Office (registration pending)
We are a small practice and have not appointed a data protection officer. Please send any questions about this notice or your information to the email address above.
The information we collect
What we hold depends on how you deal with us.
Website visitors
Anonymous visit statistics, such as pages viewed, browser type and approximate country. When you use our enquiry form, Google reCAPTCHA also checks your browser and device details to block spam.
Source: your browser
People who contact us
Your name, email address and phone number; your business type, approximate turnover and the software you use; the services you’re interested in; your preferred call times; how you heard about us; and anything else you tell us.
Source: you, through our enquiry form, email or phone
Clients
Contact details; identity documents and the results of identity and anti-money laundering checks; tax references such as your Unique Taxpayer Reference and National Insurance number; bank statements, invoices, receipts and other financial records; payroll records; details of directors, shareholders and people with significant control.
Source: you and your business, HMRC, Companies House, your previous accountant and our identity verification provider
People connected to our clients
Names, payment details, payroll and CIS information for employees, subcontractors, customers and suppliers that appear in a client’s records.
Source: our client
We don’t ask for special category information, such as details about health. If it appears in records you give us, for example a medical expense, we only use it to carry out the work you’ve asked for.
How we use it and why we’re allowed to
Data protection law requires a lawful basis for each use of your information. Ours are set out below.
Replying to your enquiry and arranging a discovery call
Lawful basis: steps you’ve asked us to take before entering into a contract, and our legitimate interest in responding to people who contact us
Providing accounting, bookkeeping, tax, payroll and advisory services
Lawful basis: performance of our contract with you
Identity checks and anti-money laundering checks
Lawful basis: legal obligation under the Money Laundering Regulations 2017
Filing returns with HMRC and Companies House, and keeping records
Lawful basis: legal obligation, and performance of our contract with you
Keeping our website and enquiry form secure and free of spam
Lawful basis: our legitimate interest in protecting our website
Understanding how our website is used, in aggregate
Lawful basis: our legitimate interest in improving our website
Sending clients occasional updates about tax changes and our services
Lawful basis: our legitimate interest in keeping clients informed. You can opt out at any time, and every email includes an unsubscribe link
Dealing with complaints, claims, our insurer and our professional body
Lawful basis: legal obligation, and our legitimate interest in running and protecting our business
We don’t sell your information. We don’t make decisions about you based solely on automated processing.
Who we share it with
We only share your information where we need to, and our service providers may only use it on our instructions.
HMRC, Companies House and other government bodies
To file returns and meet our legal obligations
Our software and service providers
Cloud accounting software (Xero, Hubdoc and FreeAgent), email and file storage, our website and enquiry form (Framer), spam protection (Google reCAPTCHA) and identity verification checks. They store and process information on our behalf, under contracts that protect it
Accountants who work for us as subcontractors
To help deliver your work, under a written confidentiality and data protection agreement
Your previous or next accountant
To hand over your affairs when you switch, with your agreement
Our professional indemnity insurer, legal advisers and professional body (AAT)
To deal with claims, take advice and take part in regulatory monitoring
Law enforcement, including the National Crime Agency
Where the law requires us to report or disclose information
Transfers outside the UK
Some of our service providers store or access information outside the UK, including in the European Economic Area and the United States. Google reCAPTCHA, for example, sends information to Google in the United States.
When information leaves the UK, we make sure it stays protected. We rely on UK adequacy regulations, which cover the European Economic Area and US companies certified under the UK Extension to the EU-US Data Privacy Framework. Otherwise, we use the ICO-approved International Data Transfer Agreement or Addendum.
How long we keep it
We keep information only as long as we need it, then delete it securely.
Enquiries that don’t lead to us working together
12 months after our last contact
Client files, working papers and accounting records
6 years after our engagement ends, or longer while an HMRC enquiry or a claim is open
Identity and anti-money laundering records
5 years after our business relationship ends, as the Money Laundering Regulations 2017 require, and then deleted
Marketing preferences
Until you unsubscribe. We then keep a short record so we don’t contact you again
Website visit statistics
Kept only in aggregate, without identifying you
Keeping it secure
We protect your information with:
Two-factor authentication on all our software and email accounts
Encrypted storage and secure file sharing, rather than ordinary email attachments, for sensitive documents
Access limited to the people who need it for your work, all bound by confidentiality
We will never ask you to send bank login details. If a data breach is likely to put you at risk, we’ll tell you without undue delay, and we’ll report it to the ICO where the law requires.
Your rights
You have the right to:
Access the information we hold about you and get a copy
Correct information that is wrong or incomplete
Delete your information, unless the law requires us to keep it
Restrict how we use your information while a concern is looked into
Object to how we use it, including stopping marketing at any time
Move information you’ve given us to another provider, in a common format
Withdraw consent at any time, where we rely on your consent
Some rights have limits. For example, we can’t delete records the Money Laundering Regulations or HMRC require us to keep. To use any of your rights, email enquiries@amfco.uk. We’ll respond within one month, and there’s normally no charge. We may need to confirm your identity first.
Complaints
If you’re unhappy with how we’ve handled your information, please tell us first. Email enquiries@amfco.uk with “Data protection complaint” in the subject line. We’ll acknowledge your complaint within 30 days, look into it, and tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office:
Website: ico.org.uk
Helpline: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Changes to this notice
We’ll update this notice when the way we use information changes. Our cookie notice explains the cookies used on our website.
Cookie notice
Last updated: 11 October 2026
This notice explains the cookies and similar technologies used on the AMF & Co. website, amfco.uk. Our site uses one cookie, which protects our enquiry form from spam. We don’t use advertising or tracking cookies.
What cookies are
Cookies are small text files a website stores on your device. Some are needed for a site to work securely. Others track you for analytics or advertising, and those need your consent.
The cookie we use
_GRECAPTCHA
Set by: Google reCAPTCHA
What it does: helps tell real people from automated spam when our enquiry form is used
How long it lasts: up to 6 months
Type: strictly necessary
Because this cookie is strictly necessary to keep our enquiry form secure, we don’t need your consent to use it. To do its job, reCAPTCHA sends information such as your IP address and browser details to Google, which may process it in the United States. Google’s Privacy Policy (policies.google.com/privacy) and Terms of Service (policies.google.com/terms) apply to that information.
Website statistics
We use our website platform’s built-in analytics to see how many people visit and which pages they view. It doesn’t use cookies and doesn’t create anything that tracks you over time or across other sites.
No advertising or tracking cookies
We don’t use advertising, social media or cross-site tracking cookies, so you won’t see a cookie banner on our site. If we ever add cookies that need your consent, we’ll ask before setting them and update this notice.
Managing cookies
You can block or delete cookies in your browser settings. If you block the reCAPTCHA cookie, our enquiry form may not work. You can email us at enquiries@amfco.uk instead.
More information
Our privacy notice explains how we use personal information, and how to contact us or make a complaint.
AMF & Co.
Accounting Services · Business Consultancy · Advisory
Legal
Privacy notice
Cookie notice
Visit us (appointment only)
Unit C Aldow Enterprise Park, Manchester M12 6AE