Privacy Policy
BUK Money – Privacy Policy (GDPR)
1. Introduction
This Privacy Policy explains how BUK Money Ltd (“BUK Money”, “we”, “us”) collects, uses, stores and shares
personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act
2018 and any other applicable data protection laws.
Our contact details are: 92 Main Street, East Leake, Loughborough, LE12 6PG. Email:
tax@bukmoney.co.uk.
This policy applies to personal data collected through our app, website, email, phone, direct contact, document upload facilities and any services we provide to you.
2. Who We Are
BUK Money Ltd provides tax support, digital onboarding, document collection and related support services.
We may also share relevant information with Buckley Rose where you have requested or authorised access
to financial advice services.
For certain tax services, BUK Money uses third-party accountants and approved software providers to help deliver the service.
3. The Personal Data We Collect
We may collect and process the following categories of personal data:
• Identity data – such as your full name, date of birth and national insurance number
• Contact data – such as your address, email address and telephone number
• Financial data – such as income details, expenses, bank information, tax information and payment records
• Employment and contractor data – such as employer details, contractor details, payslips, CIS statements, contracts, P60s and related records
• Account and profile data – such as login details, service preferences and information submitted through our app or forms
• Communication data – such as emails, messages, call notes and support requests
• Document data – such as identification documents, proof of address and any documents uploaded by you or provided on your behalf
• Marketing and preference data – such as your communication preferences and whether you have opted in
or out of certain updates
• Technical data – such as device information, IP address and app or website usage information where applicable
4. How We Collect Your Data
We may collect personal data directly from you and from other sources, including:
• Information you provide when signing up to our services
• Information you upload through our app, forms or online systems
• Information you send to us by email, phone, WhatsApp or other communication channels
• Information received from your contractor or employer where you have authorised us to request this
• Information received from third-party accountants, software providers or HMRC where necessary to provide the service
5. How We Use Your Personal Data
We use your personal data for the following purposes:
• To provide our services to you
• To collect and organise information required for tax-related work
• To liaise with third-party accountants and software providers
• To submit information to HMRC where applicable
• To verify your identity and protect against fraud
• To manage payments, billing and account administration
• To communicate with you about your account, service updates and support matters
• To share your information with Buckley Rose for financial advice services where you have agreed to this
• To improve our services, systems and user experience
• To comply with our legal, regulatory and record-keeping obligations
6. Lawful Bases for Processing
Under UK GDPR, we rely on one or more lawful bases when processing your personal data. These include:
• Performance of a contract – where processing is necessary to provide the services you have requested
• Legal obligation – where we must process data to meet legal, tax, accounting or regulatory requirements
• Legitimate interests – where processing is necessary for the running and improvement of our business, provided your rights do not override those interests
• Consent – where we specifically ask for your consent, for example for certain marketing communications or optional data sharing
7. Sharing Your Personal Data
We may share your personal data with trusted third parties where necessary, including:
• Buckley Rose, for financial advice services that you have requested or authorised
• Third-party accountants who prepare, review or submit tax work
• HMRC and other government or regulatory bodies where required
• Software and technology providers, including Xero and other approved systems used for digital submissions and service delivery
• Payment providers, banking partners or direct debit providers
• Professional advisers, auditors, insurers or legal advisers where reasonably necessary
8. International Transfers
Where any of our service providers process data outside the UK, we will take reasonable steps to ensure
appropriate safeguards are in place, such as approved contractual protections or other lawful transfer mechanisms required by UK GDPR.
9. Data Retention
We will only keep your personal data for as long as reasonably necessary for the purposes set out in this
policy, including to satisfy legal, tax, accounting, regulatory and record-keeping obligations.
Retention periods may vary depending on the nature of the service provided and the type of data involved.
When data is no longer required, we will securely delete or anonymise it where appropriate.
10. Data Security
We take appropriate technical and organisational measures to protect your personal data against
unauthorised access, loss, misuse, disclosure, alteration or destruction.
However, no electronic transmission or storage system can be guaranteed to be completely secure, and you
acknowledge that you provide information at your own risk.
11. Your Data Protection Rights
Under UK GDPR, you may have the right to:
• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Request erasure of your personal data in certain circumstances
• Request restriction of processing in certain circumstances
• Object to processing based on legitimate interests
• Request transfer of your data to you or another provider where applicable
• Withdraw consent at any time where we rely on consent
• Make a complaint to the Information Commissioner’s Office (ICO)
12. Marketing Communications
We may send you service messages, updates and, where permitted, information about relevant offers or
services. You can opt out of marketing communications at any time by contacting us or using the unsubscribe option where available.
Please note that even if you opt out of marketing, we may still contact you in relation to essential service, account or legal matters.
13. Children’s Data
Our services are not intended for children, and we do not knowingly collect personal data from children
unless this is strictly necessary and lawfully provided through a parent, guardian or other authorised person.
14. Complaints
If you have any concerns about how your data is handled, please contact us first at tax@bukmoney.co.uk.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any significant changes will be communicated to you
where appropriate, and the latest version should always be treated as the current version.
16. Contact Us
If you have any questions about this Privacy Policy or our handling of your personal data, please contact:
BUK Money Ltd, 92 Main Street, East Leake, Loughborough, LE12 6PG
Email: tax@bukmoney.co.uk