HMRC Regulatory Update: From May 2026, conveyancers filing SDLT returns must register as tax advisers.
GDPR Compliance
We are committed to protecting your data and respecting your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Last updated: February 2026
Data Protection
We process personal data lawfully, fairly and transparently, and only for specified purposes. We keep data accurate and retain it only as long as necessary.
Your Rights
You have rights to access, rectify, erase, restrict and port your data, and to object to certain processing. You can also lodge a complaint with the ICO.
Transparency
We tell you what data we collect, why we use it and how long we keep it. Our Privacy Policy and this page explain our approach in plain language.
Accountability
We take responsibility for our processing and implement appropriate technical and organisational measures to protect your personal data.
1. Our Commitment to UK GDPR
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We have put in place policies, procedures and technical measures to protect your personal data and to respect your rights.
2. Legal Basis for Processing
We process your personal data only where we have a valid legal basis. This may include:
- Contract: Processing necessary to perform our contract with you or to take steps at your request before entering a contract
- Legal obligation: Processing necessary to comply with UK law (e.g. tax, accounting or regulatory requirements)
- Legitimate interests: Processing necessary for our legitimate interests (e.g. improving our services, security, fraud prevention), where those interests are not overridden by your rights
- Consent: Where we rely on consent (e.g. for certain marketing), you can withdraw it at any time
3. Your GDPR Rights
Under UK GDPR you have the following rights in relation to your personal data:
Right to Access
You can request a copy of the personal data we hold about you. We will provide the information in a commonly used electronic format, normally within one month.
Right to Rectification
You can ask us to correct or complete inaccurate or incomplete personal data we hold about you.
Right to Erasure
You can ask us to delete your personal data in certain circumstances (for example where it is no longer necessary, or where you withdraw consent and there is no other legal basis).
Right to Data Portability
Where we process your data by automated means on the basis of contract or consent, you can ask to receive your data in a structured, machine-readable format and to have it transmitted to another controller where technically feasible.
Right to Object
You can object to processing based on legitimate interests. You also have an absolute right to object to direct marketing at any time.
4. Data Security Measures
We implement appropriate technical and organisational measures to protect your personal data. These include:
✓ Security measures
- • Encryption of data in transit and, where appropriate, at rest
- • Access controls and authentication
- • Regular review of our security practices
- • Secure backup and recovery procedures
5. Data Retention
We keep your personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, regulatory or contractual requirements. When data is no longer needed, we delete or anonymise it securely.
6. International Transfers
We aim to store and process your data within the UK. If we transfer personal data outside the UK, we ensure that appropriate safeguards are in place as required by UK law (for example UK-approved transfer mechanisms or adequacy decisions).
7. Data Breach Notification
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours where required, and we will inform affected individuals without undue delay where the risk is high.
8. Children's Data
Our services are not directed at children under 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
9. Exercising Your Rights
To exercise any of your rights, or if you have questions about our use of your data, please contact us. We will respond within one month; in complex cases we may extend this by up to two further months and will let you know.
Contact
Email: hello@sdltcheck.co.uk
Phone: 0121 461 8700
The Barns, Barston Gate Farm
Barston Lane, Barston
B92 0JN
United Kingdom
10. Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:
Information Commissioner's Office
Website: ico.org.uk ↗
Helpline: 0303 123 1113
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
More Information
For full details on how we collect, use and protect your personal data, see our Privacy Policy.
Contact Us