Steph Wheldon, trading as Workload Wizard

Location: Derbyshire, United Kingdom

I am registered with the Information Commissioner's Office (ICO) and committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

When you interact with Workload Wizard, I may collect the following personal information:

• Name and contact details (email address, phone number)
• Business name and address
• Information submitted through contact forms
• Communication records (emails, phone calls, messages)
• Financial information necessary for providing bookkeeping and accounting services

Your personal data is used to:

• Respond to your enquiries and requests
• Provide bookkeeping, business administration, and management services
• Send relevant communications about our services
• Maintain accurate business records
• Comply with legal and regulatory obligations

I will never sell your personal data to third parties. Your information is only shared with third parties when necessary for providing services (such as accounting software providers) or when required by law.

Your data is stored securely using encrypted, UK-based servers and cloud services. I implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

Security measures include:

• Encrypted data storage and transmission
• Secure password-protected systems
• Regular security reviews and updates
• Limited access to personal data on a need-to-know basis

I retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact enquiries: Deleted within 12 months if no business relationship is established
• Client records: Retained for 7 years after the end of our business relationship, in line with HMRC requirements
• Financial records: Retained for 7 years as required by UK tax legislation

Under the UK GDPR, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data (where applicable)
• Right to restrict processing: Request limitation of how your data is used
• Right to data portability: Request transfer of your data
• Right to object: Object to processing of your data