Last updated: 31 January 2025
About this policy
Protecting and respecting your privacy is fundamental to our relationship with you as a user of our website. We take our legal and ethical responsibilities seriously.
This Website Privacy Policy will help you understand what information we collect from you and process from your use of our website, how we intend to use it, and what choices and controls you have with respect to your personal data.
The policy is divided into the following numbered sections:
- Our data protection framework
- Collecting, accessing and using your personal data
- Sensitive personal data
- Children’s personal data
- Your rights
- Declaration of data sharing and sub-processing
- Website cookies and automated collection of data
- External links
- Contacting us
This policy supplements other notices including our and is not intended to override or replace them.
We reserve the right to revise or amend this policy at any time to reflect changes to our business or changes in the law. Where these changes are significant, we will endeavour to let our clients and users of this website know. However, it is your responsibility to check this policy each time that you use this website or wish to transfer personal data to us.
When we change this policy, we will post any changes on this page. The top of this policy indicates the date on which we last updated it. If you continue to access this website or use services available from this website after those changes have come into effect, you will have agreed to the revised policy. We recommend that you review this policy regularly.
Here are terms we use frequently in this policy and what they refer to:
We, us, our, BKL, our business, the business:
Berg Kaprow Lewis LLP (registered company number OC303950) and other affiliated entities: BKL Audit LLP, BKL Probate LLP, CFPro Limited, Alan Heywood & Company LLP, Wilson Wright LLP. The above terms also refer to the business that manages and publishes this website, and any services or features available to you to use from this website.
This website, our website, the website:
You, your:
this website
Personal data, personal information:
Data about you from which you could be identified, such as your name, your date of birth, your contact details (including your email address) or other identifiers such as your IP address
GDPR:
The EU General Data Protection Regulation 2016/679, which applies across the European Union and in the United Kingdom as the UK Data Protection Act of 2018 (UK GDPR)
ICO:
The Information Commissioner’s Office
Our data protection framework
BKL are based in the UK and are registered with the ICO as a Data Controller under prevailing data protection legislation. We have also aligned this policy with the EU GDPR and the UK Data Protection Act 2018.
BKL have completed Records of Processing Activity (ROPA) assessments (GDPR Article 30) and Data Protection Impact Assessments (DPIA) (GDPR Article 35) as required for all activities related to this website. Details are available upon request from us (see Contacting us below).
Our website is a secure SSL encrypted website.
Collecting, accessing and using your personal data
You may send us your personal information via this website if you’re seeking more information from us, requesting to use our services, registering for one of our events, or similar business purposes.
Your decision to disclose your personal data to us is entirely voluntary, and by doing so, you are confirming that you provide us with your specific consent to use your personal data only for the limited and specific purposes for which you have disclosed it to us.
We may access and use your personal data only for the purposes for which you have submitted it to us to:
(a) Provide information to you
(b) Contact you
(c) Provide services to you
(d) Maintain the operations and security of this website and related services which we provide to you
We will not use your personal information for any other purposes unless we have sought and obtained your specific consent to do so.
We will always handle and store your personal data in accordance with industry best practices aligned with ISO 27001, the international standard for information security. This includes the activities and procedures undertaken by BKL personnel and authorised third parties (see below) and the technical controls we have implemented to prevent unauthorised access, compromise, or theft of information from our records, applications, supporting computer systems, and premises.
How long do we keep your information?
We will hold your personal information on our systems only for as long as required to provide you with the services you have requested or to perform the purpose for which that data was collected.
Where you engage us to provide professional services, we are entitled to hold your personal data as part of our records after you cease to instruct us. We hold that data not only to satisfy various legal obligations which our profession is subject to, but also because we have a legitimate interest in keeping accurate records of the services which we have provided. However, we do not store your data indefinitely and we do not (without specific agreement) perform an archiving service for former clients. Accordingly, you can expect us to dispose of your data approximately seven years after you cease to instruct us.
If you use our website to browse our career opportunities, you’ll be taken to a separate portal. There, you’ll have to accept a separate Privacy Policy for BKL Employer Branding and Recruitment. Read it at https://careers.bkl.co.uk/privacy-policy
Where you have signed up to receive email marketing from us, we will retain your email address on file should you ever unsubscribe or opt out of receiving those emails from us. We will retain your email address in this way in order to ensure that we continue to honour and respect that opt-out request.
New Starter Checklist for employees of BKL’s payroll clients
If your employer is a BKL client, you may be asked to provide personal data via our website’s New Starter Checklist form, for the purposes of adding you to your employer’s payroll. On completing the form, your data is emailed directly to BKL’s Client Payroll team at their BKL email accounts. This data is also stored in the backend of our website and deleted after three months.
Sensitive personal data
Article 9 of GDPR specifies a set of personal data categories that are considered to be ‘sensitive’ and that require special consideration by data controllers. This website and any services available from this website do not knowingly collect or process any sensitive personal data.
Children’s personal data
This website and any services available from it are not directed to children under 13. If you learn that a child under 13 has provided us with personal information without parental consent, please contact our Data Protection Manager (see Contacting us below) so that we can take appropriate action.
Your rights
As prescribed within data protection legislation, you have rights connected to providing your personal data to us using this website. These include your rights to request that we:
- Confirm to you what personal data we may hold about you, if any, and for what purposes
- Change or withdraw any consent which you have provided in relation to your personal data (if that is the legal basis for us holding it)
- Correct any inaccurate or incomplete personal data we may be holding about you
- Provide you with a complete copy of your personal data for you to move elsewhere under specific circumstances
- Stop our processing of your personal data whilst a received data processing objection from you is being resolved
- Permanently erase all your personal data promptly, and confirm to you that it has done so (unless there is a valid reason why we are unable to do this)
To contact us to exercise your rights, please see Contacting us below.
If we do not address your data subject request, or we fail to provide you with a valid reason why it is unable to do so, you have the right to contact the ICO to make a complaint via https://ico.org.uk/make-a-complaint/ or by phoning 0303 123 1113.
Declaration of data sharing and subprocessing
For you to make an informed decision on whether to provide your personal data to us via this website, we need to make you aware of the details of third-party organisations that:
- Maintain a formal Data Sharing Agreement with us to use your personal data solely for the purposes of delivering services to you
- Act as data processors to us and which we use for specific activities related to the operation of our organisation and the provision of its services
A list of these organisations is available on this page.
The specific activities within which each of these organisations participates have been recorded within the applicable BKL ROPA and DPIA assessments. Details are available upon request from us (see Contacting us below).
Website cookies and automated collection of data
This website uses cookies to record log data. We use session-based and persistent cookies, depending on how you use or interact with this website. By using our website, you agree to our declared use of cookies below.
Cookies are small text files sent by us to your computer / mobile device, or from your computer / mobile device to us, each time you visit our website. They are unique to you or your web browser. Session-based cookies last only while your browser is open and are automatically deleted when you close your browser. Persistent cookies last until you or your browser delete them or until they expire.
We use cookies on our website help us collect information. This may also include third-party cookies which may collect Information about you via our website and across other websites.
have details of the privacy controls available to Google users, including those relating to websites that use Google Analytics and other Google services. There are also details of how Google uses information from sites or apps that use Google services.
External links
Hyperlinks from our website to external websites are provided in good faith. We accept no liability for the consequences of following those links.
Contacting us
If you have any questions about this policy, you would like to exercise any of your data subject statutory rights, or you wish to make a complaint, please contact [email protected].