Privacy policy

Who we are

Certified Crypto Accountant is a trading name of Zar Enterprises Ltd, a company registered in England and Wales under company number 17310916. Our registered office is 65 Dollis Hill Avenue, London NW2 6QU.

Zar Enterprises Ltd is the data controller for the information described here, which means we decide why and how it is used. We are registered with the Information Commissioner’s Office under reference ZC225094.

For anything in this policy, write to zar@certifiedcryptoaccountant.com or call 07887 336 453.

What this policy covers

This policy covers two different situations. The first is browsing certifiedcryptoaccountant.com, where we collect very little. The second is becoming a client, where we necessarily handle detailed financial records in order to reconcile your transactions and file your return.

We work with clients in the United Kingdom and we do not take on work in other jurisdictions.

What we collect

When you browse the site

If you accept analytics cookies, Google Analytics records which pages you visit, roughly where in the world you are and which site sent you to us. It does not tell us who you are. If you decline, that collection does not happen. Our web host also keeps standard server logs, including IP addresses, which are used to keep the site running and to investigate abuse.

When you get in touch

Contacting us by email, by phone or through a form on the site means we hold whatever you choose to send. That is usually your name, your email address, sometimes a phone number, and whatever you tell us about your situation.

When you book a call

Calls are booked through Calendly, which collects your name, email address, the time you picked and anything you write in the booking notes.

When you become a client

Preparing a crypto tax return means handling considerably more. Depending on the engagement that can include

• proof of identity and address, which we are required by law to obtain and keep
• your Unique Taxpayer Reference or equivalent tax identification number
• exchange account statements, API exports and CSV files
• public wallet addresses and on chain transaction history
• reports produced by crypto tax software, and the corrections we make to them
• bank statements and other records where they are needed to evidence a transaction
• previous tax returns and correspondence with HMRC

Why we use it

Data protection law requires us to have a lawful basis for everything we do with your information. Ours are set out below.

We do not use your information to make automated decisions about you, and we do not sell it to anyone.

Who we share it with

We share information only where it is needed to do the work or where the law requires it. The regular recipients are

• HMRC, when filing on your behalf
• our web host, which stores the website and its server logs
• Google, for website analytics and for our business email
• Calendly, for scheduling calls
• CookieYes, which records your cookie choice
• crypto tax reconciliation software, where an engagement needs it and you have agreed to its use
• our professional advisers and insurers, where we genuinely need their input

Each of these acts on our instructions under a contract, other than HMRC, which receives filings in its own right. We may also disclose information if we are legally compelled to, including under anti money laundering law, and in some of those cases we are not permitted to tell you that we have done so.

Where your information is held

Some of the providers above are based outside the United Kingdom, mainly in the United States. Where information is transferred out of the UK we rely on the safeguards UK law recognises for that purpose, which are either an adequacy decision covering the receiving country or standard contractual terms such as the International Data Transfer Agreement. You can ask us which applies to a particular provider.

How long we keep it

Once a retention period ends we delete the information or remove anything that identifies you.

How we protect it

Access is limited to the people who need it to do the work. Documents are held in access controlled business accounts rather than on personal devices, connections to this site and to the systems we use are encrypted, and accounts are protected by two factor authentication where the provider supports it.

No system is perfect. If a breach ever affects your information and creates a real risk to you, we will tell you and report it to the Information Commissioner’s Office within the time the law allows.

Your rights

Under UK data protection law you can ask us to do any of the following.

• Give you a copy of the information we hold about you
• Correct anything that is wrong or incomplete
• Delete information, where we are not required to keep it
• Restrict what we do with it while a question about it is resolved
• Send a copy to you or another provider in a portable format
• Stop using it where we rely on legitimate interests
• Withdraw consent you previously gave, which does not affect anything done before you withdrew it

Write to zar@certifiedcryptoaccountant.com and we will respond within one month. There is no charge. Note that tax and anti money laundering law obliges us to keep certain records even if you ask us to delete them, and where that applies we will explain which records and why.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we get the chance to put it right.

Cookies

This site uses a small number of cookies, and the analytics ones only run if you agree to them. The full list, what each one does and how to change your mind is set out in our cookie policy.

Changes to this policy

When we change this policy we update the date at the top of the page. If a change materially affects how we handle information belonging to current clients, we will tell them directly rather than relying on them to check.