Privacy Policy
This policy explains how Tally Stay Ltd ("Tally Stay", "we", "us") collects and uses personal data when you visit tallystay.com, use our SA Analyser, subscribe to our newsletter or contact us. We are committed to handling your data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).
1. Who we are
The data controller is Tally Stay Ltd, a company registered in England & Wales (company number 17354433), whose registered office is Suite A, 82 James Carter Road, Mildenhall, United Kingdom, IP28 7DE.
For any privacy question or request, email [email protected].
2. The data we collect
| When | What we collect | Why | Lawful basis |
|---|---|---|---|
| You book a discovery call | Name, email, phone number, the time you choose and anything you write in the booking form | To arrange and hold the call and respond to your enquiry | Steps prior to entering a contract; legitimate interests |
| You email or WhatsApp us | Your name, contact details and message content | To reply to you and provide information about our services | Legitimate interests; steps prior to a contract |
| You download an SA Analyser report | Name and email (the figures you enter stay in your browser and are only used to build your PDF) | To provide the report, follow up on your analysis and send occasional SA bookkeeping tips; stored in the same Google Sheet as our newsletter | Legitimate interests (follow-up about the report you requested); consent for the mailing list, which you can withdraw by unsubscribing at any time |
| You subscribe to the newsletter | Email address and the date you subscribed | To send our newsletter | Consent (you can unsubscribe at any time) |
| You become a client | Contact, identity and business details, and financial records you share with us | To deliver bookkeeping, accounting and compliance services and meet anti-money-laundering obligations | Contract; legal obligation |
| You browse the site (only with consent) | Anonymous, aggregated usage statistics such as pages viewed, referrer, device type and country | To understand how the site is used and improve it | Consent |
We do not sell your personal data, and we do not use it for automated decision-making or profiling that has legal or similarly significant effects.
3. Who we share it with
We use trusted service providers who process data on our behalf, under contracts that require them to protect it:
- Google (Google Workspace, Google Calendar appointment booking and Google Sheets): email, scheduling, and storage of newsletter and enquiry records.
- Cloudflare: website hosting, security and, with your consent, privacy-friendly web analytics.
- WhatsApp / Meta: if you choose to contact us on WhatsApp.
- Accounting software (for example Xero or QuickBooks) and professional advisers, for clients only, where needed to deliver our services.
We may also disclose data where required by law, for example to HMRC or a regulator, or to protect our legal rights.
4. International transfers
Some of our providers (such as Google, Cloudflare and Meta) may process data outside the UK, including in the United States. Where this happens, we rely on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the International Data Transfer Addendum to the EU Standard Contractual Clauses, so that your data stays protected.
5. How long we keep it
- Enquiries and SA Analyser leads that do not lead to an engagement: up to 24 months after our last contact.
- Newsletter subscribers: until you unsubscribe, after which we keep a minimal suppression record so we don't email you again.
- Client records: for 6 years after the end of the financial year to which they relate, to meet legal and tax obligations.
- Analytics data: aggregated, and kept by Cloudflare in line with its own retention periods.
6. Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to our processing, including objecting to direct marketing at any time;
- data portability, where processing is based on consent or contract; and
- withdraw consent at any time, without affecting processing carried out before you withdrew it.
To exercise any of these rights, email [email protected]. We will respond within one month.
7. Cookies
We only load our analytics if you agree to it. The Google Calendar booking widget on our homepage is provided by Google, which may set its own cookies when it loads. See our Cookie Policy for details, or .
8. Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls and reputable, security-certified providers.
9. Complaints
If you have concerns about how we handle your data, please contact us first so we can try to resolve them. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.
10. Changes to this policy
We may update this policy from time to time. The "Last updated" date above shows when it was last revised.