“We,” “Us,” and “Our” refer to Evanshaw Ltd, located at Suite 105, Highfield House, Cheadle Royal Business Park, Cheadle, England, SK8 3GY.
Company Number: 14799332 | HMRC Agent Services Ref: FARN0054948 | PAYE Agent Ref: IA6537 | Self-Assessment Agent Ref: 3004NQ
For the purpose of the Data Protection Legislation and this notice, we are the ‘data controller’; we are responsible for deciding how we hold and use personal data about you. We are required under the Data Protection Legislation to notify you of the information contained in this privacy notice.
Our Data Protection Officer is our point of contact and will be responsible for enquiries in relation to this privacy notice or our treatment of your personal data. Should you require any information regarding how we collect and process your data or have any privacy related, you can do so using the contact details listed at section 17 – Contact us below.
This notice describes how we collect and use personal data about you, in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018 and any other national implementing laws, regulations and secondary legislation, as amended or updated from time to time, in the UK (‘Data Protection Legislation’).
This includes our services in relation to claims under the Home Responsibilities Protection (HRP) scheme.
This notice applies to the information that we obtain or when you otherwise interact with our services.
Please read the following carefully to understand our practices regarding your personal data and how we will treat it.
We obtain personal data about you, for example, when:
The information we collect and process about you may include the following:
We may process your personal data for purposes necessary for the performance of our contract with you (for example to process your tax refund claim or tax return) and to comply with our legal obligations.
This includes acting as your authorised agent with HMRC and/or DWP in relation to HRP claims and receiving any resulting refunds on your behalf as nominee.
We may contact you by phone, SMS, or email for purposes related to the administration and verification of your HRP claim.
We may process your personal data for the purposes of our own legitimate interests provided that those interests do not override any of your own interests, rights and freedoms which require the protection of personal data. This includes processing for business development, statistical and management purposes.
We may process your personal data for certain additional purposes with your consent. For example, we will only share your data with third-party companies for marketing purposes where we have obtained your consent to do so. Electronic marketing is also governed by PECR. We will only send email/SMS marketing where permitted (e.g., valid consent or soft-opt-in), and every message includes a clear opt-out.
Please note that we may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data.
We may use your personal data in order to:
This includes processing personal data related to the calculation of success fees, handling refunds received from HMRC or DWP, and making disbursements to your nominated bank account.
In some circumstances we may anonymise or pseudonymise the personal data so that it can no longer be associated with you, in which case we may use it without further notice to you.
If you refuse to provide us with certain information when requested, we may not be able to perform the contract we have entered into with you. Alternatively, we may be unable to comply with our legal or regulatory obligations.
We may also process your personal data without your knowledge or consent, in accordance with this notice, where we are legally required or permitted to do so.
We may share your data with Tyler Hampshire Ltd (Company No. 14739509), 24 Greek Street, Stockport, SK3 8AB.
Tyler Hampshire Ltd may contact you by email, SMS, or telephone about relevant tax or financial services under their trading name Tyler Media, authorised by Riteway Claims Ltd (FRN: 941650).
Tyler Hampshire Ltd acts as our marketing partner and may act as joint controller for profiling purposes only.
They send communications on our behalf where lawful. We do not sell your personal data.
Any electronic marketing they send will comply with PECR and rely on consent or soft-opt-in as appropriate, with a clear unsubscribe option in every message.
You can opt out at any time by contacting info@tylerhampshire.uk or using the unsubscribe options.
See their full privacy policy at: https://tylerhampshire.uk/privacy-policy
We will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected.
For HRP claims, this may be until the claim is fully resolved and any refund disbursed, or until your agreement with us is terminated.
When assessing what retention period is appropriate for your personal data, we take into consideration:
Where we need to use your personal data for similar or new purposes such as providing you with financial money savings offers or tips from other companies, other than for the purpose for which we collected it, we will notify you and communicate the legal basis which allows us to do so before starting any new processing.
We will share your personal data with third parties where we are required by law, where it is necessary to administer the relationship between us or where we have another legitimate interest in doing so.
“Third parties” includes third-party service providers.
The following activities are carried out by third-party service providers: IT and cloud services, professional advisory services, administration services, marketing services, postal services and banking services.
All of our third-party service providers are required to take commercially reasonable and appropriate security measures to protect your personal data.
We only permit our third-party service providers to process your personal data for specified purposes and in accordance with our instructions.
We may share your personal data with other third parties, for example in the context of the possible sale or restructuring of the business.
We may also need to share your personal data with a regulator or to otherwise comply with the law.
We will share your personal data with HMRC and/or the DWP for the purpose of submitting and managing your HRP claim, and to receive payments on your behalf under the terms of your Letter of Authority and Conditional Fee Agreement.
We may also share identity documents or AML verification data with HMRC or other relevant authorities where legally required to comply with fraud prevention or money laundering regulations.
In limited circumstances, where HMRC withdraws or removes our authority to act on your behalf, Evanshaw Ltd may transfer your claim to an alternative HMRC-registered agent to ensure continuity of service.
Our designated alternative agent is:
If such a transfer occurs, Arkay Accountancy Services Ltd will act under the same terms as your Conditional Fee Agreement (CFA) and Letter of Authority (LOA).
You will be notified of the transfer, and you will be asked to sign any replacement CFA, LOA, and HMRC Form 64-8 to enable Arkay Accountancy Services Ltd to act on your behalf.
In line with our terms and conditions, we will share your data with Tyler Hampshire Ltd to provide you with money saving tips, benefits and offers from third party companies, including but not limited to:
Tyler Hampshire Ltd acts as a joint data controller for marketing profiling purposes only.
You can view their privacy policy at Privacy Policy - Marketing Partners
Tyler Hampshire Ltd may contact you by email, telephone, or SMS, where lawful to do so, to provide you with relevant offers or benefits based on your profile.
You may opt out of such communications at any time.
This data sharing is conducted under either your consent or our legitimate interest in offering relevant financial services, in accordance with GDPR Article 6(1)(a) or (f).
The types of personal data that may be shared with Tyler Hampshire Ltd for joint marketing and profiling purposes may include demographic information, tax profile, preferences, and other relevant details.
Tyler Hampshire Ltd will not share your details with these third-party companies.
The third-party companies will only have your personal data only when you signed up or register for their products.
If we transfer personal data outside the UK, we will use a valid transfer mechanism under the UK GDPR, such as UK adequacy regulations, the ICO International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, and we will complete a transfer risk assessment where required.
We have put in place commercially reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.
They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
We may be required to use your data due to a legal requirement which is placed upon us; this includes our regulatory requirements such as financial record keeping, staff training and monitoring, in addition to complaint handling.
We will always inform you if this is the case.
We rely on one or more of the following lawful bases under Article 6 UK GDPR:
We do not intentionally collect special category data. If such data is provided and strictly necessary, we will only process it with your explicit consent or another applicable UK GDPR condition.
It is important that the personal data we hold about you is accurate and current.
Should your personal information change, please notify us of any changes of which we need to be made aware by contacting us, using the contact details below.
Under certain circumstances, by law you have the right to:
To exercise these rights, contact dpo@evanshaw.co.uk.
Where we rely on your consent to process your data (e.g., for direct marketing), you may withdraw that consent at any time by emailing dpo@evanshaw.co.uk.
Once we receive your withdrawal, we will stop processing your data for that purpose, unless we have another lawful basis to do so.
Evanshaw uses cookies to improve your online experience. These may include:
You can manage cookie preferences in your browser.
See All About Cookies or our Cookie Policy for more info.
Please note that we do not control tracking technologies used by third parties such as Facebook, Google, or Microsoft.
These third parties may collect and process personal data according to their own privacy policies.
We recommend reviewing their respective privacy notices for more information.
To make a complaint, contact:
Data Protection Officer
Evanshaw Ltd
Suite 105, Highfield House, Cheadle Royal Business Park, Cheadle, England, SK8 3GY
Email: dpo@evanshaw.co.uk
If you remain dissatisfied, you may contact the Information Commissioner’s Office (ICO) at ico.org.uk or call 0303 123 1113.
Any changes we may make to our privacy notice in the future will be located at: https://www.evanshaw.co.uk/privacypolicy.html
If you have any questions regarding this notice or how we handle your data, please contact us at: dpo@evanshaw.co.uk
