Estimate
Privacy and cookies

What we do with what you give us.

Plain English, because you shouldn't need a lawyer to understand your accountant either. This page covers the website only. Clients' data is covered by the engagement letter you sign with us.

Last updated 17 September 2026Echo Accountants Ltd, company number 12742973Draft for review

Who we are

Echo Accountants Ltd is the data controller for this website. We are a company registered in England and Wales, number 12742973, with our registered office at 4 Longwalk, Stockley Park, Uxbridge UB11 1FE. We are registered with the Information Commissioner's Office (ICO registration number to be confirmed on this page before launch).

This page explains what happens to the personal information you give us through echoaccountants.co.uk. It does not cover other websites we link to, including WhatsApp, Google Maps, LinkedIn and Instagram, which have their own privacy notices.

What we collect

We only collect what you choose to give us, plus the small amount of technical information any website needs to work.

WhenWhat
You use the instant estimateYour answers about your business (for example turnover band, transaction volume, whether VAT or payroll applies), your name, your email address and, if you give it, your phone number.
You send a message from the contact pageYour name, email address, phone number if you give it, what the message is about and the message itself.
You download a factsheet or guideYour first name and email address, and which sheet or guide you asked for.
You take the director health checkYour answers to the seven questions, your first name and email address and the one-line challenge if you write one. The result we show you is stored with them.
You ask to hear about the podcastYour email address.
You fill in the pre-discovery formYour name, email address, phone number if you give it, your company and role and your answers about the business: how it is set up, what it does, how long it has traded, turnover band, VAT, software, transaction volume, what you need help with and your goals.
You use Ask Echo, the site assistantYour questions, its answers, the page you were on and a hashed IP address. The conversation is anonymous unless you choose Talk to a person, when your name, email address and business are added. Please do not type bank details, tax references or other sensitive information into the chat.
You email, call or WhatsApp usWhat you send us, and the number or address you send it from.
You visit any pageOur hosting provider records standard server logs: your IP address, browser type, the pages requested and the time. We use these only to keep the site running and secure.
You send any formAlongside what you typed we keep the page you sent it from, the page that brought you there if your browser tells us, your browser type and a scrambled (hashed) version of your IP address that cannot be turned back into the address. These help us spot abuse of the forms.

We do not ask for, and please do not send through the website, anything more sensitive than that. Bank details, tax references, identity documents and similar belong in the secure systems we set up with you once you are a client.

Why we use it, and on what basis

  • To reply to you. If you ask for an estimate, send a message, book a call or request a factsheet, we use your details to do exactly that. The legal basis is that you have asked us to (contract, or the steps before one).
  • To follow up once. After an estimate or a download, a member of the team may email or call you once to ask whether it was useful and whether you would like to talk. The legal basis is our legitimate interest in following up an enquiry you started. You can tell us to stop at any time and we will.
  • To send you updates you have asked for. If you tick a box asking for the updated version of a factsheet when the rules change, or for the occasional practical tip after the health check, or to hear when the podcast launches, we send it. That is consent, and you can withdraw it with one reply.
  • To run the site. Server logs and security monitoring, on the basis of our legitimate interest in keeping the site working and safe.

We do not sell your information, we do not add you to a newsletter you did not ask for and we do not pass your details to anyone so they can market to you.

Who we share it with

Nobody, except the suppliers we need to run the website and reply to you, and only for that purpose:

  • Hosting. The website is hosted by Vercel Inc., which processes server logs on our behalf.
  • Email. The copy we send you, and the alert to our team, go out from our own Google Workspace mailbox. Replies land there too.
  • Enquiry records. Every form submission is stored in our lead management system so nothing is missed and so we can see what we have already said to you. Its database is run for us by Supabase, Inc. in its London (United Kingdom) region. Only the Echo team can sign in to it.
  • Site assistant. Ask Echo conversations are stored in the same lead management system. If we switch on the AI model behind Ask Echo, your questions are also sent through OpenRouter, Inc. to the model provider so it can write the answer. Some providers keep prompts for a period under their own terms, which is why we ask you not to type sensitive information into the chat.
  • Fonts. The site loads its typefaces from Google Fonts. When they load, your browser sends your IP address to Google. See the cookies section.
  • Maps. The map on the contact page is an image on our own site, made from OpenStreetMap data. Google Maps opens only if you click through to it.
  • WhatsApp. Only if you choose to message us on WhatsApp, in which case Meta's terms apply to that conversation.

Some of these suppliers store data outside the UK. Where they do, the transfer is covered by the UK's adequacy regulations or by standard contractual clauses, and we choose suppliers who hold recognised security certifications.

We will also disclose information if the law requires us to, for example to HMRC, a regulator or a court.

How long we keep it

  • Enquiries, estimates and messages. For as long as we need them to deal with your enquiry and any follow-up. If you do not become a client, we delete them once the enquiry is closed.
  • Ask Echo conversations. Up to twelve months, so we can improve the answers, then deleted automatically. A conversation you hand to the team is kept with your enquiry.
  • Factsheet and guide requests. Until you ask us to stop sending updates, or until we stop publishing the sheet.
  • Server logs. Kept by our hosting provider for a short rolling period, then deleted automatically.
  • Clients. Once you become a client, your information is kept under the retention periods in your engagement letter, which reflect our professional and legal obligations.

How we keep it safe

The website is served over HTTPS. Form submissions are checked and stored by a server function, not by the page you see, and go into our lead management system and our mailboxes, both protected by two-factor authentication and access controls. The website itself keeps nothing. We work through Xero and secure, access-controlled systems rather than loose email attachments, and everyone at Echo is bound by professional obligations of confidentiality.

No system is perfectly secure. If we ever became aware of a breach affecting your information we would tell you and, where required, the ICO.

Your rights

Under UK data protection law you can ask us to:

  • tell you what information we hold about you and give you a copy;
  • correct anything that is wrong;
  • delete it, where we have no continuing reason to keep it;
  • stop using it for a particular purpose, or restrict what we do with it;
  • give it to you, or another provider, in a usable format;
  • stop any marketing, which we will do straight away.

Email info@echoaccountants.co.uk with what you would like and we will respond within one month. We may ask you to confirm who you are first. There is no charge.

Cookies

This website sets no cookies of its own. There is no advertising tracking, no session recording and no cookie banner, because there is nothing to consent to.

Google Fonts, which supplies the typefaces on every page, is the one outside service that loads with the site. Google's own privacy notice covers it. The contact page map is a plain image, so nothing from Google Maps loads unless you click through to it.

If we add analytics later so we can see which pages are useful, we will use a privacy-respecting tool, update this page first and ask for your consent before anything non-essential is set.

Changes to this page

We update this page when our suppliers or practices change. The date at the top tells you when. The version on the site at the time of your visit is the one that applies.

Questions and complaints

Questions about this page, or about anything we hold on you, go to info@echoaccountants.co.uk, or in writing to Echo Accountants Ltd, 4 Longwalk, Stockley Park, Uxbridge UB11 1FE, or by phone on 020 8087 3107.

If you are not happy with how we have handled your information, you have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather hear from you first so we can put it right.

The law of England and Wales applies to this page.