Our engagement letter, the schedules of services and our standard terms and conditions of business are governed by and should be construed in accordance with English law. Each party agrees that the courts of England will have exclusive jurisdiction in relation to any claim, dispute or difference concerning this engagement letter and any matter arising from it on any basis. Each party irrevocably waives any right to object to any action being brought in those courts, to claim that the action has been brought in an inappropriate forum, or to claim that those courts do not have jurisdiction.

We will not accept responsibility if you act on advice previously given by us without first confirming with us that the advice is still valid in light of any change in the law or in your circumstances. We will accept no liability for losses arising from changes in the law, or the interpretation thereof, that occur after the date on which the advice is given.

As with other professional services firms, we are required to identify our clients for the purposes of the UK anti-money laundering legislation. We may request from you, and retain, such information and documentation as we require for these purposes and/or make searches of appropriate databases. If we are not able to obtain satisfactory evidence of your identity, we will not be able to proceed with the engagement.

If you undertake business that requires you to be supervised by an appropriate supervisory authority to follow anti-money laundering regulations including if you accept or make a high value cash payments of €10,000 or more (or equivalent in any currency) in exchange for goods you should inform us.

Any personal data received from you to comply with our obligations under The Money Laundering, Terrorist Financing and Transfer for Funds (Information on the Payer) Regulations 2017 as amended by the 2022 regulations (MLR 2017) will be processed only for the purposes of preventing money laundering or terrorist financing. No other use will be made of this personal data unless use of the data is permitted by or under enactment other than the MLR 2017, or we have obtained the consent of the data subject to the proposed use of the data.

Unless we are authorised by you to disclose information on your behalf, we confirm that if you give us confidential information we will, at all times during and after this engagement, keep it confidential, except as required by law or as provided for in regulatory, ethical or other professional pronouncements applicable to us or our engagement.

You agree that, if we act for other clients who are or who become your competitors, to comply with our duty of confidentiality it will be sufficient for us to take such steps as we think appropriate to preserve the confidentiality of information given to us by you, both during and after this engagement. These may include taking the same or similar steps as we take in respect of the confidentiality of our own information.

In addition, if we act for other clients whose interests are or may be adverse to yours, we will manage the conflict by implementing additional safeguards to preserve confidentiality. Safeguards may include measures such as separate teams, physical separation of teams, and separate arrangements for storage of, and access to, information.

You agree that the effective implementation of such steps or safeguards as described above will provide adequate measures to avoid any real risk of confidentiality being impaired.

We may, on occasion, subcontract work on your affairs to other tax or accounting professionals. The subcontractors will be bound by our client confidentiality terms.

We will inform you of the proposed use of a subcontractor before they commence work, except where your data will not be transferred out of our systems and the subcontractor is bound by confidentiality terms equivalent to an employee.

If we use external or cloud-based systems, we will ensure confidentiality of your information is maintained.

This applies in addition to our obligations on data protection in section 5.

We will inform you if we become aware of any conflict of interest in our relationship with you or in our relationship with you and another client, unless we are unable to do so because of our confidentiality obligations. We have safeguards that can be implemented to protect the interests of different clients if a conflict arises. If conflicts are identified which cannot be managed in a way that protects your interests, we regret that we will be unable to provide further services.

If there is a conflict of interest that is capable of being addressed successfully by the adoption of suitable safeguards to protect your interests, we will adopt those safeguards. In resolving the conflict, we would be guided by ICAEW’s Code of Ethics, which can be viewed at icaew.com/en/membership/regulations-standards-and-guidance/ethics. During and after our engagement, you agree that we reserve the right to act for other clients whose interests are or may compete with, or be adverse to, yours subject, of course, to our obligations of confidentiality and the safeguards set out in the paragraph on confidentiality above.

In this clause [5], the following definitions shall apply:
‘client personal data‘ means any personal data provided to us by you, or on your behalf, for the purpose of providing our services to you, pursuant to our engagement letter with you;
‘data protection legislation‘ means all applicable privacy and data protection legislation and regulations including PECR, the UK GDPR and any other applicable national laws, regulations and secondary legislation in the UK relating to the processing of personal data and the privacy of electronic communications, as amended, replaced or updated from time to time;
‘controller‘, ‘data subject‘, ‘personal data‘, and ‘process‘ shall have the meanings given to them in the data protection legislation;
‘UK GDPR‘ means the Data Protection Act 2018 as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020; and
‘PECR‘ means the Privacy and Electronic Communications (EC Directive) Regulations 2003 (SI 2426/2003) as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020.

We shall each be considered an independent data controller in relation to the client personal data. Each of us will comply with all requirements and obligations applicable to us under the data protection legislation in respect of the client personal data.

You shall only disclose client personal data to us where:

a) you have provided the necessary information to the relevant data subjects regarding its use (and you may use or refer to our privacy notice available at www.multiplyaccountancy.co.uk/terms-of-business-and-privacy-notice for this purpose);

b) you have a lawful basis upon which to do so, which, in the absence of any other lawful basis, shall be with the relevant data subject’s consent; and

c) you have complied with the necessary requirements under the data protection legislation to enable you to do so.

Should you require any further details regarding our treatment of personal data, please contact our Head of Privacy.

We shall only process the client personal data:

a) in order to provide our services to you and perform any other obligations in accordance with our engagement with you;

b) in order to comply with our legal or regulatory obligations; and

c) where it is necessary for the purposes of our legitimate interests and those interests are not overridden by the data subjects’ own privacy rights. Our privacy notice (available at www.multiplyaccountancy.co.uk/terms-of-business-and-privacy-notice) contains further details as to how we may process client personal data.

For the purpose of providing our services to you, we may disclose the client personal data our regulatory bodies or other third parties (for example, our professional advisers or service providers). The third parties to whom we disclose such personal data may be located outside of the United Kingdom. We will only disclose client personal data to a third party (including a third party outside of the UK) provided that the transfer is undertaken in compliance with the data protection legislation.

We shall maintain commercially reasonable and appropriate security measures, including administrative, physical and technical safeguards, to protect against unauthorised or unlawful processing of the client personal data and against accidental loss or destruction of, or damage to, the client personal data.

In respect of the client personal data, provided that we are legally permitted to do so, we shall promptly notify you in the event that:

a) we receive a request, from or on behalf of a relevant data subject, to exercise their data subject rights under the data protection legislation or a complaint or any adverse correspondence in respect of our processing of their personal data;

b) we are served with an information, enforcement or assessment notice (or any similar notices), or receive any other material communication in respect of our processing of the client personal data from the Information Commissioner’s Office or any other supervisory authority); or

c) we reasonably believe that there has been any incident which resulted in the accidental or unauthorised access to, or destruction, loss, unauthorised disclosure or alteration of, the client personal data.

Upon the reasonable request of the other, we shall each co-operate with the other and take such reasonable commercial steps or provide such information as is necessary to enable each of us to comply with the data protection legislation in respect of the services provided to you in accordance with our engagement letter with you in relation to those services.

If we resign, or are asked to resign, we will normally issue a disengagement letter to ensure that our respective responsibilities are clear. If we have no contact with you for a period of 6 months or more, we may issue to your last known address a disengagement letter and thereafter cease to act.

Unless you instruct us otherwise, we may, if appropriate, communicate with you and with third parties by email or other electronic means. The recipient is responsible for virus checking emails and any attachments.

With electronic communication, there is a risk of non-receipt, delayed receipt, inadvertent misdirection or interception by third parties. We use virus-scanning software to reduce the risk of viruses and similar damaging items being transmitted in emails or by electronic storage devices. Nevertheless, electronic communication is not totally secure and we cannot be held responsible for damage or loss caused by viruses or for communications which are corrupted or altered after despatch. Nor can we accept any liability for problems or accidental errors relating to this means of communication, especially in relation to commercially sensitive material. These are risks you must bear in return for greater efficiency and lower costs. If you do not wish to accept these risks, please let us know and we will communicate by paper mail, other than when electronic submission is mandatory.

Any communication by us with you sent through the postal system is deemed to arrive at your postal address two working days after the day the document was sent.

Our fees may depend, not only upon the time spent on your affairs, but also on the level of skill and responsibility and the importance and value of the advice we provide, as well as the level of risk.

If we provide you with an estimate of our fees for any specific work, the estimate will not be contractually binding unless we explicitly state that will be the case. Otherwise, our fees will be calculated on the basis of the hours worked by each member of staff necessarily engaged on your affairs, multiplied by their charge-out rate per hour, VAT being charged thereon. Indicative hourly charge-out rates are: Partner up to £250; Manager £100; Accountant £80; Bookkeeper £60. We reserve the right to change our hourly fees and will communicate any updates via email at least 30 days prior to changes taking effect.

If requested, we may indicate a fixed fee for the provision of specific services or an indicative range of fees for a particular assignment. It is not our practice to identify fixed fees for more than a year ahead as such fee quotes need to be reviewed in the light of events. If it becomes apparent to us, due to unforeseen circumstances, that a fee quote is inadequate, we reserve the right to notify you of a revised figure or range and to seek your agreement thereto.

In some cases, you may be entitled to assistance with your professional fees, particularly in relation to any investigation into your tax affairs by HMRC. Assistance may be provided through insurance policies you hold or via membership of a professional or trade body. Other than where such insurance was arranged through us, you will need to advise us of any such insurance cover you have. You will remain liable for our fees regardless of whether all or part are liable to be paid by your insurers.

We will bill recurring fees monthly and our invoices will be due for payment within 14 days of issue. Annually-billed and one-off fees are invoiced on completion of the relevant work and are payable within 14 days of the invoice date. Our fees are exclusive of VAT which will be added where it is chargeable. Any disbursements we incur on your behalf, and expenses incurred in the course of carrying out our work for you, will be added to our invoices where appropriate.

Unless otherwise agreed to the contrary, our fees do not include the costs of any third party, counsel or other professional fees. If these costs are incurred to fulfil our engagement, such necessary additional charges may be payable by you.

It is our normal practice to ask clients to pay by monthly direct debit and periodically to adjust the monthly payment by reference to actual billings.

We reserve the right to charge interest on late paid invoices at the rate of 8% above bank base rates under the Late Payment of Commercial Debts (Interest) Act 1998. We also reserve the right to suspend our services or to cease to act for you, having given written notice, if payment of any fees is unduly delayed. We intend to exercise these rights only if it is fair and reasonable to do so.

If you do not accept that an invoiced fee is fair and reasonable, you must notify us within 21 days of receipt, failing which, you will be deemed to have accepted that payment is due.

If a client company, trust or other entity is unable or unwilling to settle our fees, we reserve the right to seek payment from the individual (or parent company) giving us instructions on behalf of the client, and we shall be entitled to enforce any sums due against the group company or individual nominated to act for you.

We are committed to providing you with a high-quality service that is both efficient and effective. If, at any point you would like to discuss with us how our service to you could be improved, or if you are dissatisfied with the service you are receiving, please let us know by contacting any one of the principals at info@multiply.team.

We will consider carefully any complaint you may make about our service as soon as we receive it and do all we can to explain the position to you. We will acknowledge your letter within five business days of its receipt and endeavour to deal with your complaint within eight weeks.

Please note that we accept no liability for delays in the provision of our services where such delays are as a result of HMRC services and access issues.

If we do not answer your complaint to your satisfaction, you may, of course, take up the matter with our professional body, ICAEW.

We will retain all intellectual property rights in any document prepared by us during the course of carrying out the engagement except where the law specifically states otherwise.

You are not permitted to use our name in any statement or document you may issue unless our prior written consent has been obtained. The only exception to this restriction would be statements or documents that, in accordance with applicable law, are to be made public.

If any provision of our engagement letter or terms of business is held to be void, that provision will be deemed not to form part of this contract. In the event of any conflict between these terms of business and the engagement letter or appendices, the relevant provision in the engagement letter or schedules will take precedence.

If we become aware of a dispute between the parties who own the business or who are in some way involved in its ownership and management, it should be noted that our client is the business and we would not provide information or services to one party without the express knowledge and permission of all parties. Unless otherwise agreed by all parties, we will continue to supply information to the normal place of business for the attention of the directors. If conflicting advice, information or instructions are received from different directors in the business, we will refer the matter back to the board of directors and take no further action until the board has agreed the action to be taken.

Insofar as we are permitted to so by law or by professional guidelines, we reserve the right to exercise a lien over all funds, documents and records in our possession relating to all engagements for you until all outstanding fees and disbursements are paid in full.

We will provide our services with reasonable care and skill. Our liability to you is limited to losses, damages, costs and expenses directly caused by our breach of contract, negligence, fraud or wilful default.

We will not be liable if such losses are caused by the acts or omissions of any other person or due to the provision to us of incomplete, misleading or false information, or if they are caused by a failure to act on our advice or a failure to provide us with relevant information.

Where we refer you to another firm whom you engage with directly, we accept no responsibility in relation to their work and will not be liable for any loss caused by them.

We will not be liable to you for any delay or failure to perform our obligations under the engagement letter if the delay or failure is caused by circumstances outside our reasonable control.

We will not be responsible or liable for any loss, damage or expense incurred or sustained if information material to the service we are providing is withheld or concealed from us or misrepresented to us. This applies equally to fraudulent acts, misrepresentation or wilful default on the part of any party to the transaction and their directors, officers, employees, agents or advisors unless that misrepresentation, fraud or wilful default should have been evident to us without further enquiry.

If you, or any party on your behalf, fails to provide information to us by the deadlines requested by us, or does not provide us with full and accurate information by those deadlines, we shall not be responsible for any losses arising as a result of any subsequent failure by us to meet any filing or other dates on your behalf, for example, completion of your accounts, even if the information is provided by you prior to such filing dates.

We shall not be liable for any losses arising if the advice we provide to you is used by you (or any other party we have agreed may rely on our advice) for any purpose other than that for which the advice is specifically agreed to be provided by us.

By engaging with us, you agree that any claim arising from this agreement will only be brought against us and not against any of our principals, partners, directors, members, employees, subcontractors, consultants or agents (or former principals, partners, directors).

The advice and information we provide to you as part of our services is for your sole use and not for any third party to whom you may communicate it unless we have expressly agreed in the engagement letter that a specified third party may rely on our work. We accept no responsibility to third parties, including any group company to whom the engagement letter is not addressed, for any advice, information or material produced as part of our work for you that you make available to them.

A party to this agreement is the only person who has the right to enforce any of its terms and no rights or benefits are conferred on any third party under the Contracts (Rights of Third Parties) Act 1999.

You agree to indemnify us (and any persons to whom we have subcontracted work on your behalf) in full in the event that any claim is brought against us (including any claim for negligence) for any loss arising to us as a result of any unauthorised disclosure by you of our advice or work provided to you under this agreement whether in writing or otherwise, or for any disclosure of such work with the removal by you or by any party to whom you have disclosed such work of any disclaimer that we have included within the work (for example, but not limited to, any disclaimer relating to the non-reliance to be placed upon such work as referred to in clause 18).

This indemnity will extend to the cost of investigating and defending any such claim, including payment of our fees at our usual hourly rates for any time that we spend for so doing, as well as any costs (including legal costs) at the full indemnity rate.

Unless otherwise agreed in our engagement letter, our work will begin when we receive implicit or explicit acceptance of that letter. Except as stated in that letter, we will not be responsible for periods before that date.

Each of us may terminate our agreement by giving not less than 21 days’ notice in writing to the other party except if you fail to cooperate with us or we have reason to believe that you have provided us or HMRC with misleading information, in which case we may terminate this agreement immediately. Termination will be without prejudice to any rights that may have accrued to either of us before termination.

We reserve the right to terminate the engagement between us with immediate effect in the event of: your insolvency, bankruptcy or other arrangement being reached with creditors; an independence issue or change in the law which means we can no longer act; failure to pay our fees by the due dates; or either party being in breach of their obligations if this is not corrected within 30 days of being asked to do so.

In the event of termination of our contract, we will endeavour to agree with you the arrangements for the completion of work in progress at that time, unless we are required for legal or regulatory reasons to cease work immediately. In that event, we will not be required to carry out further work and shall not be responsible or liable for any consequences arising from termination.

We will observe and act in accordance with the Bye-laws, regulations and Code of Ethics of ICAEW including Professional Conduct in Relation to Taxation and will accept instructions to act for you on this basis. In particular, you give us the authority to correct errors made by HMRC if we become aware of them. We will not be liable for any loss, damage or cost arising from our compliance with statutory or regulatory obligations. The requirements are available online at https://www.icaew.com/regulation

As part of our ongoing commitment to provide a quality service, our files are periodically reviewed by an independent regulatory or quality control body. These reviewers are highly experienced professionals and are bound by the same rules of confidentiality as our principals and staff.

When dealing with HMRC on your behalf we are required to follow Professional Conduct in Relation to Taxation. To enable us to do this, you are required to be honest with us and to provide us with all necessary information in a timely manner. For more information about ‘Your Charter’ for your dealings with HMRC, visit https://www.gov.uk/government/publications/hmrc-charter. To the best of our abilities, we will ensure that HMRC meets its side of the Charter in its dealings with you.

We will endeavour to record all advice on important matters in writing. Advice given orally is not intended to be relied upon unless confirmed in writing. Therefore, if we provide oral advice (for example, during the course of a meeting or a telephone conversation) and you wish to be able to rely on that advice, you must ask for the advice to be confirmed by us in writing. Advice is valid as at the date it was given.

You have a legal responsibility to retain documents and records relevant to your financial affairs. During the course of our work we may collect information from you and others relevant to your tax and financial affairs. We will return any original documents to you if requested. Documents and records relevant to your tax affairs are required by law to be retained as follows:

Individuals, trustees and partnerships

with trading or rental income: five years and 10 months after the end of the tax year

otherwise: 22 months after the end of the tax year.

Companies, Limited Liability Partnerships, and other corporate entities

six years from the end of the accounting period.

Although certain documents may legally belong to you, we may destroy correspondence and other papers that we store electronically or otherwise that are more than seven years old, except documents we think may be of continuing significance. You must tell us if you wish us to keep any document for any longer period.

We may use software programmes, Artificial Intelligence (‘AI’) and internal and external search engines in the performance by us of the services that we provide to you. In engaging with us, you consent to us doing so. We will not do so in a way that will breach any duties of confidentiality that we owe you and we will do so with reasonable skill and care and in accordance with the usual duties owed by professional accountants to their clients.

You accept and consent that our use as set out in this clause can extend to technological developments of AI, research purposes and benchmarking, so long as we do not breach our duties of confidentiality to you.

If you do not wish us to use AI in the services that we provide to you then please let us know immediately by contacting the partner in charge of your matter. Please note that refusing to permit our use of AI will almost inevitably give rise to an increase in the costs that we will charge for the work that we carry out.

In providing services to you, we may use software programmes to assist in the processing of your data. Such software includes, but is not limited to, Claude AI.

We are not liable for any shortfalls in the software that we use.

We are not responsible for any failure to deliver our services due to errors in transmission, internet outages, supplier infrastructure issues or any other failure that results in lack of availability of the software programmes or other online services required to enable us to provide you with the services we have agreed to perform. We are also not liable for any loss or corruption of data if you have breached the terms of any supplier of such software programmes (if you are provided with direct access to the programme).

We may need to share, allow access, or otherwise transfer your personal data with service providers (including AI/software providers) based outside the UK. Where this happens, we will only make transfers that are lawful under the UK GDPR.

That means we will:

a) check whether the destination is covered by a UK “adequacy” decision (so data can flow freely); or

b) put in place approved safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs), and complete a transfer risk assessment; and

c) apply appropriate technical and organisational measures (including encryption) to keep the data secure.

We will tell you, on request, which countries your data may be transferred to and what safeguards are used. You can object to a proposed transfer, but this may affect our ability to deliver the services. Your UK GDPR rights (including access, correction and objection) continue to apply.

Multiply Accountancy maintains professional indemnity insurance with Hiscox Insurance Company Limited. Hiscox Insurance Company Limited is authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority. Registered in England and Wales with registered office at 22 Bishopsgate, London EC2N 4BQ.

If you provide us with all information and explanations on a timely basis in accordance with our requirements, we will plan to undertake the work within a reasonable period of time to meet any regulatory deadlines. However, failure to complete our services before any such regulatory deadline would not, of itself, mean that we are liable for any penalty or additional costs arising.

Multiply Accountancy Limited (“Multiply”, “we”, “us”, “our” and “ours”) is an accountancy and tax advisory firm. We are registered in England and Wales as a company under number 11247257 and our registered office is at 71-75 Shelton Street, London, WC2H 9JQ.

This notice will tell you how we look after your personal data, about your privacy rights, and about our compliance with and your protections under Data Protection Legislation.

In this notice “Data Protection Legislation” means any applicable law relating to the processing, privacy, and use of Personal Data, including the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003, as amended by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2020 and the Data (Use and Access) Act 2025.

For the purpose of the Data Protection Legislation and this notice, we are the ‘data controller’. This means that we are responsible for deciding how we hold and use personal data about you. We are required under the Data Protection Legislation to notify you of the information contained in this privacy notice.

We have appointed a Data Protection Officer. Our Data Protection Officer is our Data Protection Point of Contact and is responsible for assisting with enquiries in relation to this privacy notice or our treatment of your personal data. Should you wish to contact our Data Protection Point of Contact you can do so using the contact details noted at paragraph ‎11(Contact Us), below.

The information we hold about you may include the following:

• your personal details (such as your name and/or address, national insurance numbers, tax codes etc.);

• details of contact we have had with you in relation to the provision, or the proposed provision, of our services;

• details of any services you have received from us;

• our correspondence and communications with you;

• information about any complaints and enquiries you make to us;

• information from research, surveys, and marketing activities

We obtain your personal data directly from you when:

• you request a proposal from us in respect of the services we provide;

• you engage us to provide our services and also during the provision of those services;

• you contact us by email, telephone, post or social media (for example when you have a query about our services);

We may also obtain your personal data indirectly:

• from your employer/our client when it engages us to provide services and also during the provision of those services;

• from third parties and/or publicly available resources (for example, from your employer, HMRC or from Companies House).

We may process your personal data for purposes necessary for the performance of our contract with you and to comply with our legal obligations. This may include processing your personal data where you are an employee, subcontractor, supplier or customer of our client.

We may also process your personal data for the purposes of our own legitimate interests provided that those interests do not override any of your own interests, rights and freedoms which require the protection of personal data. This includes processing for marketing, business development, statistical and management purposes.

Please note that we may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data.

Situations in which we will use your personal data

We may use your personal data in order to:

• carry out our obligations arising from any agreements entered into between our clients and us (which will most usually be for the provision of our services);

• carry out our obligations arising from any agreements entered into between our clients and us (which will most usually be for the provision of our services) where you may be a subcontractor, supplier or customer of our client;

• provide you with information related to our services and our events or seek your thoughts and opinions on the services we provide; and

• notify you about any changes to our services.

In some circumstances we may anonymise or pseudonymise the personal data so that it can no longer be associated with you, in which case we may use it without further notice to you.

We may also process your personal data without your knowledge or consent, in accordance with this notice, where we are legally required or permitted to do so.

Data retention

We will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected.

When assessing what retention period is appropriate for your personal data, we take into consideration the requirements of our business and the services provided, any statutory or legal obligations and the purposes for which we originally collected the personal data.

Change of purpose

Where we need to use your personal data for a reason, other than the purpose for which we originally collected it, we will only use your personal data where that reason is compatible with the original purpose. If we need to use your data for a new purpose, we will notify you and communicate our legal basis for this new processing.

We will share your personal data with third parties where we are required by law, where it is necessary to administer the relationship between us, or where we have another legitimate interest in doing so. This may include sharing your personal data with a regulator or to otherwise comply with the law.

“Third parties” includes third-party service providers. The following activities are carried out by third-party service providers: IT and cloud services, professional advisory services, administration services. We only permit our third-party service providers to process your personal data for specified purposes and in accordance with our instructions.

We may share your personal data with other third parties, for example in the context of the possible sale or restructuring of the business. We may also need to share your personal data with a regulator or to otherwise comply with the law.

As part of performing our services under the terms of our engagement we may from time to time be required to transfer your personal data to countries or organisations outside the UK, typically as a result of the use of software. Should you require further information, please contact us using the contact details outlined below. More detail on international transfers is available from the ICO: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/international-transfers/a-brief-guide-to-international-transfers/

We have put in place commercially reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Your duty to inform us of changes

It is important that the personal data we hold about you is accurate and current. Should your personal information change, please notify us of any changes of which we need to be made aware by contacting us, using the contact details below.

Your rights in connection with personal data

Under certain circumstances, by law you have the right to:

• Request access to your personal data. This enables you to receive details of the personal data we hold about you and to check that we are processing it lawfully.

• Request correction of the personal data that we hold about you.

• Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).

• Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this basis. You also have the right to object where we are processing your personal information for direct marketing purposes.

• Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.

• Request the transfer of your personal data to you or another data controller if the processing is based on consent, carried out by automated means and this is technically feasible.

If you want to exercise any of the above rights, please email our Data Protection Point of Contact, Candace Mortimer, at candace@multiply.team.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee for the administrative costs of complying with the request if your request for access is manifestly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose (for example, in relation to direct marketing that you have indicated you would like to receive from us), you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please email our Data Protection Point of Contact: candace@multiply.team.

Once we have received notification that you have withdrawn your consent, we will no longer process your personal information (personal data) for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

Any changes we may make to our privacy notice in the future will be updated on our website at: www.multiplyaccountancy.co.uk/terms-of-business-and-privacy-notice

This privacy notice was last updated on 20 July 2026.

If you have any questions regarding this notice or if you would like to speak to us about the manner in which we process your personal data, please email our Data Protection Point of Contact, Candace Mortimer, at candace@multiply.team or telephone 020 3151 3159.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues, at any time. The ICO’s contact details are as follows:

https://ico.org.uk/global/contact-us/contact-us-public/public-advice/

or

Telephone: 0303 123 1113.

The ICO’s normal opening hours are Monday to Friday between 9am and 5pm (excluding bank holidays).