MZ Support Limited – Privacy Policy & UK GDPR Disclosure
Last Updated: 28 September 2026
ICO Registration Reference: ZA476738
1. Introduction and the Data Controller
1.1 MZ Support Limited (“we”, “us”, “our”, or “the Company”), trading as MJ Support & Co, respects your personal privacy and is committed to protecting your highly sensitive financial, commercial, and personal records. This Privacy Policy outlines how we collect, process, securely store, and safeguard your personal data when you engage our professional accountancy, corporate tax, bookkeeping, or payroll services, or visit our website (https://mjsupport.co.uk).
1.2 Under the UK General Data Protection Regulation (UK GDPR), the Data Controller is MZ Support Limited, a private limited company registered in England and Wales. Our data operations desk can be contacted directly via email at info@mjsupport.co.uk.
2. The Critical Financial Data We Process
To deliver professional accountancy and compliance structures, we process:
2.1 Identity & Contact Data: Full name, marital status, title, date of birth, residential address, email address, corporate codes, and copies of government ID (passports/visas) collected to satisfy mandatory Anti-Money Laundering (AML) verifications.
2.2 Financial & Transaction Data: Bank account histories, statements, credit logs, VAT entries, company ledger receipts, invoices, and accounting entries.
2.3 Payroll & Employment Data: Employee names, salaries, National Insurance numbers, tax codes, pension auto-enrolment tiers, and statutory deduction parameters.
3. Our Lawful Bases for Processing Data
We process your personal data under the following strict statutory legal brackets:
3.1 Performance of a Contract: To execute our formal Letter of Engagement, generate your annual company accounts, process company payroll, and manage tax calculations.
3.2 Legal Obligation: To satisfy mandatory UK laws, including filing direct tax returns to HM Revenue and Customs (HMRC) and conducting standard anti-money laundering checks.
3.3 Legitimate Interests: To securely manage our practice network, maintain internal audit records, and prevent cybersecurity or fraudulent vulnerabilities.
4. Safeguards and International Data Transfers
4.1 Client files are primarily hosted on highly secure cloud accounting platforms (such as Xero and QuickBooks) and encrypted local servers within the UK and EU.
4.2 Where technical data or communication tools utilize infrastructure based in the United States (e.g., Google Workspace, Microsoft 365, analytics tools), we ensure transfers are fully protected. This is managed under the UK-US Data Bridge framework or via the ICO-approved International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses.
5. Mandatory Financial Data Retention Rules
5.1 Please note that despite your right to request data deletion, accountancy firms are bound by overriding UK financial crime and tax legislation. Under the Money Laundering Regulations and HMRC tax guidance, we legally retain all identity verification records, accounting ledgers, and transaction source files for a mandatory minimum period of five (5) to six (6) years following the formal termination of our client contract.
6. Your Comprehensive Statutory GDPR Rights
Under the UK GDPR, you hold comprehensive rights regarding your personal parameters:
6.1 The Right of Access (Subject Access Request): To request copies of your files.
6.2 The Right to Rectification: To amend inaccurate financial or biographical entries.
6.3 The Right to Erasure: To request deletion of data, subject to Section 5.1 above.
6.4 The Right to Restrict Processing: To halt tracking pipelines during active disputes.
6.5 The Right to Data Portability: To transfer data to an alternative accountant.
6.6 The Right to Object: To challenge any profiling or legitimate interest metrics.
6.7 The Right to Withdraw Consent: To opt out of any marketing updates immediately.
6.8 Contact for Requests: To exercise any right, contact info@mjsupport.co.uk. You hold the right to file a complaint at any time with the ICO via www.ico.org.uk.