This notice explains how Upstack Ltd collects and uses personal data.
Contacting us about your data
Upstack Ltd (company number 17107672) is the data controller. Our registered office is 410 Green Lane, London SE9 3TG.
For anything in this notice, including any of the rights set out below, contact us at mishapatel@up-stack.co.uk.
What we collect
- Details you give us through the enquiry form: name, company name, email address, the stage of your funding round, the amount you are raising, and anything else you write in the message field
- Details you give us when booking a call through Calendly, including your name, email address and any information you add when booking
- Information about your visit collected through analytics and advertising cookies, including pages viewed, how you arrived at the site, approximate location and device type
- Information you provide during an engagement, which for tax advisory work may include financial and company records
Why we use it, and our lawful basis
- Responding to your enquiry. Our legitimate interests in dealing with requests for our services, and taking steps at your request before entering a contract.
- Providing advisory services. Performance of our contract with you, and compliance with our legal and regulatory obligations.
- Anti money laundering and client due diligence. Compliance with legal obligations.
- Analytics and advertising. Your consent, given through the cookie banner. You can withdraw it at any time.
- Marketing emails. Your consent, or our legitimate interests where you are an existing client. Every email includes an unsubscribe link.
Cookies and advertising
We use Google Analytics to understand how the site is used and Google Ads to measure which advertisements lead to enquiries. These set cookies that may track you across sites. Non-essential cookies are only set once you accept them through the banner, and you can change your choice at any time.
Google processes this data as an independent controller in some respects. Google's own privacy notice is at policies.google.com/privacy.
Who we share it with
- Netlify, which hosts this website and processes form submissions
- Calendly, which handles call bookings
- Google, for analytics and advertising measurement
- Our email provider, and any client management or accounting software we use to deliver the engagement
- HMRC and other authorities, where we are required to submit information on your behalf or by law
Some of these providers are based outside the UK. Where data is transferred internationally we rely on adequacy regulations or standard contractual clauses.
How long we keep it
Enquiries that do not lead to an engagement are deleted after 12 months. Client records are kept for seven years after the engagement ends, which reflects our professional and anti money laundering obligations. Analytics data is retained for 14 months.
Your rights
You have the right to ask for a copy of your data, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent you can withdraw it at any time. To exercise any of these, contact us at mishapatel@up-stack.co.uk.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes
We update this notice when our practices change. The date at the top shows when it was last revised.