Privacy information

Review draft — confirm remaining supplier arrangements and website cookies before publishing.

Last updated: 16 October 2026.

Who we are

Core Financials Ltd is responsible for the personal information described in this notice. We are registered in England and Wales under company number 15977442. Our registered office is 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. This is a correspondence address, with no client visits. We work from Worthing and provide local meetings by arrangement and remote support across the UK.

For privacy questions or requests, email info@corefinancials.co.uk.

Information we use

When you enquire, we receive your name, email address, selected service and the information you put in your message. Our hosting and email providers may also process technical information such as IP addresses, request times and security logs.

If you become a client, we may also need identity and contact information, tax references, financial records and other information relevant to the services you ask us to provide. Please use the secure document-sharing route agreed with us for client records, rather than the initial enquiry form.

Why we use it

We use enquiry information to answer questions, discuss your needs and prepare a quote. For an individual asking to enter an agreement with us, we rely on taking steps at their request before a contract. For enquiries made on behalf of a business, we rely on our legitimate interest in responding to business enquiries and arranging our services.

When we provide services, we use information to carry out our agreement with you, or our legitimate interest in performing an agreement with the organisation you represent. We use information where required by law, including applicable tax, accounting and identity-checking obligations. We also rely on our legitimate interests in protecting our systems, managing our practice and handling complaints. We consider people’s rights when relying on legitimate interests.

We do not use the enquiry form to sign you up to marketing. We do not sell your personal information.

Who receives information

Access is limited to the people working on your services and providers needed to run our practice. We use 20i for website, email, internal workspace and Nextcloud document hosting, and Xero for accounting and tax services where relevant to your engagement. We also use locally installed TaxCalc software, with its client database stored on our own computer or network. Identity and anti-money-laundering checks are carried out internally.

We may share relevant information with professional advisers where necessary, and with HMRC, Companies House or another authority when authorised or legally required. We explain the services and software relevant to your work during onboarding.

We use Nextcloud to store and share client documents with authorised users. Our internal workspace holds client contact information, services, tasks, dates and progress, together with links to documents. We also retain backup copies on our own devices.

Processing outside the UK

Our service providers may process personal information outside the UK. Xero states that its services use hosting in the United States. Its data processing terms provide for Standard Contractual Clauses together with the UK Addendum where applicable to restricted transfers of UK personal information.

20i’s data processing agreement provides for international transfers using recognised legal mechanisms, which may include the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism.

You can contact us at info@corefinancials.co.uk for information about the safeguards relevant to your personal information and how to obtain a copy.

How long we keep information

We keep enquiry information while discussing your needs and for a reasonable period afterwards where needed for follow-up, complaints or record-keeping. We review it and remove it when it is no longer needed. If you become a client, relevant information becomes part of the client record.

For client records, we decide retention using the services provided, applicable legal and tax requirements, professional obligations and the time reasonably needed to handle queries or claims. We explain relevant retention arrangements in our engagement information. Security logs and hosted backup copies follow our suppliers’ retention arrangements, which we review as part of managing the service. We review backup copies retained on our own devices and remove them when they are no longer needed.

Your choices and rights

Depending on the circumstances, you can ask to access or correct your information, request deletion or restriction, or ask for a portable copy. Some records may need to be retained to meet legal obligations.

You have the right to object to processing based on legitimate interests. Contact us at info@corefinancials.co.uk and we will consider your request. Where we rely on consent for a separate activity, you can withdraw it without affecting earlier lawful processing.

You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint. Please contact us first if you would like us to help resolve a concern.

Cookies and site security

Our public website does not use analytics or advertising cookies. No cookies were observed during checks of its public pages on 16 October 2026. WordPress administration, our private workspace and Nextcloud may use cookies for authentication, security and essential functionality.

We use access controls and security measures appropriate to our systems. The public enquiry form emails your message to us; it does not create a client account or upload documents to Nextcloud.

Information sources and decisions

Most information comes from you. During client work, we may receive relevant records from an authorised agent, former accountant, public register or authority. We do not use the website or internal task workspace to make decisions about you solely through automated processing.

Changes

We update this information when our services or processing arrangements change. The current version will be available on our website.