This Privacy Policy sets out how Capital Allowance Review Service Limited will obtain, store, and use your personal information when you are a client, interact with us, visit our website, or where we otherwise obtain or collect your personal information.
This privacy policy will explain how our organisation uses the personal data we collect from you when you use our website.
Our details
Chris Roberts is our Data Protection Officer. Our contact details are:
Lake View,
Festival Way,
Stoke-on-Trent
ST1 5BJ
Telephone: 0330 174 1339
Email: [email protected]
How do we collect and store your data?
We collect information about you from different places including:
· directly from you
· from a third party acting on your behalf e.g., an intermediary or broker
· from publicly available sources
· when we generate it
· from other organisations
· through the use of CCTV
· via our website
What personal information do we obtain from you?
- name and contact details, such as address, email, telephone number, and DOB, to set you up as a client and perform our onboarding checks and to comply with our regulatory and legal obligations.
- tax information and history
- commercial property documents
- proof of identity
- information about your circumstances and the matter you have asked us to deal with
Our lawful basis for collecting your personal data
The UK GDPR requires us to identify a lawful basis that justifies the requirement for us to process your personal data. As a professional service firm, it is necessary for us to process your personal data for us to fulfil our contract with you.
We have outlined the lawful bases we may rely on below:
- to fulfil our contract with you
- where we have legal responsibilities
- where there is a legitimate interest
- where we have your consent
How is your personal information used
We will use the information to fulfil our contractual service as detailed in our engagement letter, to meet legal and regulatory obligations, or for other legitimate purposes such as:
- to confirm your identity and address
- to carry out your instructions
- to improve our services
- to protect our business and website
- to prevent fraud and security threats
- to manage our recruitment process
- to ensure we meet our legal and regulatory requirements
- to ensure the health and safety of visitors and colleagues whilst on our premises
- to offer other services we believe may benefit you unless you ask us not to.
Who we may share your personal data with
We will not disclose, sell, or distribute your personal data to third parties unless we have your permission to do so. We may, however, share your data with:
- Group employees, agents, and or professional advisors
- with our Group companies for the purpose of performing your engagement
- to inform you of products and services we believe may benefit you – unless you ask us not to
- with other third-party service providers who provide services to us in relation to performing our engagement with you, protecting our business and website or for the prevention of fraud (including onboarding checks)
- external 3rd parties who support us with search engine optimisation (SEO) and AI-powered search enhancements, including reporting, analytics, and service improvement initiatives
We will only disclose personal data to third parties if we are legally obliged to do so, to assist with the performance of our engagement with you, or at your request.
Transferring personal data outside the United Kingdom (UK)
We may transfer personal data we collect about you outside the UK in order to perform our engagement with you.
Before agreeing to transfer data outside the UK, we check to ensure that there are adequacy regulations under the Data Protection Act 2018 in relation to each country, which ensures that their regulations will be deemed to provide an adequate level of protection for your personal information for the purpose of the UK Data Protection Legislation.
Where there are no adequacy regulations, we have a binding contractual agreement with the relevant third parties to ensure that your personal data is treated by those third parties in a way that is consistent with and respects the UK Data Protection Legislation.
How long do we store your personal information
We will keep your information for as long as you have a relationship with us. If you disengage as a client, we will keep it where we are legally required to do so and for legitimate purposes only. We are required under UK tax law to keep your basic personal data (name, address, tax details) for a period of time, and we will do this for a minimum of six years, after which time it will be destroyed. The information we use for marketing purposes will be retained until you notify us that you no longer wish to receive communication from us.
How we secure your personal information
We understand your personal data is very important to you, and as such we will ensure we have appropriate policies, procedures and technical measures in place to prevent unauthorised access or unauthorised processing of personal data. Our data protection policies and procedures assist in ensuring our compliance with the data protection laws and that your personal data is controlled and processed securely.
If a data breach should occur, we will notify you of any such breach that could result in discrimination, damage to reputation, financial loss, loss of confidentiality or any other significant economic or social disadvantage against an individual.
Our use of cookies and similar technologies
Cookies are small text files that are placed on your computer by websites that you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site. Depending on the browser you use, you should be able to control what cookies are placed on your device through the browser settings. You can find out about cookies, how to see what cookies have been set, and how to manage and delete them.
We do not store any personal data in the cookies that we use and store your information anonymously.
We use Google Analytics to help us run our website, by monitoring the activity and traffic both to and through our website. By using cookies stored on users’ devices, it creates reports giving us statistical and other information about our website. Details captured during your visit will include, but not be limited to, traffic data, location data, weblogs, and other communication data, and the resources you access. However, all data collected is anonymous and will not identify you as an individual. Google stores this activity information, and you can view Google’s privacy policy and opt out of being tracked by Google Analytics across all websites.
For our online offer, we use DealFront, who provide a web analysis service. The data collected consists of the IP addresses of users of the online offer, and also data regarding their use of our website. They use the data collected on behalf of the operator to evaluate their use of the website to compile reports on website activities and to provide further services relating to website use and Internet use with respect to the website operator.
The companies in which our online offer is called will be passed on to us. In this case, we also receive information on which pages of our online offer are called up by the companies concerned. If the IP addresses are not company-related, only statistical information on use of our website is passed on, which does not permit any conclusions to be drawn regarding the people concerned.
How we use your personal data submitted via our website
When you submit your details through our website (e.g. via contact forms or newsletter sign-ups), we may use your personal data to:
- Respond to your enquiry or request.
• Send you relevant updates or marketing communications, where you have provided consent or where we have a legitimate interest in doing so.
• You have the right to opt out of marketing communications at any time by emailing [email protected]. We will always respect your preferences and ensure your data is handled securely and lawfully.
What are your data protection rights?
We would like to make sure you are fully aware of all your data protection rights.
Every user is entitled to the following:
The right to access
- You have the right to request from us copies of your personal data. We may charge a small fee for this service.
The right to rectification
- You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
The right to erasure
- You have the right to request that we erase your data, under certain conditions.
The right to restrict processing
- You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to data portability
- You have the right to request that we transfer the data that we have collected to another organisation or directly to you, under certain conditions.
If you make a request, we have one month to respond. If you would like to exercise these rights, please get in touch at the details above.
Privacy policies of another website
- Our website contains links to other websites. Our privacy policy applies only to our page, so if you click on a link to another website, you should read their privacy policy.
Changes to our privacy policy
- We keep our privacy policy under regular review and place any updates on this web page. This privacy policy was last updated on 10th November 2025
Disabling Cookies
If you would like to restrict the use of cookies, you can control this in your Internet browser. Links to advice on how to do this for the most popular Internet browsers are provided below for convenience and will be available for the Internet browser of your choice either online or via the software help (normally available via key F1).
How to contact us
If you have any questions about our privacy policy, the data we hold on you, or you would like to exercise your data protection rights please contact our data protection officer at [email protected] or via the contact details supplied above. If you are not satisfied with how we deal with your complaint or believe we are processing your personal data not in accordance with the data protection laws, you can complain to the Information Commissioner’s Office.