Privacy & Data Protection

Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your personal information in compliance with GDPR (UK/EU), PIPEDA (Canada), CCPA (USA), and PDPA (Pakistan).

Last Updated: December 24, 2025

1. Introduction

SWC Accounting ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services or visit our website. By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our services, and information from third-party sources.

Personal Information

  • Name, email address, phone number, and postal address
  • Business information (company name, tax ID, business address)
  • Financial information (bank account details, tax records, invoices)
  • Login credentials and account information
  • Communication preferences and correspondence with us

Automatically Collected Information

  • IP address, browser type, and device information
  • Usage data, pages visited, and time spent on our website
  • Cookies and similar tracking technologies
  • Location data (with your consent)

Information from Third Parties

  • Tax authorities (HMRC, CRA, IRS, FBR)
  • Banks and financial institutions
  • Credit reporting agencies
  • Business partners and service providers

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide accounting, tax, payroll, and advisory services
  • To process transactions and manage your account
  • To communicate with you about our services and updates
  • To comply with legal and regulatory requirements
  • To prepare and file tax returns and financial statements
  • To detect and prevent fraud and unauthorized access
  • To improve our services and website functionality
  • To send marketing communications (with your consent)
  • To analyze usage patterns and improve user experience

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

  • Tax Authorities: HMRC (UK), CRA (Canada), IRS (USA), FBR (Pakistan) as required by law
  • Service Providers: Cloud hosting, payment processors, IT support, and software vendors
  • Professional Advisors: Lawyers, auditors, and consultants bound by confidentiality
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • Legal Requirements: To comply with court orders, legal processes, or government requests
  • Consent: With your explicit consent for specific purposes

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

  • Encryption of data in transit and at rest (SSL/TLS, AES-256)
  • Secure cloud storage with access controls and authentication
  • Regular security audits and vulnerability assessments
  • Employee training on data protection and confidentiality
  • Multi-factor authentication for account access
  • Firewall protection and intrusion detection systems
  • Regular data backups and disaster recovery procedures
  • Compliance with industry standards (ISO 27001, SOC 2)

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal obligations:

  • UK: Accounting records retained for 6 years; tax records for 6-20 years (HMRC requirements)
  • Canada: Financial records retained for 6 years from the end of the tax year (CRA requirements)
  • USA: Tax records retained for 3-7 years depending on circumstances (IRS requirements)
  • Pakistan: Records retained for 6 years from the end of the tax year (FBR requirements)
  • Marketing data retained until you withdraw consent or we no longer need it
  • Website usage data retained for up to 2 years for analytics purposes

7. Your Rights

Depending on your location, you have the following rights regarding your personal information:

GDPR Rights (UK & EU)

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restriction: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for marketing at any time

PIPEDA Rights (Canada)

  • Right to access your personal information
  • Right to challenge the accuracy of your information
  • Right to withdraw consent for non-essential purposes
  • Right to file a complaint with the Privacy Commissioner of Canada

CCPA Rights (California, USA)

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of the sale of personal information
  • Right to non-discrimination for exercising your rights

PDPA Rights (Pakistan)

  • Right to access personal data held by us
  • Right to correction of inaccurate data
  • Right to object to data processing
  • Right to file complaints with relevant authorities

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Essential Cookies

  • Required for website functionality and security
  • Session management and authentication
  • Cannot be disabled without affecting site functionality

Analytics Cookies

  • Help us understand how visitors use our website
  • Track page views, session duration, and user behavior
  • Used to improve website performance and user experience

Marketing Cookies

  • Used to deliver relevant advertisements
  • Track the effectiveness of marketing campaigns
  • Can be disabled through cookie preferences

You can manage your cookie preferences through your browser settings or our cookie consent tool.

9. International Data Transfers

As we operate in multiple countries (UK, Canada, USA, Pakistan), your information may be transferred and processed in different jurisdictions. We ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions where applicable
  • Encryption of data during transfer
  • Compliance with local data protection regulations in each country
  • Regular assessments of international transfer mechanisms

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending an email notification to registered users
  • Displaying a prominent notice on our website
  • Updating the "Last Updated" date at the top of this policy

Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Our Offices
πŸ‡¬πŸ‡§ United Kingdom:
London Office
πŸ‡¨πŸ‡¦ Canada:
Toronto Office (HQ)
πŸ‡ΊπŸ‡Έ United States:
New York Office
πŸ‡΅πŸ‡° Pakistan:
Islamabad Office

Compliance & Certifications

We comply with international data protection standards

πŸ‡¬πŸ‡§
GDPR

UK & EU Compliance

πŸ‡¨πŸ‡¦
PIPEDA

Canada Compliance

πŸ‡ΊπŸ‡Έ
CCPA

USA Compliance

πŸ‡΅πŸ‡°
PDPA

Pakistan Compliance

Have Questions About Your Privacy?

Our team is here to help answer any questions about how we protect your data

Contact Us