Privacy Policy

1. Who we are

This website and the AccountsFlow service are operated by The Business Consortium Ltd (company number 16636529). Registered office: 86-90 Paul Street, London EC2A 4NE, United Kingdom. Contact: enquiries@thebusinessconsortiumltd.co.uk.

"T.B.C." is the house mark of The Business Consortium Ltd, used before each product name across our product family (for example, T.B.C. WageFlow, T.B.C. PeopleFlow and T.B.C. AccountsFlow).

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights. Organisations must provide this type of information under UK GDPR transparency requirements.

2. Controller and processor roles

Website and support enquiries. For enquiries and communications you send to us, we act as a data controller.

AccountsFlow accounting data. For company financial data entered into AccountsFlow by a business customer, the customer typically acts as the data controller, and we act as a data processor processing that data on the customer's instructions to provide the service.

3. What data we collect

We may collect the following categories of data, depending on how you use the website or service.

• Account and service data: account identifiers, login and security metadata, company settings you enter, and support communications.
• Company accounting data: data entered by the customer to run their accounts, such as chart of accounts, journals, ledger entries, accounting period data, and financial reports. This data may include personal data where it appears in transaction descriptions or supporting records.
• Technical data: IP address, device and browser information, and logs used for security and service reliability.

4. Why we use personal data and lawful bases

UK GDPR requires us to explain purposes and lawful bases. The exact lawful basis depends on the context. Typical lawful bases include contract, legal obligation, and legitimate interests.

• Providing the service — purpose: provide accounting software functionality and customer support. Lawful basis: contract where you are the customer. For accounting data processed for customers, we act as processor on the customer's instructions.
• Security and fraud prevention — purpose: protect accounts, prevent abuse, investigate incidents. Lawful basis: legitimate interests and, where applicable, legal obligations.
• Legal and compliance — purpose: comply with legal obligations, resolve disputes, and enforce terms. Lawful basis: legal obligation and legitimate interests.

5. Who we share data with

We share personal data only where necessary to run the website or provide the service, for example with hosting, database, and security providers. We require appropriate contractual protections where processors are used.

6. International transfers

If any service providers process data outside the UK, we will use appropriate safeguards, such as approved transfer mechanisms. If you require details of sub-processors or transfer safeguards, contact us.

7. Data retention

We keep personal data only as long as needed for the purposes set out in this policy. Accounting records often need to be retained for statutory and audit reasons. Where we act as processor, retention is controlled by the customer's instructions, subject to legal requirements.

8. Your rights

You may have rights including access, correction, deletion, restriction, objection, and data portability. Some rights depend on context and lawful basis. If we process accounting data as processor, we will assist the customer (controller) with requests where required.

You also have the right to complain to the Information Commissioner's Office (ICO).

9. Contact