Our Policy

Privacy Policy

1. About this policy

Mepa Accounting (“Mepa”, “we”, “us”, “our”) respects your privacy and takes the protection of your personal data seriously. This policy explains what personal data we hold, how we use it, who we share it with, where it is processed, and the rights you have. It applies when you visit our website, contact us, ask for a quote, apply to work with us, or deal with us as a client, supplier, or partner.

2. Who we are

We are Mepa Accounting, an outsourced back-office accounting support business based in Ahmedabad, India. We prepare and process bookkeeping, payroll, accounts, and tax preparation support for businesses and accounting firms in the United Kingdom, the European Union, and the United States.

Registered business name: Mepa Outsourcing LLP

3. Two ways we handle personal data

We handle personal data in two different roles. It is important to understand the difference, because your rights and the terms that apply depend on which role we are acting in.

When we act as a data controller. When you visit our website, contact us, ask for a quote, or apply for a role, we decide how and why your personal data is used. In these cases we are the data controller, and this policy explains what we do with that data.

When we act as a data processor. When we prepare and process financial records for a client, that data belongs to the client. The client decides how and why it is used, so the client is the data controller and we are the data processor. We only act on the client’s written instructions. How we handle that client data is set out in the separate services agreement and data processing agreement we sign with each client. It is not covered by this policy.

The rest of this policy is about the personal data we hold as a controller.

4. The personal data we collect

We collect the following types of personal data:

  • Enquiry and contact data. Your name, email address, phone number, company name, and the details of your message when you use our contact or quote forms, email us, call us, or message us on WhatsApp.
  • Website usage data. Information about how you use our site, such as pages viewed, approximate location, device type, and browser, collected through cookies and analytics tools.
  • Recruitment data. If you apply to work with us, the information in your CV, application, and any correspondence about the role.
  • Business relationship data. Contact details and correspondence with clients, suppliers, and partners in the course of working together.

5. How we collect it

We collect personal data directly from you, for example when you fill in a form, email us, call us, or message us. We also collect some data automatically through cookies and analytics tools when you use our website.

6. Why we use your data, and our lawful basis

Under UK and EU data protection law we must have a lawful basis for using your personal data. We rely on the following:

  • To answer your enquiries and prepare quotes. Our legitimate interest in responding to people who contact us, or taking steps at your request before entering into a contract.
  • To provide our services and manage our relationship with clients. To perform our contract with you.
  • To run, secure, and improve our website. Our legitimate interest in operating a safe and useful website.
  • To send you updates you have asked for. Your consent, which you can withdraw at any time.
  • To meet our legal and record-keeping duties. Compliance with a legal obligation.
  • To consider job applications. Our legitimate interest, and steps taken at your request before a possible contract.

7. Cookies

Our website uses cookies to make the site work, to remember your choices, and to understand how the site is used through analytics. When you first visit, a cookie banner lets you accept or manage non-essential cookies. You can change your choice at any time, and you can also control cookies through your browser settings.

8. Who we share your data with

We share personal data only where we need to, and only with:

  • Service providers who help us run the business, such as website hosting, email, analytics, and accounting and payroll software providers, for example Xero, QuickBooks, Sage, amongst others.
  • Professional advisers, such as legal or accounting advisers, where needed.
  • Authorities or regulators where the law requires us to share it.

We do not sell your personal data, and we do not share it for anyone else’s marketing.

9. How long we keep it

We keep personal data only for as long as we need it for the purpose we collected it, or for as long as the law requires. Enquiry data that does not lead to a working relationship is kept for a limited period and then deleted. Client and financial records are kept in line with the relevant services agreement and any legal retention periods. Recruitment data for unsuccessful applicants is kept for a limited period and then deleted, unless you agree to us keeping it longer.

10. How we protect your data

We use encryption, access controls, secure systems, staff confidentiality agreements, and ongoing monitoring to protect personal data. Our team signs non-disclosure agreements. You can read more on our Security and Confidentiality page.

11. When we handle data for a client

If your personal data is part of the records a client has asked us to work on, for example as an employee of a business whose payroll we process, then that client is the data controller. You should contact that client to exercise your rights. We will support the client in responding to your request.

12. Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top of the page. Please check back so that you are aware of any changes.

13. Contact us

If you have any questions about this policy or how we handle your data, please contact us at info@mepaaccounting.in.