Mepa Accounting (“Mepa”, “we”, “us”, “our”) respects your privacy and takes the protection of your personal data seriously. This policy explains what personal data we hold, how we use it, who we share it with, where it is processed, and the rights you have. It applies when you visit our website, contact us, ask for a quote, apply to work with us, or deal with us as a client, supplier, or partner.
We are Mepa Accounting, an outsourced back-office accounting support business based in Ahmedabad, India. We prepare and process bookkeeping, payroll, accounts, and tax preparation support for businesses and accounting firms in the United Kingdom, the European Union, and the United States.
Registered business name: Mepa Outsourcing LLP
We handle personal data in two different roles. It is important to understand the difference, because your rights and the terms that apply depend on which role we are acting in.
When we act as a data controller. When you visit our website, contact us, ask for a quote, or apply for a role, we decide how and why your personal data is used. In these cases we are the data controller, and this policy explains what we do with that data.
When we act as a data processor. When we prepare and process financial records for a client, that data belongs to the client. The client decides how and why it is used, so the client is the data controller and we are the data processor. We only act on the client’s written instructions. How we handle that client data is set out in the separate services agreement and data processing agreement we sign with each client. It is not covered by this policy.
The rest of this policy is about the personal data we hold as a controller.
We collect the following types of personal data:
We collect personal data directly from you, for example when you fill in a form, email us, call us, or message us. We also collect some data automatically through cookies and analytics tools when you use our website.
Under UK and EU data protection law we must have a lawful basis for using your personal data. We rely on the following:
Our website uses cookies to make the site work, to remember your choices, and to understand how the site is used through analytics. When you first visit, a cookie banner lets you accept or manage non-essential cookies. You can change your choice at any time, and you can also control cookies through your browser settings.
We share personal data only where we need to, and only with:
We do not sell your personal data, and we do not share it for anyone else’s marketing.
We keep personal data only for as long as we need it for the purpose we collected it, or for as long as the law requires. Enquiry data that does not lead to a working relationship is kept for a limited period and then deleted. Client and financial records are kept in line with the relevant services agreement and any legal retention periods. Recruitment data for unsuccessful applicants is kept for a limited period and then deleted, unless you agree to us keeping it longer.
We use encryption, access controls, secure systems, staff confidentiality agreements, and ongoing monitoring to protect personal data. Our team signs non-disclosure agreements. You can read more on our Security and Confidentiality page.
If your personal data is part of the records a client has asked us to work on, for example as an employee of a business whose payroll we process, then that client is the data controller. You should contact that client to exercise your rights. We will support the client in responding to your request.
We may update this policy from time to time. When we do, we will change the date at the top of the page. Please check back so that you are aware of any changes.
If you have any questions about this policy or how we handle your data, please contact us at info@mepaaccounting.in.