Onshore Partners ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Onshore Partners is a UK payroll and finance practice providing payroll, Self Assessment and related services. For data-protection purposes, we act as a data controller for the information we hold about enquirers and clients, and as a data processor when we process payroll data on behalf of employer clients.
Contact: hello@onshorepartners.co.uk
We only share personal data where it is necessary to deliver our services or to meet a legal obligation. In practice that means:
These are data processors acting on our instructions under written terms. We do not sell your data, and we never share it for advertising.
We store data in the UK, the European Economic Area or Switzerland. Our secure file storage is provided by Proton, a Swiss company that keeps files on its own servers in Switzerland and Germany, and Switzerland is covered by the UK's adequacy regulations. Some of the providers above are based outside the UK, or route traffic through servers outside the UK, so your data may be transferred internationally. Where that happens we rely on the UK's adequacy regulations, or on the International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses, together with appropriate technical safeguards such as encryption. You can ask us for details of the safeguards that apply to any particular transfer.
Identity documents are provided through our identity-check provider's secure link, or by another route we agree with you. Please do not send them by ordinary email. Please return completed forms through the private upload link we send you, or another secure route we agree with you. Data is held in a secure, access-controlled, encrypted system, kept in the UK, the European Economic Area or Switzerland, and we apply appropriate technical and organisational measures to keep it safe and confidential.
When we need documents from you, we may send you a private upload link. It works once, expires after no more than 14 days and accepts up to 10 files. Your files and their names are encrypted in your own browser before they leave your device, using a key that only Onshore Partners holds, so our hosting provider cannot read them. Until we collect them, the encrypted files are held by Cloudflare in a database located in the European Union. We collect them within 2 working days and then delete them from Cloudflare. Cloudflare keeps backups for up to 7 days, so an encrypted copy of a deleted file can persist that long. On the way to that database your encrypted files pass through Cloudflare's global network. Once collected, your documents are kept with the rest of your client file under our retention policy.
As a business supervised by HMRC under the Money Laundering Regulations, we must check the identity of the people we act for and screen those connected with them. Personal data we receive for these checks will be processed only for the purposes of preventing money laundering, terrorist financing or proliferation financing, unless another law permits a different use or you agree to it (regulation 41 of the Money Laundering Regulations 2017).
We keep personal data only as long as necessary for the purpose it was collected and to meet legal and regulatory requirements (for example, tax and AML record-keeping periods), after which it is securely deleted. Records of our anti-money-laundering checks are kept for five years after our business relationship with you ends, unless the law requires us to keep them longer.
Under UK GDPR you have the right to access, correct, erase, restrict or object to our processing of your personal data, and to data portability. To exercise any of these, email us at hello@onshorepartners.co.uk. You also have the right to complain to the ICO at ico.org.uk.
This site sets no cookies of its own, and we do not use advertising or third-party tracking cookies. We do not track you across other websites and we do not build a profile of you.
We do measure how the site is used. We use Cloudflare Web Analytics, which counts page views and reports things like which pages are visited, roughly where in the world visitors are, and how quickly pages load. It is designed to be privacy-first: it stores nothing on your device, sets no cookies, uses no fingerprinting, and does not follow you to other sites. Because it stores nothing on your device, it does not require a cookie banner. We rely on our legitimate interest in understanding whether our website is useful, and you can object to this at any time using the contact details above.
Our hosting provider also processes standard technical data such as IP addresses to keep the site secure and available, and our forms use Cloudflare Turnstile to prevent automated abuse.
We may update this policy from time to time. The "last updated" date above shows when it was last revised.
Quick enquiry, we reply within 1 UK business day