Privacy Policy

1. Introduction
UPY Group (“we,” “our,” “us”) is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect
We may collect and process the following personal data:

• Personal Identification Information: Name, email address, phone number, and job title.

• Financial Information: Bank details for payroll processing and invoicing.

• Employment Information: PAYE, CIS, and contractor details.

• Communication Data: Emails, phone calls, and messages exchanged with our team.

• Technical Data: IP address, browser type, and device information when you visit our website.

3. How We Use Your Data
We process personal data for the following purposes:

• To provide payroll, accounting, and compliance services.

• To manage contracts and service agreements.

• To process payments, tax deductions, and HMRC compliance.

• To communicate with clients and respond to inquiries.

• To improve our services and enhance user experience.

• To comply with legal and regulatory obligations.

4. Legal Basis for Processing
We process personal data based on the following legal grounds:

• Contractual Obligation – When processing is necessary for the performance of a contract.

• Legal Compliance – To meet regulatory and tax obligations.

• Legitimate Interests – To provide and improve our services.

• Consent – When explicit permission is required for specific processing activities.

5. Data Sharing and Disclosure
We do not sell or trade personal data. However, we may share data with:

• HMRC and other regulatory authorities for compliance purposes.

• Financial institutions for payroll and payment processing.

• Third-party service providers supporting our business operations.

• Legal advisors and auditors where required by law.

6. Data Security
We implement strict security measures to protect personal data, including encryption, access controls, and regular security audits. Only authorised personnel have access to your information.

7. Data Retention
We retain personal data for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations, and resolve disputes. After this period, data is securely deleted.

8. Your Rights
Under UK GDPR, you have the following rights:

• Right to Access – Request a copy of your personal data.

• Right to Rectification – Request corrections to inaccurate or incomplete data.

• Right to Erasure – Request deletion of personal data where applicable.

• Right to Restrict Processing – Request limitation on data processing.

• Right to Data Portability – Request transfer of your data to another provider.

• Right to Object – Object to data processing based on legitimate interests.

To exercise your rights, please contact us at info@upy.group or call 0333 038 9383.

9. Cookies and Website Tracking
Our website uses cookies to improve user experience and analyse website traffic. By using our site, you consent to our use of cookies in accordance with our Cookie Policy.

10. Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on our website with the updated effective date.

11. Contact Us
For any questions or concerns about this Privacy Policy, please contact us:

• Email: info@upy.group

• Phone: 0333 038 9383

• Address: 12-22 Newhall Street, Birmingham, B3 3AS, United Kingdom