Privacy Policy

Last updated: 28 October 2026

CrestWell Accountants and Advisors is the trading name of Omar Ahmed Khan ACA, a sole trader, of 11 Epping Walk, Crawley, West Sussex, RH10 6LX. We operate crestwellaccountants.com. This policy explains what personal information we collect through this website, why we collect it, what we do with it, and what rights you have. We are the data controller for the information described here. We are registered with the Information Commissioner's Office under number ZC238203.

If you have a question about anything in this policy, or you want to exercise any of the rights described below, email us at info@crestwellaccountants.com or write to us at the address above.

This policy covers our website and enquiries. If you become a client, we will tell you more about how we use your information for the work we do for you when we agree that work in writing.

What we collect and why

When you send us an enquiry

When you use the enquiry form on our website we collect your first and last name, your email address and, if you choose to give them, your phone number, your company name and the service you are interested in, along with the message you write, your answer to "How did you hear about us?" if you give one, and a record that you ticked the box confirming you had read this policy. We also record the page you sent it from, the time you sent it, and how you found the website on that visit: the page you first landed on, the website that sent you, and any campaign tags in the link you followed.

Your enquiry is saved securely as soon as you send it, then emailed to us and added to our customer relationship system. A copy of the email also goes to Begin Group Ltd, the agency that runs our website (see below), so that an enquiry is never missed if something goes wrong with our own email.

We use this information to reply to you, to arrange a consultation if you want one, and to tell you how we could help. Our lawful basis is legitimate interests, specifically responding to someone who has asked us to get in touch. We keep enquiries that do not lead to work for twelve months, and then delete them.

To protect the form from spam and automated abuse, it runs a few automatic checks when you send it, and it may use Cloudflare Turnstile, a security check that works in the background. These checks use technical information such as your IP address and browser details. Our lawful basis is legitimate interests, specifically keeping the form working and free of abuse.

When you email us

If you email us directly, we use your email address and anything you tell us in your email to reply and to deal with your request. Our lawful basis is legitimate interests, and we keep the email for the same period as an enquiry.

When you visit the website

Like every website, ours receives technical information from your browser when you visit, such as your IP address, the type of browser and device you are using and the pages you request. This is used to deliver the website to you and to keep it secure. Our lawful basis is legitimate interests, specifically running a secure website. We also count page views with Cloudflare Web Analytics, which sets no cookie and does not identify you.

If you agree to analytics cookies, we also use Google Analytics and Microsoft Clarity to understand how visitors use the website, such as which pages are viewed, where people arrive from, and where the site confuses them. Clarity records mouse movement, clicks and scrolling, with typing and form fields masked before anything leaves your browser. Our lawful basis is your consent, which you can withdraw at any time with the Cookie settings link at the foot of every page. We do not use advertising tracking, and we never use this information to identify you.

Cookies and similar technologies

We use a small number of essential cookies, and analytics cookies only if you agree to them. We use none for advertising. What each one does, and how to change your choice, is set out in our Cookie Policy.

Who we share information with

We are supported by Begin Group Ltd (ICO registration ZC181845), a UK digital agency that operates our website and customer relationship system on our behalf as a data processor. Begin Group Ltd only processes your data on our instructions. Enquiry and customer data is held in that system, operated for us by Begin Group Ltd on the HighLevel platform.

The other companies that help us run the website and handle enquiries are:

Service	What it does with personal information	Where
Cloudflare	Hosts and delivers the website, protects it from attacks, checks enquiry forms for spam, and passes your enquiry on to us. Handles IP addresses, technical request information and the contents of the enquiry form	Global, with a United States parent company
HighLevel	The customer relationship system your enquiry is stored in, operated for us by Begin Group Ltd	United States
Resend	Sends the email that tells us about your enquiry. Handles your name, email address and message	United States and European Union
Microsoft 365	Our business email, where enquiry notifications and your emails arrive	Depends on the service, mainly the UK and European Union
Google Analytics and Google Tag Manager	Only if you agree to analytics cookies: measure how the website is used. Handles an online identifier, your IP address and the pages you view	United States
Microsoft Clarity	Only if you agree to analytics cookies: replays visits and builds heatmaps, with typing and form fields masked. Handles an online identifier, your IP address and how you move around the pages	United States

Each of these providers acts as a processor or sub-processor with appropriate security and contractual protections in place.

We do not sell personal information, and we do not share it for anyone else's marketing. We may disclose information where the law requires us to, for example to a regulator or law enforcement agency.

Information that leaves the United Kingdom

Some of the services above are provided by companies based outside the United Kingdom, mainly in the United States. Where that happens, the transfer is protected by an International Data Transfer Agreement or the UK Addendum to the Standard Contractual Clauses, or by the UK Extension to the EU to US Data Privacy Framework. You can ask us for details of the safeguards that apply.

How long we keep information

Information	How long we keep it
An enquiry or email that does not lead to work	12 months from our last contact, then deleted
An enquiry that leads to you becoming a client	Moved into your client record, and kept as we explain when we agree the work with you
Technical and security logs	Up to 30 days
Analytics data, only if you agreed to it	Google Analytics: 14 months. Microsoft Clarity: as Microsoft sets it, currently up to 13 months for recordings and heatmaps

How we protect information

Access to enquiry and client records is limited to the people who need it. The website is served over an encrypted connection, forms are protected against automated abuse, and accounts on the systems we use are protected by strong passwords and, where available, two factor authentication.

Your rights

You have the right to ask us for a copy of the information we hold about you, to have it corrected if it is wrong, to have it deleted in some circumstances, to ask us to restrict how we use it, to object to us using it, and to receive it in a portable format. Where we rely on your consent, you can withdraw that consent at any time, and withdrawing it does not affect anything we did before you withdrew it. You can object to direct marketing at any time and we will stop.

To exercise any of these rights, email info@crestwellaccountants.com. We will respond within one calendar month.

Automated decision making

We do not make decisions about you using automated processing alone, and we do not carry out profiling that produces legal or similarly significant effects. The automatic spam checks on our enquiry form only decide whether a message looks like spam, and if a genuine message is ever caught, you can always email us directly.

Complaints

If you are unhappy with how we have handled your information, please tell us first at info@crestwellaccountants.com. We will acknowledge your complaint within thirty days and tell you what we are doing about it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113. Complaining to us does not remove your right to complain to them.

Changes to this policy

We review this policy at least once a year and whenever we change what we do with personal information. The date at the top shows when it was last changed.

This version was approved on 28 October 2026.