GDPR Compliance
Last updated: April 2026
Our Commitment to Data Protection
Montrogue Limited is committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we comply with GDPR requirements and what rights you have regarding your personal data.
Data Controller
Data Controller: Montrogue Limited
Company Number: 14470597
Registered Office: Picadilly Business Centre, Blackett Street, Manchester, England, M12 6AE
Email: info@montrogue.co.uk
We are the data controller responsible for your personal data. If you have any questions about how we handle your data, please contact us using the details above.
Legal Basis for Processing
Under GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal bases:
Contract Performance
Processing is necessary to perform our contract with you or to take steps at your request before entering into a contract (e.g., providing tax advisory services, preparing tax returns).
Legal Obligation
Processing is necessary for compliance with legal obligations, including tax law, anti-money laundering regulations, professional body requirements, and HMRC reporting obligations.
Legitimate Interests
Processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests (e.g., business administration, fraud prevention, maintaining records).
Consent
You have given clear consent for us to process your personal data for specific purposes (e.g., marketing communications). You can withdraw consent at any time.
Your GDPR Rights
Under the UK GDPR, you have several important rights regarding your personal data:
Right to Access
You have the right to request copies of your personal data. We may charge a small fee for this service.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate or incomplete.
Right to Erasure
You have the right to request that we erase your personal data, under certain conditions.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data, under certain conditions.
Right to Object
You have the right to object to our processing of your personal data, under certain conditions.
Right to Data Portability
You have the right to request that we transfer the data that we have collected to another organization, or directly to you.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us using the following methods:
Email: info@montrogue.co.uk
Post: Montrogue Limited, Picadilly Business Centre, Blackett Street, Manchester, England, M12 6AE
We will respond to your request within one month of receipt. In complex cases, we may extend this period by two further months and will inform you of any such extension. We will not charge a fee for processing your request unless it is manifestly unfounded, excessive, or repetitive.
Data Retention
We only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements:
- Tax and accounting records: 6 years from the end of the relevant financial year (as required by UK law)
- Client correspondence: Duration of the relationship plus 6 years
- Marketing consent records: Until consent is withdrawn, plus 3 years
- Identity verification documents: Duration of the relationship plus 5 years (AML requirements)
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage:
- Encryption of data in transit and at rest
- Regular security assessments and penetration testing
- Access controls and authentication measures
- Regular staff training on data protection
- Secure backup and disaster recovery procedures
- Confidentiality agreements with all staff and contractors
Data Breach Procedures
In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, as required by GDPR.
International Transfers
We primarily process data within the UK. If we need to transfer your personal data outside the UK, we will ensure appropriate safeguards are in place, such as UK GDPR adequacy decisions, Standard Contractual Clauses, or other approved transfer mechanisms.
Automated Decision Making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
Children's Data
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children without appropriate parental or guardian consent.
Complaints
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the UK supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk
However, we would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first.
Updates to This Page
We may update this GDPR compliance information from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by email or through a prominent notice on our website.
Contact Us
If you have any questions about our GDPR compliance or how we handle your personal data:
Montrogue Limited
Picadilly Business Centre
Blackett Street
Manchester, England, M12 6AE
Email: info@montrogue.co.uk
Company Number: 14470597