Skip to main content

Y M Shah & Co

Confidentiality and privacy

Your privacy comes first

How we handle your information, from the first enquiry to ongoing compliance.

Handling information

How your information is handled

You decide what to share, and when. An initial enquiry can be made using an alias, and we ask for identification and financial details only when the work requires them.

Information is used only for the purpose of your engagement and is shared within the firm on a need-to-know basis. As Chartered Accountants, we are bound by the duty of confidentiality in the professional Code of Ethics.

NDA on request

The NDA process

Ask at any stage

You may request a non-disclosure agreement before you share any details.

We prepare or review

We can provide our form of NDA or review one you propose.

Signed before details

The agreement is signed first, and only then do we ask for sensitive information.

Copies retained

Each party keeps a signed copy for reference.

Data security

How data is kept secure

Documents are shared through channels agreed with you, and access is limited to the people working on your matter.

In line with our Privacy Policy, information sent through our website is encrypted in transit, and sensitive client documents stored electronically are encrypted at rest. Access is role-based, so staff see only what their work requires, and staff accounts on client data systems use multi-factor authentication. Physical files are kept in locked cabinets, and all staff are trained on their confidentiality obligations.

The full details are in our Privacy Policy.

Records are kept only for the periods required by tax, GST, company law and professional standards, which are set out in the Privacy Policy. After that period, physical documents are shredded and digital files are deleted from our systems. If you ask for your documents to be returned, we will return them, except for records we are legally required to retain.

Access

Who sees what

  • Your dedicated contact: sees the full picture of your engagement and is your single point of communication.
  • Team members: see only the documents needed for the task assigned to them.
  • Tax and GST authorities, banks or other third parties: receive information only where filings or legal requirements make it necessary, and with your knowledge.
  • Brands, agencies and the media: do not receive information about you from us.
Get in touch

Have a question about privacy?

Ask us before you share anything. We are glad to explain how your information will be handled.

Information is general in nature and not a substitute for professional advice.
This website is for information only and does not constitute solicitation or advertisement.