Privacy Policy

Boki Accounting (“we”, “us”) provides remote bookkeeping, accounting and finance support to businesses in the United Kingdom and the United States. We are based in Rawalpindi, Pakistanand are the controller of the personal information described in this policy. The exception is client records: when we keep a client’s books or run their payroll, we normally handle the personal information in those records (for example about their employees, customers and suppliers) as a processor acting on the client’s instructions, and the client remains the controller.

For any privacy question or request, email raza@bokiaccounting.com.

• Enquiry details you submit through our contact form: your name, email address, phone number and company name.
• Booking details you enter when you book a call through our booking calendar (provided by Zoho Bookings), such as your name, email address, chosen time slot and any notes you add.
• Correspondence: emails, messages and call notes when you contact us or we work together.
• Client information you share once you engage us, such as transaction records, invoices, bank and card statements, payroll information and access to your accounting software. We use it only to perform the agreed work.
• Business contact information from public sources when we approach a business that we think may benefit from our services (see “Business contacts we approach directly” below).
• Basic technical data (such as IP address, browser type and pages requested) that our hosting provider records automatically in server logs to keep the site running and secure.

Under UK data protection law (UK GDPR) we must have a lawful basis for each use:

We do not sell your personal information, and we do not use it for automated decision-making or profiling that has legal or similarly significant effects on you.

If we think our services may be relevant to your business, we may record your name, job title, business email address or phone number, company name and website, and public information about your company. We collect this from publicly available business sources such as company websites, the Companies House register, professional networking profiles and published news. We do not buy contact lists, and we do not collect sensitive information.

We use this information to send you a relevant, infrequent message about our services. We rely on our legitimate interests and have balanced them against yours by contacting business addresses only, keeping messages relevant and making it easy to opt out. If you ask us to stop, we will. We keep only the minimum needed to make sure we don’t contact you again.

This website does not use analytics, advertising or tracking cookies. If you use the booking calendar, Zoho Bookings may set cookies that it needs for the booking to work. Its privacy policy explains how it uses them. If we add analytics in future, we will update this policy first and ask for your consent where the law requires it.

We share personal information only with service providers who help us run our business, and only as far as they need to provide their service:

We may also disclose information where the law requires it, or to protect our legal rights.

Our team works remotely from Pakistan, and some of our service providers are based in, or store data in, the United States and other countries. This means your information may be accessed and processed outside the UK. Where this happens, we rely on recognised safeguards, such as the transfer terms in our providers’ data processing agreements, and we limit access to the people who need it to do their work.

Financial and business information shared with us during an engagement is treated as strictly confidential and is used only to deliver the agreed services. Access is limited to the people directly working on your account. We never use client information in marketing, case studies or examples without your written permission, and any approved example is anonymised.

We take reasonable technical and organisational measures to protect your information against unauthorised access, loss or misuse. We keep it only for as long as we need it:

After that, information is securely deleted or anonymised.

You can ask us to access, correct or delete your personal information, to restrict how we use it, or to transfer it to you or another provider. You can object to processing based on our legitimate interests, and you can object to direct marketing at any time. We will always stop when you object. To make a request, email raza@bokiaccounting.com or reply to any message from us. We will respond within one month.

To complain about how we have handled your information, email raza@bokiaccounting.com. We will acknowledge your complaint within 30 days and tell you the outcome without undue delay.

If you are in the UK, you can also complain to the Information Commissioner’s Office at ico.org.uk. We’d appreciate the chance to put things right first.

If you are in the United States, we do not sell your personal information or share it for targeted advertising, and you can make the requests above using the same email address.

Our services and this website are intended for businesses and are not directed at children.

We may update this policy to reflect changes in our services, providers or the law. The “last updated” date at the top of this page shows when it last changed.