Last updated: 7 April 2026
Sydney CBD Taxation Services ("I", "me", "my") is committed to protecting your privacy. This policy explains how I collect, use, and safeguard your personal information when you visit my website or get in touch with me. I am the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
When you use the contact form on my website, I collect the following personal information that you provide directly:
I do not collect any special category data (such as health information, racial or ethnic origin, or political opinions).
When you visit my website, certain technical information may be collected automatically by my hosting provider, Cloudflare Pages. This may include your IP address, browser type, operating system, referring page, and the date and time of your visit. This information is collected to keep the website secure and to understand general usage patterns.
I use the information you provide through the contact form to respond to your enquiry, to understand your business needs, and to determine whether my services are a good fit for you. If we go on to work together, I may also use your contact details to communicate with you about the services I provide.
Technical information collected by Cloudflare Pages is used to maintain the security and performance of my website and to view basic, aggregated statistics about website traffic.
Under the UK GDPR, I rely on the following legal bases for processing your personal data:
Legitimate interests: I process the information you submit through the contact form in order to respond to your enquiry and to manage my business relationships. I have assessed that this processing is necessary for my legitimate interests and does not override your rights and freedoms.
Consent: By voluntarily submitting the contact form, you are providing your information to me. You can withdraw your consent or ask me to delete your data at any time by contacting me at the address below.
Legal obligation: In some cases, I may need to retain certain information to comply with my legal and regulatory obligations, including those relating to anti-money laundering, tax, and accounting regulations.
I do not sell, rent, or trade your personal information to anyone. However, the following third parties may process your data as part of delivering my website and services:
Formspree: My contact form is powered by Formspree, which processes the information you submit. Formspree acts as a data processor on my behalf. Where your data is transferred outside the United Kingdom, appropriate safeguards are in place, including Standard Contractual Clauses, to ensure your data is protected to a standard equivalent to UK data protection law.
Cloudflare Pages: My website is hosted on Cloudflare Pages. Cloudflare Pages may process technical data such as your IP address to deliver the website to you, provide security protections, and generate basic analytics. Cloudflare Pages acts as a data processor. Where Cloudflare Pages processes data outside the United Kingdom, they rely on appropriate transfer mechanisms including Standard Contractual Clauses.
I may also disclose your information if required to do so by law, regulation, or legal process.
Contact form submissions are retained for up to 12 months from the date of your enquiry, unless we enter into a working relationship, in which case your data will be retained in accordance with my professional and legal obligations. Information relating to clients is typically retained for a minimum of six years after our working relationship ends, in line with professional accounting standards and HM Revenue and Customs requirements.
Technical data collected by Cloudflare Pages is retained in accordance with Cloudflare Pages's data retention policies and is generally held for a limited period.
When your data is no longer needed, it is securely deleted or anonymised.
Under the UK GDPR, you have the following rights in relation to your personal data:
To exercise any of these rights, please contact me at steven@sydcbdtax.com.au. I will respond to your request within one month. If your request is complex, I may extend this by a further two months, but I will let you know within the first month if that is the case.
If you are not satisfied with how I handle your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
My website and services are not directed at individuals under the age of 18, and I do not knowingly collect personal data from children.
I may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.
If you have any questions about this privacy policy or how I handle your personal data, please contact me at steven@sydcbdtax.com.au.