At LekhaWekha, operating under AskUs Consultants LLP, we respect your privacy and are committed to protecting the personal data of our clients, primarily accounting practices, and the end-client data they entrust to us.
01
Our Role: Data Processor vs. Data Controller
Data ControllerYou, the accounting practice, are the Data Controller. You own the data and decide how it should be used.
Data ProcessorLekhaWekha acts as the Data Processor and processes data only on your explicit instructions to perform accounting, tax, and bookkeeping tasks.
02
Information We Collect
We collect information in two ways:
- Directly from you: Contact details such as name, email, and phone number, together with practice details and payment information required to manage our business relationship.
- From your clients: Financial records, tax identification details, bank statements, payroll data, and identification documents provided by you for processing.
03
How We Use Your Data
We process data strictly for the following purposes:
- Providing the agreed accounting and tax services.
- Managing your 20-hour free trial and subsequent engagement.
- Communicating regarding project queries, requirements, or updates.
- Complying with statutory obligations in your jurisdiction, including requirements involving HMRC, IRS, CRA, and ATO workflows.
04
Data Security Protocols
We implement enterprise-grade security measures designed around the principle of Privacy by Design.
Secure accessWe primarily work through Remote Desktop or VPN access, helping data remain within your local or cloud environment, including Xero and QuickBooks Online.
EncryptionData exchanged through our website or approved cloud portals is encrypted using SSL/TLS 1.2 or later.
Physical securityOur India delivery centre uses biometric access, a no-paper and no-USB policy, and continuous CCTV surveillance.
Employee NDAsEvery staff member is bound by a lifelong confidentiality agreement covering client and end-client information.
05
Regional Compliance and Transfers
UK and Ireland
We comply with the UK GDPR and Irish Data Protection Act. As India is treated as a third country, Standard Contractual Clauses and International Data Transfer Agreements are used to maintain appropriate protection for UK and EU data.
United States
We act as a Service Provider under the California Consumer Privacy Act and California Privacy Rights Act. We do not sell or share personal information for marketing purposes.
Canada
We adhere to the ten fair information principles of PIPEDA, including accountability and limiting collection to information necessary for accounting purposes.
Australia and New Zealand
We follow the Australian Privacy Principles and New Zealand Privacy Act 2020, including secure handling of Tax File Numbers and other sensitive identifiers.
06
Data Retention
We do not retain end-client data longer than necessary.
- Trial data: Deleted within 30 days if a formal engagement is not signed.
- Active clients: Data is retained for the duration of the contract. Upon termination, data is returned or destroyed according to your instructions.
07
Your Rights
Depending on your location, you and your clients may have the following rights:
AccessRequest access to personal data we hold.
RectificationRequest correction of inaccurate information.
DeletionRequest deletion under the right to be forgotten, where applicable.
Restriction or objectionRestrict processing or object to applicable international data transfers.
08
Cookies and Tracking
Our website uses cookies to improve user experience and analyse traffic. You can manage cookie preferences through your browser settings and the consent controls available on our website.
09
Changes to This Policy
We may update this policy periodically to reflect changes in international law, regulatory requirements, or our processing practices. We will communicate significant changes through email or a notice on our website.
10
Contact Us