Excellence for Global Accounting, Tax Firms & Businesses
Blogs | Contact Us

We Are Committed to Respecting Your Privacy

Last Updated: 7 October 2026

Who We Are

AcoBloom International Private Limited (“AcoBloom”, “we”, “us” or “our”) knows that you care how information about you is used and shared, and we appreciate your trust in us to do that carefully and responsibly. AcoBloom International is committed to protecting and respecting your privacy.

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our practices regarding your personal data and how we will treat it.

For the purposes of applicable data protection legislation (including the UK GDPR and the Data Protection Act 2018) we may play a role of Data controller or processor based on the nature of processing we perform.

Please refer to the respective privacy notices applicable to the services and products offered by AcoBloom for further details on the processing of personal data.

AcoBloom’s Role as Data Controller or Data Processor

The role AcoBloom performs depends on the processing activity.

Website, enquiries and business contacts, Employees

AcoBloom will generally act as the data controller for personal data collected through its website, enquiries, marketing activities, business administration and employment.

Outsourced client services

When providing accounting, bookkeeping, payroll, tax, audit support or similar, AcoBloom may process personal data according to the client’s documented instructions.

In such circumstances, AcoBloom acts as a data processor, while the client remains the controller.

The respective responsibilities will be documented through applicable contractual arrangements, including data processing agreements where required.

Details of Processing

This section outlines our data processing practices, including the sources of your personal data, the specific purposes for which it is used, and the corresponding lawful basis for processing.

Job Seekers/ Candidates/ Employees:

Data Subject Category Personal Data Used How Do We Collect Your Personal Data? Purpose
Job Seekers / Candidates Identification and contact details, CV/resume, educational qualifications, professional experience, skills, certifications, employment history, interview and assessment information, and other information provided as part of the recruitment process. From you directly when you apply for a vacancy; through job search platforms such as LinkedIn and Naukri; from third-party recruitment agencies; through virtual recruitment events and campus hiring initiatives; and through employee referrals. To assess your suitability for the role, manage your application, conduct online/offline interviews and assessments, communicate with you, and manage the recruitment process through our Applicant Tracking System (ATS).
Employees Identification and contact details, employment and payroll information, educational and professional qualifications, background verification information, employee benefits information, performance-related information, business travel information, and other employment-related records. Directly from you during onboarding and employment; from background-check providers and other authorised third parties, where permitted; and through internal HR and employment systems. To conduct background checks, administer employment, maintain employee records, provide employee benefits such as insurance, manage performance, maintain employee profiles, and arrange and manage business travel.

Prospects, Clients and Client’s Employees:

Data Subject Category Personal Data Used How Do We Collect Your Personal Data? Purpose
Prospects Identification and contact details We collect your personal data through Website Contact Us form, Newsletter Subscription, Social media Enquiries (through LinkedIn, Instagram, Facebook), White paper downloads, we also collect your information from the third-party data brokers like apollo.io

We may conduct events and participate in the events

 We use your information to reach out to you to the enquiries or the service you showed interest in and send the offers and promotions through Outreach platforms.

We may use your information to call you directly to understand your interest.
Clients Identification and contact details We collect your details directly from you To bind a contract with you, Perform the service you have requested like filing personal tax
Client’s Employees Identification, payroll, and employment details We collect your details from our clients To perform the payroll and other services as requested in the contract

Lawful Bases for Processing

Under the UK GDPR, we will only process personal data where we have an applicable lawful basis.

Depending on the circumstances, we may rely on the following lawful bases:

  • Consent
    Where required, we will rely on your consent. This may include certain: Marketing communications; non-essential cookies; Other processing activities for which consent is legally required.

    Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

  • Contract
    We may process personal data where processing is necessary to enter into or perform a contract with you. For example: Providing agreed services; Managing client relationships; Processing service requests; Arranging consultations; Performing contractual administration etc.
  • Legal obligation
    We may process personal data where necessary to comply with a legal or regulatory obligation. This may include: Accounting and financial obligations; Tax requirements; Legal reporting; Regulatory requirements; Responding to lawful requests from authorities etc.
  • Legitimate interests
    We may process personal data where necessary for our legitimate interests, provided that those interests are not overridden by your rights and interests. Our legitimate interests may include: Operating and developing our business; Managing client and business relationships; Improving our services; Maintaining website security; Preventing fraud and misuse; Conducting business administration; Protecting our legal rights; Direct marketing where permitted by applicable law.

    Where we rely on legitimate interests, we will consider the impact on individuals and apply appropriate safeguards.

Cookies and other Tracking technologies

We use cookies while you visit our website. For more information about how we use cookies and the personal data we collect, please refer to our Cookie Policy.

Except for strictly necessary cookies, we place cookies on your device only with your prior consent. When you first visit our website, a cookie banner allows you to accept or reject each category of non-essential cookies.

You may withdraw or change your consent at any time through our cookie settings or your browser settings. Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal.

Obligation to Provide your Data

Where we need to collect personal data by law or under the terms of a contract we have with you (or are entering into with you), and you fail to provide that data when requested:

  • We may be unable to perform the contract we have entered into or are trying to enter into with you (such as delivering services or processing payments).
  • In this case, we may have to cancel the product or service you have with us, but we will notify you if this is the case at the time.

Purpose Change Notification

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you in advance and explain the legal basis which allows us to do so.

Whom Do We Share Your Personal Data?

Job Seekers / Candidates, Employees:

We may share your personal data to add you to the employee benefits and perform the Background verification on you.

Prospects, Clients:

We may use some outreach tools to send you the offers and these platforms and others are SaaS. Technically, they may have a certain level of access to your personal data. However, AcoBloom ensures that third party security and privacy posture are properly assessed, and we execute a proper contract to ensure that they have TOMs to protect your personal data.

Clients and Client’s Employees:

We do not use any sub processor to perform any of the tasks contracted.

General Disclosure Policy:

We may disclose your personal information to any of our employees insofar as reasonably necessary for the purposes set out in this policy.

We do not use your personal information for purposes unrelated to those described in this policy. We do not disclose your personal information to third parties except as set out in this policy — for example, to our group companies, to service providers and sub-processors acting on our behalf or where required by law. We do not share your information with third parties for their own marketing purposes.

We may disclose your personal information:

  • To the extent required by applicable law or regulation;
  • In connection with any ongoing or prospective legal proceedings;
  • To establish, exercise, or defend our legal rights, including for fraud prevention and credit risk reduction; and
  • To any person who we reasonably believe may apply to a court or competent authority for disclosure of that personal information.

Except as set out in this policy, we will not provide your personal information to third parties. Your data will not be sold or shared for third-party marketing purposes.

Children’s Personal Data

Our website and services are primarily directed towards businesses and professionals.

We do not knowingly collect children’s personal data through our website for purposes unrelated to our services.

If we become aware that personal data relating to a child has been collected improperly, we will take appropriate steps in accordance with applicable law.

Automated Decision Making and Profiling

We do not use automated decision-making or profiling algorithms to evaluate your personal information.

Data Retention

We will not retain your personal information for longer than is necessary for the purposes for which it was collected.

The length of time we retain your data will depend on the nature of the information and the purpose for which it was collected. For example:

  • Enquiry and contact data are typically retained for up to 24 months from the date of last contact.
  • Client data is retained for the duration of the engagement and for a period thereafter as required by applicable law (typically 6 years in line with UK statutory requirements).
  • Marketing data is retained until you opt out or withdraw your consent.

We will retain personal data beyond the above periods where:

  • We are required to do so by applicable law;
  • The data may be relevant to any ongoing or prospective legal proceedings; or
  • Retention is necessary to establish, exercise, or defend our legal rights.

Security of Personal Information

We take the security of your personal information seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse, alteration, or disclosure.

All personal information you provide is stored on secure, password-protected, and firewall-protected servers. Access to your personal data is restricted to authorised personnel only on a need-to-know basis.

Where we engage third-party service providers to process data on our behalf, we require them to implement appropriate security standards.

You acknowledge that the transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent to us electronically. You are responsible for keeping any passwords or account credentials you use to access our platforms confidential.

For more information about our data security practices, please visit our Data Security & GDPR page at www.acobloom.com/data-security-gdpr/.

Third-Party Websites

Our website may contain links to third-party websites, platforms or services.

We are not responsible for the privacy practices of third-party websites.

We recommend reviewing the privacy notice of any third-party website before providing personal data.

International Data Transfers

AcoBloom International operates globally, with offices and delivery centres across multiple locations. Information we collect may be stored, processed, and transferred between the locations in which we operate, including the United Kingdom, India, and other locations where we maintain offices in order to enable us to provide our services.

India is not the subject of UK adequacy regulations, where personal data is transferred from the United Kingdom to India, or to any other country not covered by UK adequacy regulations, we put in place the ICO’s International Data Transfer Agreement (IDTA) or UK addendum to the EU Standard Contractual Clauses.

If you would like more information about our international transfer safeguards, please contact us at dpo@acobloom.com.

Rights as per UK GDPR

Under the UK General Data Protection Regulation (UK GDPR), you possess specific rights regarding your personal data:

  • Right to Access: Request access to and receive a copy of the personal data we hold about you.
  • Right to Rectification: Request that we correct any inaccurate, outdated, or incomplete personal data.
  • Right to Erasure: Request the deletion of your personal data where there is no lawful basis for us to continue processing it.
  • Right to Restrict Processing: Request that we restrict or temporarily suspend the processing of your personal data in certain circumstances.
  • Right to Data Portability: Request the transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format.
  • Right to Object: Object at any time to the processing of your personal data where we rely on legitimate interests or where your data is processed for direct marketing purposes.
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
  • Automated Decision-Making: Request human intervention or challenge decisions based solely on automated processing/profiling.

Exercising Your Rights & Contacting the ICO: To exercise any of these rights, please contact our Data Protection Officer / Privacy Team at dpo@acobloom.com. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk if you believe your personal data has not been processed in compliance with the UK GDPR.

Amendments to This Policy

We may update this Privacy Policy from time to time by publishing a revised version on our website. The date of the most recent update will always be shown at the top of this page.

We encourage you to check this page periodically to stay informed of any changes.

Where changes are material, we may notify you by email or by a notice on our website.

How to raise a complaint or concern

  • Complaints to Us: If you have any concerns or wish to make a complaint about how we handle your personal data, please contact our Privacy Office at

    Contact Title: Data Protection Officer
    Email: dpo@acobloom.com
    Phone Number: +44 7411 146 921
    Address: AcoBloom International Private Limited
    B-151, 3rd Floor, Sector 6,
    Noida, 201301, India

    We will investigate and attempt to resolve your concern promptly.

  • Complaints to the Supervisory Authority: You also have the right to lodge a formal complaint at any time with the Information Commissioner’s Office (ICO), the UK regulator for data protection:

Our Alliances