Privacy Policy

1. Who we are

In this Privacy Policy, “we”, “us” and “our” refer to Navarra & Co.. We provide accountancy and bookkeeping services to businesses and individuals.

You can contact us regarding this policy at:
Email: aga@navarra.gi

2. Information we collect

The personal information we collect will depend on your relationship with us and how you engage with our services. It may include:

• Contact details – such as your name, email address, telephone number, and business details.
• Engagement information – information you provide when you enquire about or engage us (e.g. details about your business, services requested, and correspondence with us).
• Client records – information required to perform accountancy and bookkeeping services (for example, financial records, invoices, bank data provided by you or on your behalf).
• Website and communication data – basic technical data from your use of our website (such as IP address and browser type) and records of emails or messages you send to us.

3. How and why we use personal information

We use personal information for the following purposes:

• To respond to enquiries – when you contact us through our website, by email or by phone.
• To provide professional services – to set up and manage client relationships, deliver accountancy and bookkeeping services, and maintain our records.
• To manage our business – including internal administration, quality control, and management reporting.
• To comply with legal and regulatory obligations – where we are required to keep records or disclose information to competent authorities.
• To protect our rights – for example, in connection with actual or potential legal claims.

We only process personal information where we have a valid legal basis under applicable data protection law, for example: to perform a contract with you, to comply with legal obligations, or where we have a legitimate interest that is not overridden by your rights.

4. How long we keep information

We keep personal information for as long as reasonably necessary for the purposes set out in this policy, and to meet any legal, regulatory, tax, or accounting requirements.

In general:

• Enquiry information is retained for a reasonable period so we can refer back to it if you contact us again.
• Client records are kept for the duration of our engagement and for a period afterwards, in line with professional and legal requirements.

5. Sharing personal information

We may share personal information with:

• Service providers – such as IT, cloud accounting, document storage, or communication providers, who assist us in delivering our services. These providers are required to handle data securely and only on our instructions.
• Professional advisers – for example, lawyers, auditors, or other advisers where reasonably necessary for the purposes described above.
• Authorities and regulators – where we are required to do so by law or regulation, or to protect our rights or the rights of others.

We do not sell personal information.

6. International transfers

In some cases, the service providers or systems we use may involve transferring personal information to other countries. Where this happens, we take appropriate steps to help ensure that your information remains protected in line with applicable data protection requirements.

7. Security

We use a combination of technical and organisational measures designed to protect personal information from unauthorised access, disclosure, alteration or destruction. No system can be guaranteed as fully secure, but we aim to keep our controls under review and proportionate to the risks.

8. Your rights

Depending on the laws that apply to you, you may have rights in relation to your personal information, such as:

• The right to request access to the personal information we hold about you.
• The right to request correction of inaccurate or incomplete information.
• The right to request deletion of your information in certain circumstances.
• The right to object to or request restriction of certain processing activities.
• The right to request transfer of your data to another provider, where applicable.

If you wish to exercise any of these rights, please contact us using the details above. We may need to verify your identity before responding.

9. Third-party websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites and encourage you to read their privacy notices separately.

10. Updates to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “last updated” date.

Last updated: August 2026

11. Contact us

If you have any questions about this Privacy Policy or how we handle personal information, please contact:

Navarra & Co.
Email: aga@navarra.gi