GDPR Privacy & Data Protection

Understand how Diane Drake CPA processes and safeguards personal data under GDPR requirements.

European Union GDPR Privacy and Data Protection

Privacy Notice

Last Updated: June 22, 2026

Our accounting practice ("we," "us," or "our") acts as the Data Controller for the personal data processed through this website and during our professional engagements. We are committed to protecting your privacy in compliance with the General Data Protection Regulation (GDPR).

1. Lawful Basis for Processing

We process your personal data under the following legal bases:

  • Contractual Necessity: To perform the accounting or advisory services you hire us to do.

  • Legal Obligation: To comply with statutory financial reporting, anti-money laundering (AML) laws, and tax regulations.

  • Legitimate Interests: To respond to contact form inquiries and optimize website performance.

  • Consent: Where you have explicitly agreed to receive our newsletter or marketing updates.

2. Your Data Subject Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.

  • Right to Rectification: Request that we correct inaccurate or incomplete data.

  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data, provided it does not conflict with legal statutory retention periods for financial records.

  • Right to Restrict or Object to Processing: Limit how we use your data under certain conditions.

  • Right to Data Portability: Receive your data in a structured, machine-readable format.

3. Data Transfers Outside the EEA

If we transfer your data outside the European Economic Area (EEA)—for example, to a cloud software provider based in the US—we ensure it is protected by Standard Contractual Clauses (SCCs) or an adequacy decision recognized by the European Commission.

4. Data Retention

We retain financial documents and personal data only as long as required by national tax and accounting laws (typically between 5 to 10 years depending on the member state).

5. Cookies

Our website uses cookies. You can manage your preferences or withdraw consent for non-essential cookies at any time via our cookie banner.

6. Right to Complain

You have the right to lodge a complaint with a supervisory authority in your country of residence if you believe our processing violates the GDPR.

7. Contact Details

For any privacy requests, please contact us