Bluesky PAYE & CIS Payroll

Privacy & GDPR

Privacy Policy & GDPR Compliance

Bluesky PAYE and CIS Payroll (“Bluesky”, “we”, “us”, or “our”) is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all visitors to our website, clients, contractors, subcontractors, and anyone whose personal data we process as part of our PAYE and CIS payroll services.

 

1. Who We Are

Bluesky PAYE and CIS Payroll provides payroll services to businesses, contractors, and subcontractors, including PAYE payroll, CIS payroll, and related compliance support.

Data Controller:
BLUESKY EXEC LTD
Regus Express – Cobham M25 J9/10 Downside, Cobham, England, KT11 3DB
Telephone: 03330499901

 

2. The Personal Data We Collect

We may collect and process the following types of personal data:

a) Information You Provide Directly

  • Full name

  • Contact details (email address, telephone number, postal address)

  • Company details

  • Enquiry information submitted through contact forms

b) Payroll & Compliance Information

For payroll and CIS services, we may process:

  • National Insurance number

  • Unique Taxpayer Reference (UTR)

  • Date of birth

  • Bank account details

  • Employment and engagement details

  • Payment and deduction records

  • Tax status and verification details

c) Website Usage Data

  • IP address

  • Browser type and device information

  • Pages visited and interaction data

 

3. How We Use Your Personal Data

We only use personal data where there is a lawful basis to do so. We process personal data to:

  • Deliver PAYE and CIS payroll services

  • Calculate wages, deductions, and payments

  • Submit required information to HMRC

  • Meet legal and regulatory obligations

  • Respond to enquiries and provide support

  • Improve our website and services

  • Maintain accurate records

 

4. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

  • Contractual necessity – to provide payroll services

  • Legal obligation – to comply with HMRC and employment law requirements

  • Legitimate interests – to operate and improve our services

  • Consent – where required for communications or enquiries

 

5. Sharing Your Information

We only share personal data where necessary and appropriate, including with:

  • HM Revenue & Customs (HMRC)

  • Banking and payment service providers

  • Professional advisers (accountants, auditors)

  • Secure software and payroll system providers

All third parties are required to process personal data securely and in line with GDPR requirements.

We do not sell personal data to third parties.

 

6. Data Security

We take data security seriously. Measures include:

  • Secure systems and restricted access controls

  • Encrypted data storage where appropriate

  • Staff training on data protection responsibilities

  • Regular reviews of data handling processes

We take all reasonable steps to protect personal data from loss, misuse, unauthorised access, or disclosure.

 

7. Data Retention

We retain personal data only for as long as necessary to fulfil our legal and contractual obligations.

Payroll and financial records are typically retained for up to 6 years, in line with HMRC requirements, unless a longer retention period is legally required.

 

8. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure of your data (where applicable)

  • Restrict processing

  • Object to processing

  • Request data portability

To exercise any of these rights, please contact us using the details above.

 

9. Cookies

Our website may use cookies to improve functionality and user experience. You can control cookie preferences through your browser settings. For more information, please refer to our Cookie Policy [if applicable].

 

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites and encourage you to review their privacy policies separately.

 

11. Complaints

If you have concerns about how we handle your personal data, please contact us first so we can resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://www.ico.org.uk

 

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal or operational changes. The latest version will always be available on our website.

 

13. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Bluesky PAYE and CIS Payroll
Email: info@bluesky-exec.com
Address: Regus Express – Cobham M25 J9/10 Downside, Cobham, England, KT11 3DB