Privacy Policy

Advisor Toolkit is a service of THINKERZ LTD, trading as Thinkerz Consulting (“Thinkerz”, “we”, “us”). THINKERZ LTD is the operator of this website and the data controller responsible for personal data processed through it.

THINKERZ LTD is a private limited company registered in Scotland under company number SC778478. Registered office: Clyde Offices, 2nd Floor, 48 West George Street, Glasgow, Scotland, G2 1BP. Privacy enquiries may be sent to hello@thinkerz.co.uk or raised through our contact page.

1. Information we collect

When you submit an enquiry, we may collect:

• your name, firm and professional role;
• your email address and, if supplied, telephone number;
• the client or business name, if you choose to provide it;
• the type of support required and the stage of the transaction;
• the description you provide about the matter and your preferred contact method;
• the date and time of submission and normal technical/security logs generated by the platform;
• technical security signals processed through Cloudflare Turnstile when you use the public enquiry form.

The initial enquiry form does not accept document uploads. Please do not include special-category personal data, confidential documents or more client-identifying information than is necessary to explain the enquiry.

If you use the free Transaction Readiness Check, we also store the adviser name and firm, the client/business name entered for the report, the answers given to the 28 assessment questions, the generated readiness result, and normal technical/security logs. Advisor Toolkit does not require or collect the client’s email address for this tool; if the assessment is shared, the adviser shares the secure link through their own communication channel.

2. Information about clients and other people

Accountants and other advisers may provide information about a client or another person. You should only provide information that you are entitled to disclose for the purpose of discussing the proposed work. Where possible, use a business description or reference rather than unnecessary personal information at the initial enquiry stage.

If an engagement proceeds, the handling of client information and transaction material may also be governed by the relevant engagement terms, confidentiality arrangements and any data-processing requirements agreed for that work.

3. Why we use personal information

We use personal information to:

• review, respond to and administer an enquiry;
• decide whether a matter falls within our capability and discuss scope, deliverables and fees;
• perform and administer an engagement where one is agreed;
• maintain business records and protect our legal rights;
• meet legal, regulatory, tax, accounting or other obligations that apply to us;
• operate, secure and improve the website, enquiry process and Transaction Readiness Check.

4. Lawful bases

Depending on the circumstances, our lawful bases under UK data-protection law are:

• Legitimate interests — responding to professional enquiries, administering our business, maintaining appropriate records and protecting the security and integrity of our services.
• Steps before entering into a contract and performance of a contract — where you or your firm asks us to scope work or an engagement is subsequently agreed.
• Legal obligation — where we must retain or use information to comply with an obligation imposed by law.
• Consent — only where we expressly ask for consent for a particular optional use. The privacy acknowledgement on the enquiry form is confirmation that you have read this notice; it is not a marketing opt-in.

5. Marketing

We do not use an Advisor Toolkit enquiry as consent to add you to a marketing list. If we introduce optional marketing communications, we will provide a separate choice and the ability to opt out.

6. Storage, service providers and sharing

Enquiry information is stored within the systems used to operate Advisor Toolkit and is available only to authorised Thinkerz personnel who need it. We use service providers to host the website and application, store enquiry and readiness-check records, provide security and deliver operational email notifications. This includes Base44 as the application platform and Cloudflare Turnstile as the anti-abuse service used on public submission forms.

We may disclose information where reasonably necessary to professional advisers, insurers, authorities or other parties in connection with an engagement, a legal obligation, the establishment or defence of legal claims, or with your knowledge where the transaction requires collaboration with the client or other advisers. We do not sell personal information.

7. International transfers

Some technology providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we expect the relevant provider or arrangement to use an appropriate lawful transfer mechanism. You may contact us if you require further information about the providers used for a particular engagement.

8. Retention

Where an enquiry does not become an engagement, we normally retain the enquiry record for up to 24 months from the last substantive contact, unless there is a legitimate reason to retain it for longer, for example to deal with a complaint, dispute or legal obligation.

Where an engagement proceeds, engagement records are retained for the period reasonably required for the work, professional record-keeping, tax and accounting purposes, legal claims and other applicable obligations. The appropriate period may vary according to the nature of the engagement.

9. Security

We use reasonable technical and organisational measures intended to protect information against unauthorised access, loss or misuse. Public submission forms, including creation of a Transaction Readiness Check, use Cloudflare Turnstile to distinguish legitimate visitors from automated abuse. Cloudflare processes browser and connection signals for that security purpose and does not receive the contents of the submitted form through Turnstile. No internet service can be guaranteed completely secure. For that reason, the public enquiry form is deliberately limited and should not be used to send confidential transaction documents. More information about Turnstile is available in Cloudflare’s Turnstile Privacy Addendum.

10. Your rights

Subject to the conditions and exemptions in UK data-protection law, you may have rights to:

• request access to personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information in appropriate circumstances;
• object to or restrict certain processing;
• receive certain information in a portable format;
• withdraw consent where a particular use relies on consent.

To exercise a right, email hello@thinkerz.co.uk. We may need to verify your identity before acting on a request.

11. Complaints

If you have a concern, please contact us first so that we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk.

12. Cookies

We do not deliberately use advertising or behavioural-tracking cookies on Advisor Toolkit. Essential technical or authentication technologies may be used by the platform, including for the private administration area, and Cloudflare Turnstile is used as a strictly necessary anti-abuse measure on public submission forms. See ourCookie Policy.

13. Changes to this policy

We may update this policy where the service, our providers or applicable law changes. The date shown at the top of this page is the date of the latest revision.