Stephen M.S. Lai & Co CPA Limited GDPR Privacy Policy

This website is owned and operated by Stephen M.S. Lai & Co CPA Limited (“we”, “us”, “our”, and “ourselves”) trading as Stephen M.S. Lai & Co CPA Limited. For the purposes of the Data Protection Act 1998 (Act), the data controller is Stephen M.S. Lai & Co CPA Limited.

In this Privacy Policy you’ll find information on how we treat the data that we collect from visitors, in relation to your use of our website and any products or services we supply to you.

Important information

Our website is not intended for children and we do not knowingly collect data relating to children.

This Privacy Policy supplements the other policies (including our terms of use (Terms)) and is not intended to override them.

Stephen M.S. Lai & Co CPA Limited is the controller and is responsible for your personal data.

We have appointed a Data Privacy Manager (DPM). If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact our DPM in writing, either:

    • by email to:
    • by post to: Data Privacy Manager, Stephen M.S. Lai & Co CPA Limited, Temple Court, 5 High Street GU21 6BH, Woking, Surrey, United Kingdom.

You have the right to make a complaint at any time to the ICO ( We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Your duty to inform us of changes – it is important that the data we hold about you is accurate and current, therefore please keep us informed of any changes to your personal data.

Third-party links - our website may include links to third-party websites, plug-ins and applications. By clicking on these links or enabling connections you may be allowing third parties to collect or share your personal data. We have no control of these third-party websites, plug in or applications and are not responsible for their privacy policies, therefore you should also read their privacy policies to understand what personal data they collect about you and how they use it.

The data we collect about you

We may collect, use, store and transfer the types of personal data about you including contact data, financial data, identity data, technical data, user data and transaction data.

We also collect, use and share aggregated data. However, if we combine aggregated data with your personal data so that it can directly or indirectly identify you, we treat this as your personal data.

We do not collect any special categories of personal data.

Failure to provide personal data - If we are required by law, or under the terms of a contract we have with you, to collect your personal data and you fail to provide it, we may not be able to enter into, or perform the contract with you and, we may have to cancel a product or service. We will notify you of this at the relevant time.

 We at Stephen M.S. Lai & Co CPA Limited are committed to:

• Keeping your data safe

• Giving you control and flexibility

• Providing useful and timely information

We take seriously the protection of your privacy and confidentiality. We understand that all visitors to our website are entitled to know that their personal data will not be used for any purpose unintended by them, and will not accidentally fall into the hands of a third party, and should you feel to be in disagreement with any of the points mentioned above, unfortunately the only recourse is to leave our website immediately.

It is our duty to inform you of your rights and obligations in relation to the processing and control of your personal data. In line with this duty we request that you read the information provided at

Keeping your Data Safe

We are always committed to respecting and safeguarding your personal data, and will always make sure that any data sharing required by law with other organisations, such as government, will always be done securely and limited to only the data requested. When asking third parties to process your data on our behalf we’ll make sure they always apply similar high standards to those applied by Stephen M.S. Lai & Co CPA Limited.

Protecting your information

When placing an order with us, you can rest assured that we will always use a secure server. All personal and credit card information is encrypted using Secure Sockets Layer (SSL) technology before it is sent to us using the internet.

Our Data Protection policy is implemented within our internal procedure in order to offer the best possible protection against unauthorised and improper use of your personal data.


These are small files which are stored on your computer. They are designed to hold a small amount of data specific to a particular client, the information stored recognises the next time you visit the site.

By remembering information from past visits, cookies enable us to improve the overall experience of our website users. Cookies will remember certain information you enter, which means you will not to enter the same information each time you visit our website.

We use cookies to monitor the clients’ behaviour on our website, this will allow us to improve our service by offering more products that are most visited by our website users.

How we use your personal data

We will process the collected data in order to fulfil the services you have requested, we will also use your information for market research purposes and credit control purposes.

We may also use this information to notify you about our services and products, legal developments and any other relevant products that we feel is connected to the services you have obtained from us.

Furthermore, data can also help us adjust the way we provide service, especially when dealing with vulnerable customers, and we never sell products or services to children, if you are under 18, you may use our website only with consent from a parent or guardian and under their supervision.

The bases on which we process information about you

It is our obligation under the law to establish and determine which of the six defined bases we process different categories of your personal information.


Through certain actions when otherwise there is no contractual relationship between us, such as when you browse our website or ask us to provide you more information about our products and services, you provide your consent to us to process information that may be personal information.

Wherever possible, we aim to obtain your explicit consent to process this information, for example, by asking you to agree to our use of cookies.

Sometimes you might give your consent implicitly, such as when you send us a message by e-mail to which you would reasonably expect us to reply.

Except where you have consented to our use of your information for a specific purpose, we do not use your information in any way that would identify you personally. We may aggregate it in a general way and use it to provide class information, for example to monitor the performance of a particular page on our website.

If you have given us explicit permission to do so, we may from time to time pass your name and contact information to selected associates whom we consider may provide services or products you would find useful.

We continue to process your information on this basis until you withdraw your consent or it can be reasonably assumed that your consent no longer exists.

You may withdraw your consent at any time by instructing However, if you do so, you may not be able to use our website or our services further.


When creating an account with us, or when we receive an order, or any contact made via e-mail, will involve the collection of certain personal data, we may use this data in order to:

• verify your identity for security purposes

• sell products to you

• provide you with our services

• provide you with suggestions and advice on products, services and how to obtain the most from using our website

This information is processed on the basis that there is a legal contract between us, or that you have authorised the use of the information entering into a legal contact with us.

We shall continue to process this information until the contract between us ends or is terminated by either party under the terms of the contract.

Legal Obligation

As a regulated agent, we must process certain information in order to comply with statutory obligation.

For example, we may be required to give information to legal authorities if they so request or if they have the proper authorisation such as a search warrant or court order.

This may include your personal information.

In an event where you fall short of our risk assessment criteria, and refuse to comply with our due diligence policy, or act in a suspicious way, we are under legal obligation to share your information with government bodies such as the National Crime Agency (NCA).

Vital Interests

We may process your information in an event where the processing is necessary to protect someone’s life.

Public task

We may process your data if processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.

Collection of your personal information

Any disclosure of personal data is not required for the purpose of browsing our website. However, any registrations or applications submitted when you place an order, or any contact made via e-mail, will involve the collection of the following data, which will be used to contact you in connection with your query:

• Full name

• Date of birth

• Nationality

• Gender

• Home address

• Telephone number

• Email address

• Billing and credit/debit card information

• Occupation

Please note we cannot accept any responsibility for the way in which your personal information is used in an event where you choose to share it publicly on any of our social media platforms, where the information can be collected by uncontrolled third parties and used for any purpose.

Retention period for personal data

Except as otherwise mentioned in this privacy notice, we keep your personal information only for as long as required by us:

• to provide you with the services you have requested

• to comply with other law, including for the period demanded by our tax authorities

• to support a claim or defence in court

How you can complain

If you are not happy with our privacy policy or if you have any complaint, then you should tell us by email. Our address is

If a dispute is not settled, then we hope you will agree to attempt to resolve it by engaging in good faith with us in a process of mediation or arbitration.

If you are in any way dissatisfied about how we process your personal information, you have a right to lodge a complaint with the Information Commissioner's Office. This can be done at

Changes to this Privacy Policy

Any changes to this policy will be posted on this page, Stephen M.S. Lai & Co CPA Limited reserves the right to change this Privacy Policy when required by law or at any time we deem necessary, following any changes, you are deemed to have accepted the terms of the Policy if you continue to use our website.