Privacy notice

This notice covers people who visit saltaccountinggroup.com — browsing the site, filling in a form, or booking a call. It does not cover information we hold about a client's business once we are engaged to work on their books; that is a different relationship, covered on our Security & data page. See how the two differ further down.

Who is responsible for your data

The controller — the organisation responsible for your data under UK GDPR — is Salt Accounting Group, part of Qognition Agency. Enquiry emails are received in the first instance by Qognition Agency, which runs this site on Salt's behalf, and are copied to Salt's own inbox. For anything on this page, email hello@saltaccountinggroup.com.

What we collect, and where from

Three forms on this site collect personal data directly from you. Here is exactly what each one asks for — not a general description.

Contact form (/contact)

Your name, email address, company name, country and what you are interested in, plus an optional message. If you go through the guided quote steps, we also ask for your monthly transaction volume, the accounting software you use, and how many entities you have. Those answers are folded into the message our team receives — they are not stored anywhere as separate fields.

Quote and download requests

Used by the pricing estimator, the practice-calendar subscribe form, and gated guides such as the cost benchmark. Every version asks for your email address. Depending on which one you use, it also carries the country, volume band, add-ons and service you selected — options you clicked, not free text you typed — plus a price estimate our tool calculates from them. The calendar-subscribe version additionally asks for your firm name, which is optional.

Newsletter signup (footer)

Your email address. Nothing else.

We do not collect anything beyond what is listed above through these forms. If you book a call, Cal.com collects what it needs to schedule it — see who else sees it, below.

What happens to it

This is worth stating plainly, because it is unusual: there is no CRM and no database behind these forms. Nobody at Salt logs into a system that stores your details. What actually happens:

• Your form data is sent as a single email, via Resend, to the shared inbox of Qognition Agency, the agency that builds and runs this site for Salt.
• That same internal notification is copied to Salt's own team inbox, so both see every enquiry and a lead is never missed if one inbox is unattended.
• Your email address is set as the reply-to on that internal message, so when someone on the team replies, it goes straight to you.
• For the contact form and every quote or download request, you also receive an automatic email confirming we got it. The newsletter signup does not send you one — it only notifies our team.
• That is the whole pipeline. Your data exists as an email. It is not synced to a CRM, a spreadsheet, a marketing platform or a database, because we do not run one.

The legal basis we rely on

For the contact form, quote requests and calendar bookings, we rely on legitimate interests: you started the conversation by filling in a form, and we need your details to reply to it. We do not use this data for anything beyond responding to what you asked for.

For the newsletter, submitting the form is your consent to be emailed at that address.

For analytics and session recording, we currently rely on legitimate interests to operate and understand the site. We would rather be direct about a gap than paper over it: there is no cookie-consent banner on this site at the time of writing, and the scripts described below load for every visitor, whether or not you have been asked for consent. If that matters to you, your browser's own tracking protection, or an extension, will block them — see exactly what to block in Cookies, below.

Cookies and similar technology

Three tools set cookies or similar identifiers on this site.

Google Analytics 4 and Google Tag Manager

Measure which pages get visited and how. Google Tag Manager (container GTM-P8SM52VJ) is the delivery mechanism; it loads Google Analytics 4 (property G-CSXEL6R4D1), which sets its own cookies, typically named _ga and _ga_*. Google's own privacy policy explains what these do and how long they last.

Microsoft Clarity

Records how visitors interact with pages — clicks, scrolling, session replay — so we can see where a page is confusing. Clarity (project y1bgsnzw8n) sets the cookies CLID, SM, MUID, MR, SRM_B and ANONCHK. Fields on this site that ask for personal information — name, email and the other form fields listed above — are configured to be masked, so what you type into them is not visible in a session recording.

None of these three tools is optional or configurable from this site yet — see the gap noted above under legal basis.

Who else sees it

The processors below can each, in principle, reach some visitor data — as described — in the course of providing the service listed.

International transfers

Several of the processors above are based outside the UK and the EEA, principally in the United States, and your data may be processed there. Where that happens, the processor is contractually required to provide appropriate safeguards for the transfer — such as the UK's International Data Transfer Addendum or the EU Standard Contractual Clauses — in line with UK GDPR Chapter V.

How long we keep it

Enquiry, quote and newsletter emails are kept in our team inbox. We do not currently run an automated deletion schedule against them. If you would like a message deleted, email us and we will remove it. Cookie and analytics data is retained according to each provider's own settings — see Cookies, above.

Your rights

Under UK GDPR you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• ask us to delete it
• object to how we are using it
• ask us to restrict processing
• receive it in a portable format
• complain to the Information Commissioner's Office if you think we have got something wrong

To exercise any of these, email hello@saltaccountinggroup.com. We will respond directly — there is no ticketing system standing between you and a person.

How this differs from Security & data

This notice is about you as a website visitor. Our Security & data page is about a different relationship: what happens to a client's financial records — books, ledgers, bank statements — once we are engaged to work on them. The two pages describe different data, different purposes and mostly different rules. Read this one for what happens when you fill in a form; read that one for what happens once you are a client.

Changes to this notice

We will update this page when what we do changes, and update the date below when we do. This is not a substitute for legal advice — if you need a definitive legal position on how we handle your data, ask a solicitor to review this page rather than relying on it alone.

Last updated: 2 September 2026