Trust, privacy and data use
Your information.
Handled for an agreed purpose.
This page records the service’s current data-handling principles. The website tools run in your browser and do not submit your answers. The operating controller’s legal name and address, final retention periods and processor terms must be confirmed before the public launch or before Paper & Pace accepts client information.
Minimum access
We ask for the least access needed for the agreed job. Where practical, we use limited exports, restricted folders or delegated accounts instead of unrestricted administrator access.
Website fit check and brief builder
The Billing Admin Fit & Cost Check and review-brief builder run in your browser. The page does not send or store your answers. Do not enter personal, confidential or commercially sensitive information.
Software, automation and AI-assisted tools
Holly may use approved software, automation and AI-assisted tools to extract, organise, check, draft and report within an agreed workflow. Client terms must identify material service providers, processors and safeguards before any provider handles personal or confidential information.
Human review and client approvals
Holly checks exceptions against their source. Invoice values, tax treatment, disputes, credit notes, write-offs, bank details, legal escalation and new external actions stay with the client’s authorised people and any qualified adviser the task requires.
Retention and deletion
Project records should be kept only for the agreed purpose and retention period, then returned or securely deleted in line with the client agreement and applicable law.
Privacy enquiries
Email info@paperandpace.co.uk with a privacy question or rights request. Do not include passwords, access codes or unnecessary confidential information in an initial email.
Before accepting client information
The final notice must identify the operating business and address, purposes, lawful bases, processors, international transfers where relevant, retention periods and data-subject rights. A qualified adviser should review it before the first client transfers information.