If that question is phasing you, youre in for a treat for the rest of the application.
Heres what I answered in my submission which got approved. We're a really small business, its just me with no staff. I've got my UKIMS number, but yet to use it in anger. I'll probably just put a tickbox on my online checkout that appears for any BT** postcodes which gets them to confirm they will use the products in NI and not pass them into ROI and store that confirmation in my orders database.
Obviously these answers will be business specific, but I include my answers so you can see the level of detail that got approved. No idea if I over or under answered, but it went through.
How do you want to tell us about internal controls the business uses to prevent, detect and correct errors and to prevent and detect illegal activities within the organisation
The business is run by myself and I do not have any staff, therefore it will not be necessary to monitor for illegal activity. Our online store will produce as part of the month end reports, a list of orders that were sent to NI. A manual check to verify that no NI orders have been missed will be carried out as part of the month end processing, cross referencing the orders to the electronic email copies of the customer confirmation of NI end use, or confirmations stored in our database. Any corrections will be made at this point at the end of every month.
How does the business conduct cross checks between records relating to purchases, sales, stock control and movement of goods
All sales of goods from any sales channel are allocated an Order ID. When we email the customer to verify the goods are for end use in NI, we will include the Order ID, and it will be present in the reply and the reply indexed by Order ID in our local filesystem to aid review following shipment. All DHL and Royal Mail shipments use the Order ID as our reference number and the shipment records/delivery notes can be searched by Order ID to locate all shipment details for the order.
Informing HMRC of any compliance difficulties when these are discovered
I do not have any members of staff. I will be carrying out all actions regarding the UKIMS. Should I be unable to meet any of the compliance requirements in the future, or any of the material things I have disclosed to you in this application were to change, I would contact HMRC for further advice.
Tell us about the procedures to store and protect physical and digital information from unauthorised access, destruction and data loss
We have a local electronic data store (hard disk on main computer in office) and a paper record store (at business premises). Full customer order information is held on our online web store for 16 months after which VAT Invoices, Delivery Notes, Credit Memos and Commercial Invoices are archived into the electronic data store as PDF's and the order removed from the online store. Electronic records are synchronised to Microsoft One Drive for immediate disaster recovery onto a backup PC if required. Electronic records are backed up every month to a USB stick which is held at the business premises. These records are kept for 12 months and then erased. Electronic records are also backed up every year to USB stick which is held at the business premises (in a key safe in an outbuilding) and are kept for 10 years and then erased. Responses from our customers confirming goods are for use in NI will be kept in our electronic data store and backed up according to the above rules.
Tell us about the records, systems and controls in place that enable the business to accurately declare goods not at risk
We are a small business. Last financial year we only had 19 shipments to Northern Ireland. The majority were to Private individuals. All sales are registered in our online store at the time of purchase by the customer completing checkout online on our website, or the order is imported from eBay where the purchase was made. The store is a web application based on the Magento platform. I access the store via a web browser. Sales records are kept in the online store after fulfilment for 16 months at which point they are archived as a series of electronic VAT Invoices, Delivery Notes, Credit Notes and Commercial Invoices (includes HS Code, weight and customs description) and stored as PDFs in a local filesystem. Due to the low volume (19 last financial year) of expected shipments, we will adopt a manual approach to verifying that the items we sell to Individuals and Businesses in Northern Ireland are for NI use only. We will email each customer at the time of ordering using a standard template, asking them to reply to confirm that the goods are for end use in NI, and explaining any terms of the Windsor Framework they need to be aware of. We will store copies of the replies in a local filesystem, indexed by the Order ID. We will not ship/declare any items not at risk until we have received this positive reply. We may choose to automate this declaration as part of our online store checkout if sales volumes to NI significantly increase. All orders are shipped to our customers in NI by either Royal Mail or DHL. We do not courier/transport any items ourselves. Delivery notes, VAT Invoices, Credit Notes and Commercial Invoices can be re-produced for any order in the last 16 months from the online store, or from the PDF archive on our local filesystem for older orders. Details on all Royal Mail shipments are downloaded at the end of every month in Microsoft Excel format, including the delivery addresses, tracking information. and are stored in our local filesystem. These are cross linked to Order ID. They can also be accessed online through Royal Mail’s Click and Drop portal. Details on all DHL shipments are printed on the day of shipment including the delivery addresses, tracking information are stored in paper copy in the local paper binders labelled "Proof of postage". These are cross linked to Order ID. They can also be accessed online through DHL’s myDHL+ portal. Proof of delivery can be obtained from DHL/Royal Mail online. All electronic and Paper records are held for 10 Years before being erased/shredded. Electronic data is backed up onto USB sticks monthly, kept for 12 months and one backup each year is kept for 10 years. Electronic data is also backed up in real time to Microsoft OneDrive. Any paper records are stored at the company premises.