Privacy Policy

Information We Collect

We collect information you provide directly when registering for our services, uploading financial documents, or communicating with our support team. This includes personal details, financial records, and usage data.

• Personal Information: Name, email address, phone number, postal address, and identification documents as required by UK financial regulations
• Financial Data: Bank statements, receipts, invoices, tax documents, and other financial records you choose to upload
• Usage Information: How you interact with our platform, including page views, feature usage, and session duration
• Technical Data: IP address, browser type, device information, and cookies for platform functionality
• Communication Records: Customer support conversations, feedback, and any correspondence with our team

We only collect information necessary to provide our financial record management services effectively. You have control over what financial documents you upload and can remove them at any time through your account dashboard.

How We Use Your Information

Your information helps us deliver personalized financial record management services while ensuring compliance with UK data protection laws. We process your data for specific, legitimate purposes.

• Providing secure storage and organization of your financial documents
• Generating financial reports and analytics based on your uploaded data
• Sending important account notifications and security updates
• Improving our platform features based on user behavior patterns
• Complying with legal obligations under UK financial services regulations
• Preventing fraud and ensuring platform security through monitoring systems

We never use your personal financial information for marketing purposes without explicit consent. Our primary focus remains on helping you manage your financial records efficiently and securely.

Data Sharing and Third Parties

We maintain strict control over your data and only share information when necessary for service delivery or legal compliance. Our approach prioritizes your privacy while ensuring platform functionality.

All third-party partners undergo thorough security assessments and must comply with UK data protection standards. We maintain data processing agreements with all external services to ensure your information remains protected.

Your Rights Under UK Data Protection Laws

Under UK GDPR and the Data Protection Act 2018, you have comprehensive rights regarding your personal data. We've made it straightforward to exercise these rights through your account settings or by contacting our team.

To exercise any of these rights, simply contact us using the details below. We typically respond within 30 days and never charge fees for legitimate requests. If you're not satisfied with our response, you can complain to the Information Commissioner's Office (ICO).

Data Security and Protection

Protecting your financial information is our highest priority. We employ multiple layers of security controls and regularly update our systems to address emerging threats.

• Encryption: All data is encrypted both in transit and at rest using AES-256 encryption standards
• Access Controls: Role-based access ensures only authorized personnel can view your information
• Regular Audits: Independent security assessments verify our protection measures quarterly
• Secure Infrastructure: Our servers are hosted in UK data centers with physical security controls
• Backup Systems: Multiple redundant backups ensure your data remains accessible and protected
• Incident Response: Dedicated security team monitors for threats 24/7 with rapid response protocols

We maintain cyber insurance and follow industry best practices for financial data protection. Our team receives regular security training to stay current with evolving threats and protection methods.

Data Retention and Deletion

We keep your information only as long as necessary to provide our services and meet legal obligations. Different types of data have different retention periods based on their purpose and regulatory requirements.

When retention periods expire, we securely delete your information using industry-standard data destruction methods. You can request early deletion of most data types, though some information may need to be retained for legal compliance.

International Data Transfers

While we primarily store data within the UK, some of our service providers operate internationally. We ensure all transfers meet UK data protection standards through appropriate safeguards.

• Standard Contractual Clauses approved by UK authorities for transfers to non-adequate countries
• Adequacy decisions for transfers to countries with equivalent data protection laws
• Regular assessments of international partners' data protection practices
• Encryption requirements for all data transmitted across borders

You can request details about specific international transfers affecting your data. We maintain records of all transfer mechanisms and regularly review their effectiveness.

Cookies and Website Analytics

Our platform uses cookies to enhance your experience and ensure proper functionality. We've categorized these to help you understand their purpose and make informed choices about your preferences.

• Essential Cookies: Required for basic platform functionality, including login sessions and security features
• Analytics Cookies: Help us understand how you use our platform to improve features and performance
• Preference Cookies: Remember your settings and customization choices for a personalized experience
• Security Cookies: Detect suspicious activity and protect against unauthorized access attempts

You can manage cookie preferences through your browser settings or our cookie consent banner. Essential cookies cannot be disabled as they're necessary for platform security and functionality. All analytics data is anonymized and cannot be used to identify individual users.

Updates to This Policy

We review and update this privacy policy regularly to reflect changes in our services, legal requirements, or industry best practices. Significant changes will be communicated through multiple channels.

• Email notifications to all active users for major policy changes
• In-platform notifications highlighting key updates when you log in
• Archive of previous policy versions available upon request
• Clear explanations of what changes mean for your data and rights

Continued use of our platform after policy updates indicates acceptance of the new terms. If you disagree with significant changes, you can delete your account and data before the updates take effect.