FINOTECH / YOUR INFORMATION
Privacy, in plain English.
What we collect, why we use it and the choices you have when you visit our website or contact us.
PRIVACY POLICY · LAST UPDATED 27 OCTOBER 2026
A quick overview
This is a company information website. There are no visitor accounts or contact forms, and we do not use analytics or advertising trackers. If you email us, we use your details to handle your message. Our hosting and email providers also process information needed to deliver and protect their services.
01. Who we are
Finotech Limited is the controller responsible for the personal information described in this policy. We are registered in England and Wales under company number 10761117. Our registered office is 5 The Mall, London W5 2PJ, United Kingdom. Our TIN is 7311025296.
You can contact us by email at info@finotech.com. For data protection matters, you can also email dataprotecion@finotech.com. You may use either address for a privacy question or request.
This policy covers the Finotech corporate website and related correspondence. It does not describe all processing within the Unilink service (opens in a new tab). Unilink users and customers should refer to the privacy information and contractual documents provided for that service.
We handle personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended, including by the Data (Use and Access) Act 2025. The Privacy and Electronic Communications Regulations (PECR) also apply where relevant.
02. Information we use
- Information you send us: your name, email address, company or role, and the contents of your message and attachments. We receive this directly from you, or from someone corresponding with us on your behalf.
- Technical information: when your browser requests a page, our hosting infrastructure receives information such as your IP address, requested URL, request time, browser information and technical or security events. Access and error logs may record this information.
- Privacy requests and complaints: your contact details, the nature of your request, relevant correspondence and, where reasonably necessary, information to verify your identity.
You do not need to submit personal details to read this website. Providing information by email is voluntary, but we may be unable to respond to or resolve an enquiry without the relevant details. Please avoid sending sensitive personal information unless it is necessary for your enquiry.
This corporate website is intended for a business audience and is not directed at children.
03. Why we use it
| Purpose | Lawful basis under UK GDPR |
|---|---|
| Responding to enquiries and managing business correspondence | Our legitimate interests in answering questions, communicating with business contacts and managing business relationships (Article 6(1)(f)). |
| Taking steps you request before entering a contract, or performing a contract with you | Contractual necessity, where you personally are the contracting party and the processing is necessary for that purpose (Article 6(1)(b)). |
| Delivering the website, diagnosing faults and preventing misuse | Our legitimate interests in operating a reliable website and protecting our systems and visitors (Article 6(1)(f)). |
| Responding to data protection requests and complaints, and meeting legal duties | Compliance with applicable legal obligations, including duties under data protection law (Article 6(1)(c)). |
| Establishing, exercising or defending legal claims | Our legitimate interests in protecting our legal rights (Article 6(1)(f)), or a legal obligation where applicable (Article 6(1)(c)). |
When relying on legitimate interests, we consider the necessity of the processing and its impact on your rights and interests. You can object to this processing as explained below. Contacting us does not subscribe you to marketing emails.
We do not use information collected through this website for profiling or solely automated decisions that produce legal or similarly significant effects on you.
04. Who receives it
Access is limited to people and providers who need information for the purposes described in this policy. Our service providers include:
- Amazon Web Services (AWS): hosting and related infrastructure for the Finotech website, operated in the AWS US East region in the United States. This can involve technical request, access and security information.
- Google: our email service, which processes the contents, attachments and associated metadata of messages sent to and from our mailboxes.
- Other necessary recipients: IT support and professional advisers where needed, and regulators, courts or public authorities where disclosure is legally required or necessary to protect legal rights.
Providers acting as processors must process information on our instructions under appropriate data protection terms. Some recipients, such as professional advisers or public authorities, may act as independent controllers. We do not sell your personal information.
05. International transfers
Our website is hosted by AWS in the United States, and Google operates its email service internationally. Personal information described in this policy is therefore processed outside the United Kingdom, including in the United States.
Where a transfer is restricted under UK data protection law, we rely on an authorised mechanism. For transfers to the United States this is the UK Extension to the EU-US Data Privacy Framework, where the provider holds a current certification, or otherwise the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s standard contractual clauses contained in the provider’s data processing terms, together with the assessments required by law.
You can email info@finotech.com to request information about the transfer arrangements relevant to your information and a copy of applicable safeguards, with confidential information redacted where necessary.
06. How long we keep it
We retain personal information for as long as it is needed for the purpose for which it was collected, taking account of legal obligations and any need to establish, exercise or defend legal claims.
- Enquiries and correspondence: up to 3 years after our last exchange with you. Correspondence that leads to a contract is kept for the life of that contract and for 6 years afterwards, in line with the limitation period for contractual claims in England and Wales.
- Technical logs: up to 12 months, after which they are deleted or anonymised. Logs connected to a security incident may be kept for as long as the investigation and any resulting claim require.
- Requests and complaints: a record of the request or complaint and our response is kept for 3 years after the matter is closed, so that we can show how it was handled.
Information that is no longer needed is deleted or anonymised. Backup copies of email may remain for up to 90 days before they are overwritten. We may keep information for longer where the law requires it or where it is needed in connection with a legal claim.
08. Your rights
Depending on the circumstances and the lawful basis for processing, you may have the right to:
- Ask for access to your personal information and a copy of it.
- Have inaccurate information corrected and incomplete information completed.
- Ask for your information to be erased or its use restricted.
- Object to processing based on legitimate interests for reasons relating to your particular situation. We must stop unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for legal claims.
- Receive information you have provided in a portable format where the legal conditions apply, including automated processing based on consent or a contract.
- Withdraw consent at any time where we rely on it, without affecting the lawfulness of processing before withdrawal.
To exercise a right, email info@finotech.com. We may ask for information reasonably necessary to verify your identity or clarify a request. We normally respond without undue delay and within one calendar month, subject to any extensions or pauses permitted by law. If an extension is needed, we will explain it within the applicable period.
Requests are normally free of charge. If a legal exception permits a fee or refusal, we will explain the reason and your options. These rights are not absolute; we will explain any limitation that applies to your request.
09. Questions and complaints
If you have a concern about how we use your personal information, email info@finotech.com. Please describe what happened and the outcome you are seeking so we can investigate.
We will acknowledge a data protection complaint within 30 days, take appropriate steps to investigate, keep you informed and tell you the outcome without undue delay. The acknowledgement period is not a promise to conclude every investigation within 30 days.
You also have the right to complain to the Information Commission, the UK data protection regulator (formerly the Information Commissioner’s Office, ICO). You can find information and submit a complaint at ico.org.uk/make-a-complaint/ (opens in a new tab). This does not affect your other legal rights or remedies.
10. Changes to this policy
We may update this policy when our practices or legal requirements change. The date at the top shows when it was last updated. Where a material change requires additional information or notice, we will provide it as required by law.
Get in touch with Finotech