LEGAL • PRIVACY

Privacy Policy

Last updated: March 2025

Finpendle is committed to protecting your personal data and being transparent about how it is used. This Privacy Policy explains what information we collect, why we collect it, and how you can exercise your rights.

1. Data We Collect

We collect personal information in the following ways:

Contact forms: name, email address, and the message content you provide
Cookies and analytics: usage data such as pages visited, time on site, and device type (subject to your cookie preferences)
Communications: if you email us directly, we retain those records for correspondence purposes

We do not collect sensitive categories of personal data, payment card information, or data relating to children.

2. How We Use Your Data

Responding to enquiries and messages submitted through our contact form
Understanding how visitors interact with our website (analytics, where permitted)
Improving the quality and relevance of our content and services
Communicating with you about topics you've raised with us

We do not sell personal data to third parties. We do not use your data for unsolicited marketing without explicit consent.

3. Legal Basis for Processing

We process your data on the following grounds:

Legitimate interest: for responding to direct enquiries and improving our website
Consent: for analytics and non-essential cookies, where you have opted in via our cookie preferences tool
Contractual necessity: where processing is required to fulfil a service engagement

4. Data Retention

Contact form enquiries are retained for up to 24 months from the date of submission. If an ongoing business relationship develops, records are kept for the duration of that relationship plus a reasonable period thereafter for legal and administrative purposes. Analytics data is retained in accordance with the policies of the analytics provider used.

5. Third-Party Services

We may use the following categories of third-party tools that process data on our behalf:

Website analytics platforms (e.g. Google Analytics, subject to your cookie consent)
Hosting and infrastructure providers
Email communication tools

These providers are contractually required to handle data in compliance with applicable privacy laws.

6. Data Protection Measures

Data is transmitted over encrypted connections (HTTPS)
Access to personal data is restricted to authorised personnel only
We do not store full payment details on our servers
In the unlikely event of a data breach, affected individuals will be notified as required by law

7. Your Rights

You have the following rights regarding your personal data:

Access: request a copy of the data we hold about you
Rectification: ask us to correct any inaccurate data
Erasure: request deletion of your data where there is no compelling legal reason to retain it
Portability: receive your data in a structured, machine-readable format
Objection: object to processing based on legitimate interest
Withdraw consent: at any time, for consent-based processing (e.g. cookies)

To exercise any of these rights, please reach out through our Contact page. We will process your request promptly.

8. Cookies

We use cookies to help us understand how the site is used and to deliver relevant content. You can manage your cookie preferences at any time via our Cookie Policy page.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may: avoid filling out contact forms, account registrations, or any data-submitting features; disable cookies through your browser settings (see our Cookie Policy for more details); contact us directly to request the deletion of any previously shared personal data. We respect your privacy choices. If you would like us to delete your data, please reach out via our Contact page. We will process your request promptly.