Privacy policy
This policy explains how Finvoro Solutions Ltd uses personal data about people who visit www.finvoro.co.uk, send us an enquiry, or are contacts at the businesses we work with. Workers we pay have their own Worker Privacy Notice, which we send them when they join.
1. Who we are
Finvoro Solutions Ltd (company number 17446119) is the controller of your personal data. For anything in this policy, email [email protected].
2. What we collect
- Enquiries: the details you type into our contact form or send us by email: your name, company, email address, phone number if you give it, and your message.
- Client contacts: name, job title, work email and phone, the business you work for, and our correspondence with you, including timesheets, approvals and invoice queries.
- Website use: basic technical data that every website receives, such as your IP address, browser type and the pages requested. We use this only to deliver the site securely and stop abuse.
3. Why we use it, and our legal basis
- To reply to your enquiry and, if you ask, give you information about our services: our legitimate interests in responding to people who contact us, or taking steps at your request before entering into a contract.
- To manage our relationship with your business: onboarding workers, collecting and approving hours, invoicing and resolving queries. This is performing our contract with your business and our legitimate interests.
- To keep accounting and tax records: legal obligation.
- To keep the website secure and prevent spam and fraud: legitimate interests.
We don't sell your data, we don't use it for advertising, and we don't send marketing emails unless you've asked for them.
4. Cookies
Our website doesn't use advertising or analytics cookies, and we don't track you across other sites. Our hosting and security provider may set a strictly necessary security cookie to protect the site and our contact form from bots. The site loads its fonts from a third-party web font service, which means your browser shares your IP address with that service. If we ever add analytics or other non-essential cookies, we'll ask for your consent first and update this policy.
5. Who we share it with
Only as needed to run our business, with these categories of recipient: our website hosting and security provider, our contact form delivery service, our email and customer records (CRM) providers, our e-signature provider, our identity verification provider, our telephony and messaging providers, our accountants and legal advisers, and regulators or the police where the law requires. Our providers act on our instructions and must keep your data secure.
Some providers process data outside the UK, for example in the USA or the EU. Where they do, we rely on UK adequacy regulations (including the UK-US Data Bridge) or the ICO's International Data Transfer Agreement or Addendum.
6. How long we keep it
- Enquiries that don't lead to working together: 12 months after our last contact.
- Client contact details and correspondence: for as long as we work with your business, then 6 years after the end of the tax year it relates to (for accounting and legal reasons).
- Website security logs: kept by our hosting provider for a short period, in line with its standard retention.
7. Your rights
Under UK GDPR you have the right to ask for a copy of your personal data, and to have it corrected, deleted or restricted, or to object to our use of it, in each case where the law allows. You can also ask to have it transferred. Email [email protected] and we'll reply within one month.
If you're unhappy with how we've handled your data, please contact us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.
8. Changes
We'll update this policy when our use of personal data changes. The date at the top shows when it was last updated.