Privacy Policy

FinancSync is committed to protecting your privacy. Learn how we handle personal information, use cookies, comply with UK GDPR and keep your data secure.

Privacy Policy

Last Updated: [July 2026]


Welcome


Welcome to FinancSync.

At FinancSync Ltd ("FinancSync", "we", "our" or "us"), protecting your privacy and safeguarding your personal information is one of our highest priorities. We understand the importance of trust when you use accounting software to manage your financial information, and we are committed to handling your personal data responsibly, securely and transparently.

This Privacy Policy explains how FinancSync Ltd collects, uses, stores, shares and protects your personal information when you visit our website, create an account, use our software, connect third-party services, contact our support team or otherwise interact with FinancSync.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.


1. Who We Are


FinancSync Ltd is the data controller responsible for your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us.

Data Controller

FinancSync Ltd

Website: www.financsync.com

Email: admin@financsync.com 


2. Scope of this Privacy Policy


This Privacy Policy applies to all FinancSync products and services, including:

  • Our website

  • The FinancSync cloud platform

  • Desktop applications

  • Mobile applications

  • Open Banking connections

  • HMRC integrations

  • API services

  • Customer support

  • Billing and subscriptions

  • Marketing communications

  • Product demonstrations

  • Training services

  • Community forums

  • Events and webinars

  • Beta features

  • Any other services provided by FinancSync Ltd


3. Information We Collect


The information we collect depends upon how you use FinancSync and the services you choose to access.


Information You Provide


When you register for an account, subscribe to our services or communicate with us, you may provide information including:

  • Full name

  • Business name

  • Company registration number

  • VAT registration number

  • Email address

  • Telephone number

  • Postal address

  • Billing address

  • Payment details

  • Tax information

  • Accounting records

  • Payroll information

  • Employee information

  • Customer and supplier records

  • Uploaded documents

  • Receipts

  • Invoices

  • Bank statements

  • Identity verification documents

  • Communications with our support team


Account Information


When creating and managing your account, we collect information such as:

  • Username

  • Encrypted password

  • Security questions

  • Multi-factor authentication settings

  • Account preferences

  • User permissions

  • Subscription plan

  • Licence information

  • Login history

  • Account activity


Financial Information


Depending on the features you use, FinancSync may process:

  • Sales invoices

  • Purchase invoices

  • Expenses

  • Bank transactions

  • Journals

  • General ledger information

  • Trial balances

  • Payroll records

  • VAT returns

  • Corporation Tax information

  • Self Assessment information

  • Pension information

  • Financial reports

  • Budgets

  • Forecasts

  • Management accounts

  • Accounting documents uploaded by you or authorised users


Information Collected Automatically


When you access our website or software, we automatically collect certain technical information, including:

  • IP address

  • Browser type

  • Device type

  • Operating system

  • Screen resolution

  • Time zone

  • Session duration

  • Pages visited

  • Features used

  • Referring website

  • Login timestamps

  • Error logs

  • Diagnostic information

  • Device identifiers

  • Performance metrics

This information helps us improve the performance, reliability and security of FinancSync.


4. Cookies and Similar Technologies


FinancSync uses cookies and similar technologies to provide essential website functionality, improve your browsing experience, remember your preferences, analyse website traffic and maintain the security of your account.

Cookies may be used to:

  • Keep you signed into your account

  • Remember your preferences

  • Improve website performance

  • Measure visitor activity

  • Detect suspicious behaviour

  • Prevent fraud

  • Personalise your experience

  • Understand how our products are used

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website and software.

For more information, please refer to our Cookie Policy.


5. How We Use Your Information


We use your personal information for a variety of legitimate business purposes, including:

  • Creating and managing your account

  • Providing accounting software services

  • Processing subscriptions and payments

  • Delivering customer support

  • Authenticating users

  • Protecting your account

  • Improving our products

  • Developing new features

  • Processing accounting data

  • Processing payroll information

  • Submitting information to HMRC where authorised

  • Facilitating Open Banking connections

  • Sending important service notifications

  • Responding to enquiries

  • Preventing fraud and unauthorised access

  • Complying with legal and regulatory obligations

  • Monitoring service performance

  • Producing anonymous statistical analysis

  • Maintaining system security

  • Recovering unpaid fees where necessary


    6. Legal Basis for Processing Personal Information


    Under the UK General Data Protection Regulation (UK GDPR), FinancSync Ltd processes personal information only where we have a lawful basis to do so.

    Depending on the circumstances, we rely on one or more of the following legal bases:


    Performance of a Contract


    We process your personal information where it is necessary to provide our products and services, create and manage your account, process transactions, deliver customer support and fulfil our contractual obligations to you.


    Compliance with Legal Obligations


    We may process your information where required to comply with applicable laws, regulations, accounting standards, tax legislation, anti-money laundering requirements, court orders or requests from regulatory authorities.


    Legitimate Interests


    We may process personal information where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. These interests include improving our software, enhancing security, preventing fraud, maintaining system performance, analysing service usage, developing new features and responding to customer enquiries.

    Consent


    Where required by law, we will ask for your consent before processing your personal information. This may include sending marketing communications, using non-essential cookies or enabling certain optional services. You may withdraw your consent at any time, although this will not affect the lawfulness of any processing carried out before your consent was withdrawn.


    Vital Interests


    In exceptional circumstances, we may process personal information where it is necessary to protect the vital interests of an individual or another person.


    Public Interest


    Where applicable, FinancSync may process personal information where the processing is necessary for reasons of substantial public interest or to comply with legal duties imposed by legislation.


    7. Sharing Your Information


    FinancSync Ltd values your privacy and does not sell, rent or trade your personal information to third parties for their own marketing purposes.

    We may share your personal information only where it is necessary to provide our services, comply with legal obligations, protect our legitimate interests or where you have authorised us to do so.

    Your information may be shared with the following categories of recipients:


    Service Providers


    We work with carefully selected third-party service providers who support the operation of FinancSync. These providers may assist us with:

    • Cloud hosting and infrastructure

    • Data storage and backup services

    • Payment processing

    • Customer support

    • Email delivery services

    • Identity verification

    • Security monitoring

    • Fraud prevention

    • Analytics and reporting

    • Software development and maintenance

    All service providers are contractually required to protect your personal information, maintain appropriate security measures and process data only in accordance with our instructions.


    Financial Institutions and Open Banking Providers


    Where you choose to connect your bank accounts or financial institutions to FinancSync, we may securely exchange information with authorised Open Banking providers, banks and financial institutions to deliver banking integrations and transaction synchronisation.

    These connections are established only with your permission and can be withdrawn by you at any time.


    HM Revenue & Customs (HMRC)


    Where authorised by you, FinancSync may securely exchange information with HM Revenue & Customs (HMRC) through approved Application Programming Interfaces (APIs) to support services including Making Tax Digital (MTD), VAT Returns, Corporation Tax, Self Assessment, PAYE and other tax-related submissions.

    We only transmit information that is necessary to provide the services you have requested.


    Third-Party Integrations


    If you choose to connect FinancSync with third-party applications or services, we may share information necessary for those integrations to function correctly. Examples may include payment providers, payroll software, e-commerce platforms, customer relationship management systems and other accounting or business applications.

    Your use of these third-party services is governed by their own privacy policies and terms of use.


    Professional Advisers


    We may share information with our professional advisers where necessary, including accountants, auditors, solicitors, insurers and other consultants who provide professional services to FinancSync.


    Regulatory Authorities and Law Enforcement


    We may disclose personal information where required by law or where we reasonably believe disclosure is necessary to:

    • Comply with legal obligations

    • Respond to lawful requests from public authorities

    • Protect the rights, property or safety of FinancSync, our users or others

    • Prevent fraud or other unlawful activities

    • Enforce our Terms and Conditions

    • Establish, exercise or defend legal claims


    Business Transactions


    If FinancSync Ltd undergoes a merger, acquisition, investment, corporate restructuring, sale of assets or similar business transaction, your personal information may be transferred as part of that transaction. Any successor organisation will continue to protect your personal information in accordance with this Privacy Policy or provide notice of any material changes where required by law.

    We require all recipients of personal information to maintain appropriate technical and organisational measures to safeguard your information and to process it only for legitimate and authorised purposes.


    8. International Data Transfers


    FinancSync Ltd primarily stores and processes personal information within the United Kingdom. However, in order to provide our services efficiently, some of our trusted service providers may process personal information in countries outside the United Kingdom.

    Whenever personal information is transferred internationally, we ensure that appropriate safeguards are in place to protect your information and to comply with the requirements of the UK General Data Protection Regulation (UK GDPR).

    These safeguards may include:

    • Adequacy regulations approved by the UK Government.

    • The International Data Transfer Agreement (IDTA).

    • The UK Addendum to the European Commission's Standard Contractual Clauses (SCCs).

    • Contractual agreements requiring equivalent standards of privacy and security.

    • Other lawful transfer mechanisms recognised under applicable data protection legislation.

    Before engaging any international service provider, we assess the level of protection they provide and implement additional technical and organisational measures where appropriate.

    Where required, we use security measures such as encryption, restricted access controls, secure authentication, continuous monitoring and contractual obligations to help protect personal information during international transfers.

    Our service providers are only permitted to process personal information for the purposes of delivering services on our behalf and must comply with strict confidentiality, security and data protection requirements.

    If you would like further information about the safeguards we use for international transfers of personal information, you may contact us using the details provided in this Privacy Policy.


    9. Data Security


    FinancSync Ltd is committed to protecting the confidentiality, integrity and availability of your personal information. We recognise that our customers entrust us with sensitive financial and business data, and we take that responsibility seriously.

    We maintain appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access or any other form of unlawful processing.

    Our security measures may include, but are not limited to:

    • Encryption of data during transmission using secure communication protocols.

    • Encryption of sensitive data where appropriate.

    • Secure cloud infrastructure.

    • Firewalls and network security controls.

    • Multi-factor authentication.

    • Role-based access controls.

    • Strong password requirements.

    • Continuous system monitoring.

    • Security logging and audit trails.

    • Regular software updates and security patches.

    • Vulnerability assessments and penetration testing.

    • Secure backup procedures.

    • Disaster recovery planning.

    • Employee security awareness training.

    • Confidentiality obligations for employees and contractors.

    Access to personal information is restricted to authorised personnel who require access to perform their job responsibilities.

    Although we take reasonable steps to protect your information, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your account credentials and notifying us immediately if you believe your account has been compromised.


    10. Data Retention


    FinancSync Ltd retains personal information only for as long as necessary to fulfil the purposes for which it was collected, including providing our services, complying with legal obligations, resolving disputes, enforcing our agreements and meeting regulatory or accounting requirements.

    Retention periods vary depending on the type of information being processed, the services you use and applicable legal requirements.

    When determining appropriate retention periods, we consider factors including:

    • The nature and sensitivity of the information.

    • The purpose for which the information was collected.

    • Legal and regulatory requirements.

    • Accounting and taxation obligations.

    • Contractual commitments.

    • Security considerations.

    • Potential disputes or legal proceedings.

    Where personal information is no longer required, we will securely delete, anonymise or otherwise dispose of it using appropriate technical and organisational measures.

    You may request deletion of your personal information where applicable. However, we may retain certain information where required to comply with legal obligations, establish or defend legal claims, prevent fraud or fulfil other lawful business purposes.


    11. Your Privacy Rights


    Subject to applicable data protection laws, you may have a number of rights regarding your personal information.

    These rights may include:


    Right of Access


    You may request confirmation of whether we process your personal information and request a copy of the personal information we hold about you.


    Right to Rectification


    You may request that inaccurate or incomplete personal information is corrected or updated.


    Right to Erasure


    In certain circumstances, you may request that your personal information is deleted where there is no lawful reason for us to continue processing it.


    Right to Restrict Processing


    You may request that we temporarily restrict the processing of your personal information in certain circumstances.


    Right to Data Portability


    Where processing is based on consent or a contract and carried out by automated means, you may request a copy of your personal information in a structured, commonly used and machine-readable format.


    Right to Object


    You may object to our processing of your personal information where we rely on legitimate interests or where personal information is processed for direct marketing purposes.


    Right to Withdraw Consent


    Where processing is based upon your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.


    Rights Relating to Automated Decision-Making


    Where applicable, you have rights relating to decisions based solely on automated processing, including profiling, where such decisions produce legal or similarly significant effects.

    To exercise any of your rights, please contact us using the details provided in this Privacy Policy. We may ask you to verify your identity before responding to your request.

    We aim to respond to all valid requests within the timeframes required by applicable data protection legislation.


    12. Marketing Communications


    FinancSync Ltd may send you communications relating to our products, services, software updates, newsletters, promotions, educational content, webinars, events and other information that we believe may be of interest to you.

    Where required by law, we will obtain your consent before sending marketing communications.

    You may opt out of receiving marketing communications at any time by:

    • Clicking the unsubscribe link contained within our marketing emails.

    • Updating your communication preferences within your account settings.

    • Contacting us directly using the details provided in this Privacy Policy.

    Please note that even if you opt out of marketing communications, we may continue to send important service-related communications, including security s, billing information, account notifications, software updates and other messages necessary for the operation of your account or our services.


    13. Children's Privacy


    FinancSync is intended for use by businesses, professionals and individuals who are at least 18 years of age.

    Our services are not directed towards children, and we do not knowingly collect personal information from anyone under the age of 18.

    If we become aware that personal information relating to a child has been collected without appropriate legal authority or parental consent where required, we will take reasonable steps to delete that information as soon as reasonably practicable.

    If you believe that a child has provided personal information to FinancSync, please contact us immediately so that we can investigate and take appropriate action.


    14. Third-Party Websites and Services


    Our website, applications and services may contain links to third-party websites, applications, products or services that are not owned or controlled by FinancSync Ltd.

    This Privacy Policy applies solely to the information collected and processed by FinancSync Ltd. We are not responsible for the privacy practices, content, security or policies of third-party websites or services.

    Where you choose to access or connect third-party services through FinancSync, your use of those services will also be subject to the applicable privacy policies and terms of those providers.

    We encourage you to review the privacy policies of any third-party websites or services before providing them with your personal information.


    15. Artificial Intelligence and Automated Features


    FinancSync may use artificial intelligence ("AI"), machine learning and automated technologies to improve the efficiency, accuracy and functionality of our products and services.

    These technologies may assist with features including:

    • Optical Character Recognition (OCR).

    • Receipt and invoice data extraction.

    • Bank transaction categorisation.

    • Expense classification.

    • Bookkeeping recommendations.

    • Document processing.

    • Financial reporting assistance.

    • Payroll calculations.

    • Fraud detection.

    • Customer support.

    • Product recommendations.

    • Workflow automation.

    • Data quality checks.

    AI-generated outputs are intended to assist users and should not be relied upon as a substitute for professional accounting, legal or tax advice.

    Users remain responsible for reviewing, verifying and approving all accounting records, tax submissions, financial reports and other information generated or suggested by FinancSync before relying upon or submitting that information to third parties.

    Where automated processing produces decisions that have legal or similarly significant effects, we will process personal information in accordance with applicable data protection laws and provide individuals with any rights required by law.


    16. Open Banking and Financial Data


    Where you choose to connect your financial accounts to FinancSync, we may access certain financial information through authorised Open Banking providers and financial institutions.

    These connections are established only with your explicit authorisation and are used solely for the purposes of providing the services you request.

    Depending upon the permissions you grant, we may receive information including:

    • Bank account details.

    • Account balances.

    • Transaction history.

    • Payment information.

    • Merchant details.

    • Transaction references.

    • Financial account identifiers.

    FinancSync does not access your online banking credentials. Authentication and authorisation are handled securely by authorised Open Banking providers in accordance with applicable Open Banking standards.

    You may withdraw your consent for Open Banking connections at any time through your account settings or by disconnecting the relevant financial institution.


    17. HMRC Integrations


    FinancSync provides integrations with HM Revenue & Customs ("HMRC") to support digital tax compliance and reporting.

    Where you authorise us to do so, FinancSync may securely exchange information with HMRC using approved Application Programming Interfaces (APIs) for services including:

    • Making Tax Digital (MTD).

    • VAT Returns.

    • Self Assessment.

    • Corporation Tax.

    • PAYE.

    • Employer Services.

    • Other HMRC services that may become available.

    Information submitted to HMRC is processed only in accordance with your instructions and applicable legal requirements.

    Once information has been submitted to HMRC, it becomes subject to HMRC's own privacy policies, security procedures and statutory obligations.

    FinancSync is not responsible for the processing of information carried out independently by HMRC after submission.


    18. Cookies and Tracking Technologies


    FinancSync uses cookies, similar technologies and other tracking mechanisms to improve the functionality, security and performance of our website and services.

    These technologies may be used to:

    • Authenticate users.

    • Maintain secure login sessions.

    • Remember user preferences.

    • Improve website performance.

    • Analyse visitor behaviour.

    • Measure the effectiveness of our services.

    • Detect fraudulent activity.

    • Monitor system reliability.

    • Personalise user experiences.

    • Support marketing activities where permitted by law.

    Some cookies are essential for the operation of our website and cannot be disabled without affecting core functionality.

    Non-essential cookies will only be used where required by law after obtaining your consent.

    You may manage your cookie preferences through your browser settings or through our cookie consent tools where available.

    Further information regarding our use of cookies can be found in our separate Cookie Policy.


    19. Account Security


    You are responsible for maintaining the security of your FinancSync account and protecting your login credentials.

    To help keep your account secure, we recommend that you:

    • Choose a strong and unique password.

    • Enable multi-factor authentication where available.

    • Keep your login credentials confidential.

    • Sign out of shared or public devices after use.

    • Regularly review your account activity.

    • Notify us immediately if you suspect unauthorised access to your account.

    • Keep your contact details up to date to receive important security notifications.

    FinancSync will never ask you to disclose your password by email, telephone or any unsolicited communication.

    If we believe that your account has been compromised, we may suspend access, require additional identity verification or reset your security credentials to help protect your information.


    20. System Monitoring and Fraud Prevention


    To protect our users, services and infrastructure, FinancSync monitors its systems for suspicious, fraudulent or unauthorised activity.

    We may process personal information for purposes including:

    • Detecting fraudulent transactions.

    • Preventing unauthorised access.

    • Identifying security threats.

    • Investigating suspected misuse of our services.

    • Preventing money laundering and financial crime where applicable.

    • Monitoring compliance with our Terms and Conditions.

    • Maintaining the stability and security of our systems.

    • Protecting the rights, property and safety of FinancSync, our users and third parties.

    Where appropriate, we may investigate suspected violations of our policies and cooperate with regulatory authorities or law enforcement agencies in accordance with applicable laws.


    21. Business Transfers


    As FinancSync continues to develop, our business may be subject to corporate changes such as mergers, acquisitions, investments, restructurings, financing arrangements, joint ventures or the sale of assets.

    If such a transaction occurs, personal information held by FinancSync may be transferred to the acquiring or successor organisation as part of the business assets.

    Any successor organisation will be required to protect your personal information in accordance with applicable data protection laws and, where appropriate, this Privacy Policy or a substantially similar privacy policy.

    Where required by law, we will notify affected users before any material changes to the handling of their personal information take effect.


    22. Changes to this Privacy Policy


    We may update this Privacy Policy from time to time to reflect changes in our business operations, legal obligations, technology, products, services or regulatory requirements.

    When we make changes, we will update the "Last Updated" date shown at the beginning of this Privacy Policy.

    Where changes are significant, we may also notify you through one or more of the following methods:

    • Email notifications.

    • Notices within your FinancSync account.

    • Announcements on our website.

    • Product notifications within our software.

    Your continued use of FinancSync after any updated Privacy Policy becomes effective constitutes your acknowledgement of the revised policy, unless applicable law requires additional consent.

    We encourage you to review this Privacy Policy periodically to remain informed about how we protect your personal information.


    23. Contact Us


    If you have any questions about this Privacy Policy, our privacy practices or the way FinancSync processes your personal information, please contact us.

    FinancSync Ltd

    Website: www.financsync.com

    Email: admin@financsync.com

    We will make every reasonable effort to respond to your enquiry as promptly as possible and in accordance with applicable data protection legislation.


    24. Complaints


    If you have concerns about how FinancSync has handled your personal information, we encourage you to contact us first so that we have the opportunity to investigate and resolve your concerns.

    If you remain dissatisfied with our response, you may have the right to lodge a complaint with the Information Commissioner's Office (ICO), the United Kingdom's independent authority responsible for upholding information rights and data protection legislation.

    Information about the ICO, including guidance on how to make a complaint, is available at:

    Information Commissioner's Office (ICO)

    Website: https://ico.org.uk/

    Lodging a complaint with the ICO does not affect any other legal rights or remedies that may be available to you under applicable law.


    25. Governing Law


    This Privacy Policy shall be governed by and interpreted in accordance with the laws of England and Wales.

    Any dispute arising out of or in connection with this Privacy Policy, the processing of personal information or the use of FinancSync's services shall be subject to the exclusive jurisdiction of the courts of England and Wales, unless applicable law provides otherwise.

    Nothing in this Privacy Policy shall limit or exclude any rights that you are entitled to under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 or any other applicable data protection legislation.