Privacy Policy

Purpose of this Statement

This statement describes how we collect and utilise your personal data in accordance with the General Data Protection Regulations (GDPR), the Data Protection (Jersey) Law 2018, and other relevant national laws and regulations in Jersey (“Data Protection Legislation”). Please carefully review the following to understand our practices regarding your personal data and its treatment.

About Finit Solutions

In this data privacy statement, “Finit Solutions” refers to Finit Solutions Limited, a company registered in Jersey providing accountancy, taxation and technology services. Finit Solutions Limited is a member firm of the Institute of Chartered Accountants in England and Wales and is registered with the Jersey Financial Services Commission as a Schedule 2 business. For the purposes of Data Protection Legislation, Finit Solutions Limited is the data controller: we determine how personal data is held and used.

We have designated an Information Protection Officer as our Data Protection Point of Contact to assist with any inquiries regarding this statement or the handling of your personal data. To contact our Data Protection Point of Contact, please visit our Contact page for the relevant details.

Collection of Your Personal Data

We gather personal data about you in various ways, including when:

You request a proposal for our services.
You or your employer or our clients engage us for services, and during the provision of those services, we may collect your personal data to fulfil contractual obligations.
You reach out to us via email, telephone, post, website portal, or social media, such as when you have queries about our services.
Information is obtained from third parties and/or publicly available sources, such as your employer or the Jersey Financial Services Commission.
Data is sourced using appropriate online tools to fulfil our regulatory due diligence obligations.

Types of Information We Hold About You

The information we may hold about you includes:

Personal details like your name and address.
Records of our interactions concerning the provision or proposed provision of services.
Details of services received from us.
Correspondence and communications.
Information regarding any complaints or inquiries made by you.
Data received from other sources, such as publicly available information or information provided by your employer or our clients.
Information derived from online checks conducted for regulatory due diligence.

Use of Your Personal Data

We may process your personal data for purposes necessary to fulfil our contract with you, your employer, or our clients, and to comply with legal obligations. This may include processing personal data related to our legitimate interests, provided they do not override your interests, rights, and freedoms requiring personal data protection. Additionally, we may process personal data for specific purposes with your consent, where applicable.

Please note that depending on the specific purpose, we may process your personal data under more than one lawful basis.

Situations in which we use your personal data include:

Fulfilling obligations arising from agreements between you, your employer, or our clients, and us, typically related to service provision.
Providing information about our services, events, and activities that you have requested or may find of interest.
Seeking feedback on the services we provide.
Notifying you of any changes to our services.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. When determining the appropriate retention period, we consider various factors, including business requirements, legal obligations, and the nature of the data.

Change of Purpose

If we need to use your personal data for a purpose other than that for which it was originally collected, we will only do so if that purpose is compatible with the original one. Should a new purpose arise, we will notify you and explain the legal basis for such processing before commencing any new activities.

Sharing Your Personal Data

We share personal data with third parties where required by law, necessary to manage our relationship with you, or when we have a legitimate interest. Our third-party service providers are bound by agreements to process personal data only as instructed and to implement appropriate security measures.

Additionally, we may share personal data with other third parties in the context of business sale or restructuring, or to comply with legal obligations.

Transfer of Personal Data Outside the European Economic Area (EEA)

We transfer personal data collected about you outside the EEA only to fulfil our contract with you and according to your instructions regarding data transfer. If personal data is transferred to the USA, it’s typically due to the use of Cloud software. We ensure such transfers comply with applicable regulations and adopt appropriate security measures.

Data Security

We implement commercially reasonable security measures to prevent unauthorised access, use, alteration, or disclosure of personal data. Access to personal data is restricted to authorised personnel who require it for business purposes. We have procedures in place to address suspected data breaches and will notify you and relevant regulators as required by law.

Your Rights Regarding Personal Data

To ensure the accuracy and currency of your personal data, please inform us of any changes. Under certain circumstances, you have the right to access, correct, erase, or restrict the processing of your personal data. If you wish to exercise these rights, please contact our Data Protection Point of Contact.

Right to Withdraw Consent

If you provided consent for specific processing purposes, you have the right to withdraw it at any time. Once we receive your withdrawal notification, we will cease processing your personal data for the specified purpose unless another legal basis exists.

Last updated: 10 July 2026