Privacy Policy

Last updated: December 2025

Finsur Ltd (“we”, “us”, “our”) operates reports.finsur.co.uk. This policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


COMPANY INFORMATION

Finsur Ltd
St Stephens House, Arthur Road
Windsor, Berkshire SL4 1RU
United Kingdom

Company Registration Number: 12972802
VAT Registration Number: 472482477
Data Controller Contact: info@finsur.co.uk

WHAT DATA WE COLLECT

When you purchase a research report, we collect:

  • Your name and email address
  • Billing address
  • Company name (if provided)
  • VAT number (if provided for B2B transactions)
  • Purchase history and download records
  • Payment information (processed securely by Stripe – we do not store or have access to your full card details)

When you browse our website, we may collect:

  • IP address
  • Browser type and version
  • Pages visited and time spent
  • Referral source

HOW WE USE YOUR DATA

We use your personal data to:

  • Process your purchase and deliver downloadable research reports
  • Send order confirmations and download links
  • Provide customer support and respond to enquiries
  • Maintain records required for VAT and tax compliance
  • Improve our website and services
  • Protect against fraud and unauthorised access

LEGAL BASIS FOR PROCESSING (UK GDPR)

We process your data under the following lawful bases:

  • Contract performance: To fulfil your purchase order and deliver products
  • Legitimate interests: For customer communications, website security, and business operations
  • Legal obligation: To comply with tax, VAT, and financial record-keeping requirements

DATA RETENTION

We retain your data for the following periods:

  • Purchase and financial records: 7 years (HMRC requirement)
  • Download access links: 30 days from purchase
  • Account information: Until you request deletion (subject to legal retention requirements)
  • Website analytics: 26 months

THIRD-PARTY DATA PROCESSORS

We share data with the following service providers who process data on our behalf:

  • Stripe (stripe.com): Payment processing – data processed in accordance with Stripe’s privacy policy and may be transferred internationally under appropriate safeguards
  • SiteGround: Website hosting – data stored on UK/EU servers
  • WooCommerce/Automattic: E-commerce platform
  • Google Analytics: Website analytics (can be opted out via cookie preferences)

We do not sell your personal data to third parties.

INTERNATIONAL TRANSFERS

Some of our service providers may transfer data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner.

YOUR RIGHTS

Under UK GDPR, you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate or incomplete data
  • Erasure: Request deletion of your data (subject to legal retention requirements)
  • Restriction: Request we limit how we process your data
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to processing based on legitimate interests
  • Withdraw consent: Where processing is based on consent, you may withdraw at any time

To exercise any of these rights, please contact info@finsur.co.uk. We will respond within one month.

COOKIES

We use cookies to ensure our website functions correctly and to analyse how visitors use our site. For full details, please see our Cookie Policy at reports.finsur.co.uk/cookie-policy/

SECURITY

We implement appropriate technical and organisational measures to protect your personal data, including:

  • SSL/TLS encryption for all data transmission
  • Secure payment processing via Stripe (PCI DSS compliant)
  • Regular security updates and monitoring
  • Access controls limiting who can access your data

DATA BREACHES

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the Information Commissioner’s Office within 72 hours.

COMPLAINTS

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office:
Website: ico.org.uk
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

CHANGES TO THIS POLICY

We may update this privacy policy from time to time. Material changes will be notified via email to registered customers. The date at the top of this page indicates when this policy was last updated.

CONTACT US

For any questions about this privacy policy or how we handle your data:
Email: info@finsur.co.uk
Address: Finsur Ltd, St Stephens House, Arthur Road, Windsor, Berkshire SL4 1RU