Legal
Last updated: 1 July 2026. Written in the plainest English we can manage without losing legal accuracy.
Finio Ltd is a company registered in England & Wales (company number 15342981), with its registered office at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ. We act as data controller for our website and as data processor for information you send us through the Finio product.
Website visitors: cookies for essential session and privacy-first analytics only. Product users: name, email, role, company, connected Xero organisation IDs, invoice data and audit metadata. Prospects: information you submit through demo and contact forms.
To operate the Finio product for your organisation; to provide support; to send you administrative communications; to comply with legal obligations; and, with your consent, to send product-related news.
Performance of a contract, our legitimate interests, and — for marketing — your consent, which you can withdraw at any time.
Product data: retained for the life of your contract plus 90 days. Financial records: retained 7 years per HMRC requirements. Marketing data: retained until you unsubscribe.
We use AWS (UK & EU), Vanta (US, DPF-certified), Stripe (UK) and Postmark (US, DPF-certified). Our full sub-processor list is published at finio.co/legal/sub-processors and updated 30 days before any change.
Under UK GDPR you have the right to access, rectify, erase, restrict, port and object to processing. Contact privacy@finio.co and we will respond within 30 days.
Your data is stored in the UK and EU. Transfers to US sub-processors are covered by the EU-US Data Privacy Framework and, where applicable, Standard Contractual Clauses.
Data Protection Officer: dpo@finio.co. You can also complain to the UK Information Commissioner's Office at ico.org.uk.