Privacy policy

Fenquist is operated by IOANK LTD, a company registered in England and Wales (company number 15285630), registered office [REGISTERED OFFICE ADDRESS].

For your account data, we are the data controller. For the details you store about your own clients (names, emails, invoice data), you are the controller and we act as your data processor under our terms, which include our data processing terms.

We are registered with the Information Commissioner's Office (ICO). Registration number: [ICO REGISTRATION NUMBER]. You can check it on the ICO's public register.

Privacy questions: privacy@fenquist.com. [If you appoint a Data Protection Officer, name them here.]

Some features are automated, such as payment reminders and suggested matches between bank payments and invoices. Reminders are only sent for clients where you've switched them on, and you can turn them off per client at any time. Matches are suggestions until you confirm them. None of this makes decisions with legal or similarly significant effects about anyone.

We never sell personal data. We share it only with providers who help us run Fenquist, under written contracts that protect it:

• Hosting and database: DigitalOcean, London (UK)
• Network security and delivery: Cloudflare
• Email delivery: Resend (sends invoices, reminders and account emails)
• Payments: Stripe, for your clients' payments and for your Fenquist subscription. Stripe acts as an independent controller for payment data.
• Bank connections (only if you connect a bank): TrueLayer, authorised by the FCA. Access is read-only.
• Company and VAT lookups you ask for: Companies House and HMRC

We may also share data if the law requires it, for example with HMRC or the police with a valid request.

We store data in the UK or EU where possible. If a provider processes data outside the UK, we rely on UK adequacy regulations or the ICO's International Data Transfer Agreement or Addendum. [Confirm per provider.]

• Your business data (clients, invoices, payments, bank transactions): while your account is open. When you close it, everything is permanently deleted after 30 days. You can download it all first from Settings, Privacy and data, which you should do because UK law usually requires you to keep invoice records for 5 to 6 years.
• Bank transactions: deleted straight away if you disconnect that bank.
• Sign-in sessions: until they expire (30 days) or you sign out.
• Our own billing records for your subscription: 6 years, to meet UK tax rules.
• Support emails: [2] years.

Encryption in transit and at rest, strict access controls, and regular reviews. Read more on our security page.

We only use essential cookies, to keep you signed in. We don't use advertising or analytics cookies, so there's no cookie banner. If that ever changes, we'll ask first. See our cookie policy.

Under UK GDPR you can ask us to:

• give you a copy of your data (access)
• correct it (rectification)
• delete it (erasure)
• limit how we use it (restriction)
• send it to you or another service (portability)
• stop using it for legitimate interests or marketing (objection)

Use our data request form or email privacy@fenquist.com. We reply within one month. Withdrawing consent never affects processing that already happened.

Please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, helpline 0303 123 1113, or write to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

Fenquist is for businesses and is not intended for anyone under 18.

We'll update this page when our practices change and email you about significant changes.