Privacy Policy

Last updated September 30, 2024

At app.eleni.finance, we are committed to respecting your privacy and ensuring that your personal and financial data is protected. This Privacy Policy explains how we collect, use, and safeguard your information in line with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR). Please take a moment to read it carefully.

1. What Information Do We Collect?

Personal Information You Provide to Us

We collect personal information that you voluntarily provide when you register for our Service, express interest in our products or services, or engage with us in any other way. This includes:

• name
• email address
• telephone number
• company name

Financial Information via User Consent

When you connect a financial or business tool (such as bank accounts or financial platforms) through our Service, we gain access to financial data. This may include transaction data, account balances, and account details. This access is granted through your explicit consent and managed via our open banking provider, Salt Edge.

Please note that Salt Edge handles certain aspects of your financial data processing. You can review their privacy practices.

It is your responsibility to ensure the information you provide is accurate, complete, and current. Please notify us of any changes.

2. How Do We Process Your Information?

We process your personal and financial data for the following purposes:

• Account Creation and Authentication: To enable you to create and manage your user account.
• Security and Fraud Prevention: To ensure the safety and security of your personal and financial information.
• Service Delivery: To provide and improve our Service, including access to financial tools, in accordance with your consent.
• Compliance with Legal Obligations: To meet our legal obligations under UK law, including financial regulations and data protection laws.

We will only process your information for the purposes you have explicitly consented to or as required by law.

3. Legal Bases for Processing Your Information

Under UK GDPR, we rely on the following legal bases for processing your information:

• Consent: When you give explicit consent to the collection and processing of your personal and financial information.
• Legal Obligation: When we are required to process your data to comply with a legal requirement, such as tax laws or financial regulations.
• Legitimate Interest: When the processing is necessary for our legitimate business interests and does not override your rights.

You may withdraw your consent at any time, though this may affect your ability to use certain features of our Service.

4. When and With Whom Do We Share Your Information?

We may share your personal and financial data in the following situations:

• Third-Party Vendors and Service Providers: We work with third-party vendors, including Salt Edge, to provide essential services such as financial data processing. These vendors are contractually bound to handle your data securely and in accordance with applicable laws. Please review Salt Edge’s privacy policy.
• Business Transfers: In the event of a merger, acquisition, or sale of company assets, your personal data may be transferred as part of the business transaction.
• Compliance with Law: We may disclose your personal or financial data to comply with legal obligations, such as court orders or regulatory requirements.

We do not share your personal data with third parties for marketing purposes without your explicit consent.

5. How Do We Handle Financial Tool Data?

Through our platform, users cannot log in using financial tools. However, we gain access to certain financial data when you connect external financial tools or business operation tools (such as bank accounts or financial platforms) to our Service. This data, which may include transaction details, account balances, and account identifiers, is accessed only with your explicit consent and is used solely for providing and improving our Service. We utilise Salt Edge as our open banking provider to facilitate secure data connections in compliance with UK regulations. For more information on how Salt Edge handles your data, please review their privacy policy.

6. How Long Do We Keep Your Information?

We retain your personal and financial information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When your data is no longer needed for business or legal purposes, we will securely delete or anonymize it.

7. How Do We Keep Your Information Safe?

We use industry-standard security measures to protect your personal and financial information from unauthorized access, alteration, or disclosure. These measures include encryption, access controls, and secure data storage. However, no system is entirely secure, and we cannot guarantee absolute protection of your data.

We ask that you also take steps to secure your account by using strong, unique passwords and notifying us immediately if you suspect any unauthorized access to your account.

8. Do We Collect Information from Minors?

Our Service is not intended for individuals under the age of 18. We do not knowingly collect or process personal information from minors. If we learn that data from a person under 18 has been collected, we will delete it as soon as possible. If you become aware of such information, please contact us at privacy@eleni.finance.

9. Your Privacy Rights

As a resident of the UK, you have certain rights under UK GDPR, including:

• Access: You can request access to the personal information we hold about you.
• Rectification: You can request corrections to inaccurate or incomplete data.
• Erasure: You can request the deletion of your personal data, subject to certain conditions.
• Restriction: You can request that we limit the processing of your personal data.
• Objection: You have the right to object to the processing of your data where we rely on legitimate interests.

You can exercise these rights by contacting us at the details provided below.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on our website with a revised date. We encourage you to review this policy periodically to stay informed about how we protect your data.

11. How to Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at:

Email: privacy@eleni.finance

Address: Tamzen Technology Limited - Company No. 14821672
71-75 Shelton Street
Covent Garden
London WC2H 9JQ
United Kingdom