Privacy Policy
Effective Date: 16 June 2026
Orion West Limited | Company No. 17251000 | Registered in England and Wales
1. Who We Are
Orion West Limited ("the Company") is the data controller responsible for your personal data. We are registered in England and Wales under company number 17251000.
If you have any questions about this Privacy Policy or how we handle your data, please contact us at legal@finopsforge.co.uk.
2. What Data We Collect
We may collect and process the following categories of personal data:
- Account Information: name, email address, and any other details you provide when registering for an account.
- Usage Data: information about how you use the Platform, including log data, IP address, browser type, and device information.
- Content Data: data, figures, and other information you input into the Platform's calculators and tools.
- Payment Information: billing details and transaction records processed by our payment providers.
- Communications: records of any correspondence between you and us.
3. How We Use Your Data
We use your personal data for the following purposes:
- to provide, operate, and maintain the Platform and Services;
- to manage your account and subscription;
- to process payments and prevent fraud;
- to communicate with you about your account, updates, and support requests;
- to improve and develop the Platform based on usage patterns and feedback;
- to comply with legal obligations and enforce our Terms and Conditions.
4. Legal Basis for Processing
Under the UK GDPR, we rely on the following legal bases to process your personal data:
- Contractual necessity: processing necessary to perform our contract with you (e.g., providing account access and Services).
- Legitimate interests: processing necessary for our legitimate interests (e.g., fraud prevention, service improvement, and security), provided your interests and fundamental rights do not override those interests.
- Legal obligation: processing necessary to comply with applicable laws and regulations.
- Consent: where you have given explicit consent for specific processing activities (e.g., marketing communications).
5. Data Sharing and Third Parties
We do not sell your personal data. We may share your data with:
- Service Providers: third-party vendors who assist us in operating the Platform (e.g., cloud hosting, payment processing, analytics, and customer support). These providers are contractually bound to protect your data and use it only for the purposes we specify.
- Legal and Regulatory Authorities: where required by law, court order, or regulatory obligation.
- Professional Advisers: accountants, auditors, lawyers, and insurers where necessary.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:
- the duration of your active account and subscription;
- any period required by applicable law or regulation;
- the time necessary to establish, exercise, or defend legal claims.
When your data is no longer required, we will securely delete or anonymise it in accordance with our data retention policies.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security reviews.
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.
8. Your Data Protection Rights
Under the UK GDPR and the Data Protection Act 2018, you have the following rights:
- Right to Access: you can request a copy of the personal data we hold about you.
- Right to Rectification: you can request that we correct any inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): you can request that we delete your personal data in certain circumstances.
- Right to Restrict Processing: you can request that we limit the processing of your data in certain circumstances.
- Right to Data Portability: you can request that we transfer your data to another controller in a structured, commonly used format.
- Right to Object: you can object to the processing of your data based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at legal@finopsforge.co.uk. We will respond within one month of receiving your request.
9. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage, and support our marketing efforts. You can manage your cookie preferences through your browser settings.
For more detailed information about the cookies we use, please contact us.
10. International Data Transfers
Your personal data may be transferred to and processed in countries outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place (such as Standard Contractual Clauses approved by the UK Information Commissioner's Office) to protect your data in accordance with UK data protection laws.
11. Children's Privacy
The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately so we can delete it.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on the Platform or by email. Your continued use of the Platform after any changes constitutes acceptance of the updated Privacy Policy.
13. Complaints
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk. We encourage you to contact us first so we can try to resolve the matter.
14. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:
Orion West Limited
Company Number: 17251000
Registered in England and Wales
Email: legal@finopsforge.co.uk
Website: www.finopsforge.co.uk
© 2026 Orion West Limited. All rights reserved.
This document was last updated on 16 June 2026. We recommend you review this policy periodically.