GDPR & Data Protection

1. Controller and processor

For your firm's own account data, FYNVRO LTD is the data controller. For the client data your firm processes through Fynvro OS — including Xero and Companies House data — your firm is the controller and we are your processor, acting only on your documented instructions.

2. Lawful bases

We process personal data on the bases of contract, legitimate interests, legal obligation and, where relevant, consent — as detailed in our Privacy Policy.

3. Your rights under UK GDPR

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object
• Rights related to automated decision-making and profiling

To exercise any of these, email support@fynvro.com. We aim to respond within one month.

4. Data Processing Agreement

For firms acting as controllers, a Data Processing Agreement is available. Under it, we process client data only on your documented instructions, ensure our sub-processors are bound by equivalent obligations, assist you with data-subject requests, and notify you of any personal data breach without undue delay.

5. International transfers

Where data is transferred outside the UK or EEA, we apply appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

6. Retention and deletion

We retain personal data only as long as necessary for the purposes described, or as required by law, and delete or return it on account closure in line with our Terms.

7. Security measures

Our technical and organisational measures include row-level security at the database layer, workspace isolation between firms, audit trails on every state-changing action, encryption in transit, and a super-admin role that cannot, by design, read firm content.

8. Supervisory authority

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.

9. Contact

For any data-protection matter, contact us at support@fynvro.com.