About this policy
This policy explains how Advanced Fintech Solutions Ltd ("we", "us") uses personal data when you visit afintechsolutions.com or contact us by email. It covers this company website only.
Each of our products, RoscaApp, EEB and DailyPot, has its own privacy policy. If you use one of those products, read the policy on that product's website, for example RoscaApp's privacy policy.
Who we are
Advanced Fintech Solutions Ltd is the data controller for the personal data described here. We are a private limited company registered in England and Wales (company number 17510441), with our registered office at 128 City Road, London, EC1V 2NX. We are registered with the UK Information Commissioner's Office (ICO) under registration number ZC271502.
For any question about this policy or your personal data, email hello@afintechsolutions.com or write to us at our registered office.
The short version
- This website has no forms, no accounts, no cookies, no analytics and no advertising or tracking tools.
- Our web server automatically keeps short-lived technical logs, which include your IP address.
- The website loads its fonts from Google Fonts, so your browser connects to Google's servers.
- If you email us, we use what you send to reply to you.
- We never sell your personal data or use it for marketing without your permission.
What we collect and why
1. Server logs
When you visit any page, our web server records technical information about the request: your IP address, the date and time, the page or file requested, the response sent, the address of the page that linked to us (if any), and your browser and device type (the "user agent").
- Why: to deliver the website, keep it secure, detect and stop attacks or misuse, and fix faults.
- Lawful basis: our legitimate interests in running a secure, working website (UK GDPR Article 6(1)(f)).
- How long: logs are deleted automatically after 14 days, unless we need to keep a specific record for longer to investigate a security incident.
2. Emails you send us
If you email us, we receive your email address, your name if you include it, the content of your message and any attachments, and any other details you choose to give us.
- Why: to read and reply to your enquiry, and to keep a record of our correspondence.
- Lawful basis: our legitimate interests in responding to enquiries and running our business (Article 6(1)(f)). If you contact us about entering into an agreement with us, we may also rely on taking steps at your request before entering into a contract (Article 6(1)(b)).
- How long: we keep correspondence for 2 years after our last contact with you, or longer where it forms part of a business or contract record we must keep by law (for example, for tax purposes).
Please do not send us sensitive information (such as health details or bank details) by email unless we ask for it.
3. Fonts loaded from Google
The website uses fonts provided by Google Fonts. When a page loads, your browser requests the font files directly from Google's servers, which means Google receives your IP address and browser details. Google states that the Google Fonts service does not set cookies and that it uses this information to deliver the fonts and to keep the service working. See Google Fonts privacy FAQ.
- Lawful basis: our legitimate interests in presenting the website consistently and reliably (Article 6(1)(f)).
What we do not do
- We do not use cookies or similar technologies on this website. See our cookie policy.
- We do not use analytics, advertising, social media plug-ins or tracking pixels.
- We do not sell personal data, and we do not make decisions about you by automated means.
- We do not send marketing emails unless you have asked us to.
Who we share it with
We only share personal data where we need to. The people who may handle it are:
- Our hosting provider, which runs the server this website is hosted on. The server is located in the United Kingdom.
- Our email provider, which hosts our mailbox.
- Google, which provides the website fonts (see above).
- Professional advisers such as accountants, lawyers or insurers, where needed.
- Law enforcement, regulators or courts, where the law requires it or to protect our rights.
- A buyer or successor, if our business or any part of it is sold or reorganised.
Our hosting and email providers act on our instructions and are not allowed to use your data for their own purposes.
International transfers
Some of the providers above may process data outside the UK (for example, Google in the United States). Where this happens, we make sure the transfer is protected as UK data protection law requires, for example by relying on UK adequacy regulations (including the UK–US "data bridge" for certified organisations) or on approved contract terms such as the ICO's International Data Transfer Agreement or Addendum.
How we keep it secure
The website is served only over an encrypted connection (HTTPS). Access to our server and mailbox is restricted to authorised people and protected by strong authentication. No method of sending or storing data is completely secure, but we take reasonable steps to protect it.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you and get a copy of it;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data;
- ask us to restrict how we use your data;
- object to our use of your data where we rely on legitimate interests; and
- in some cases, ask us to transfer your data to you or another organisation.
These rights have some limits. To use any of them, contact us. It is free, and we will normally reply within one month. We may need to ask you to confirm your identity first.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first so we can try to put it right. We will acknowledge your complaint within 30 days and tell you the outcome without undue delay.
You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection: ico.org.uk/make-a-complaint, helpline 0303 123 1113.
Children
This website is aimed at businesses and adults. It is not designed for children, and we do not knowingly collect children's personal data through it.
Links to other websites
This website links to other sites, including our product websites. Those sites have their own privacy policies, and we are not responsible for how third-party sites handle your data.
Changes to this policy
We may update this policy from time to time, for example if we add a contact form or analytics. The "last updated" date at the top shows when it was last changed. If we make a significant change, we will make it clear on this website.