Privacy Policy

1. Introduction

Welcome to Finonic – Smart Finance SLU (“Finonic”, “we”, “our”, or “us”). We are a finance support company registered in Spain, providing financial operations, cashflow visibility, payment reconciliation, and related services to e-commerce and online businesses across Europe.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website (www.finonic.com) or use our services. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection laws.

By using our website or services, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our services.

2. Data Controller

The data controller responsible for your personal data is:

Finonic – Smart Finance SLU Registered in Spain (SLU – Sociedad Limitada Unipersonal) Email: privacy@finonic.com

3. What Personal Data We Collect

3.1 Data You Provide Directly

Contact information (name, email address, phone number, company name)
Account registration details
Financial information required to deliver our services (bank account details, transaction data, invoices)
Communications you send us via email or contact forms
Any documents or files you share with us in the course of service delivery

3.2 Data Collected Automatically

IP address and browser information
Pages visited and time spent on our website
Cookies and similar tracking technologies (see Section 9)
Referral source and device type

3.3 Data from Third Parties

Data from integrated accounting software (Xero, QuickBooks, NetSuite)
Data from payment platforms and merchant accounts you connect to our services
Data from banking integrations

4. How We Use Your Personal Data

We use your personal data for the following purposes:

To provide and manage financial operations support services
To process payment flows, reconciliations, and financial data
To communicate with you about your account and our services
To respond to your inquiries and provide customer support
To improve and develop our services
To comply with legal and regulatory obligations
To send you relevant updates and information (with your consent where required)
To protect against fraud and ensure the security of our systems

5. Legal Basis for Processing

We process your personal data on the following legal grounds under GDPR:

Contract performance: Processing necessary to deliver the services you have engaged us for.
Legal obligation: Processing required to comply with applicable laws and regulations.
Legitimate interests: Processing for fraud prevention, business improvement, and security.
Consent: Where you have given explicit consent (e.g. for marketing communications).

6. How We Share Your Data

We do not sell your personal data. We may share your data with the following third parties only where necessary:

Integrated software providers (Xero, NetSuite, QuickBooks) as required for service delivery
Banking and payment processing partners
Cloud infrastructure and hosting providers
Professional advisors (lawyers, accountants) under strict confidentiality
Regulatory bodies and law enforcement where legally required

All third parties are required to handle your data securely and in compliance with applicable data protection laws.

7. International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. In general:

Client financial data: Retained for a minimum of 7 years in accordance with Spanish and EU accounting regulations.
Website usage data: Retained for up to 24 months.
Marketing communications data: Retained until you withdraw consent.

When data is no longer required, it is securely deleted or anonymised.

9. Cookies

Our website uses cookies and similar technologies to improve your browsing experience and analyse website traffic. You may manage your cookie preferences through your browser settings. For detailed information, please refer to our Cookie Policy available on our website.

10. Your Rights Under GDPR

As a data subject, you have the following rights:

Right of access: To request a copy of the personal data we hold about you.
Right to rectification: To request correction of inaccurate or incomplete data.
Right to erasure: To request deletion of your data in certain circumstances.
Right to restriction: To request that we limit the processing of your data.
Right to data portability: To receive your data in a structured, commonly used format.
Right to object: To object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at privacy@finonic.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

11. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include encryption, access controls, and regular security reviews. However, no method of transmission over the internet is completely secure and we cannot guarantee absolute security.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of significant changes by posting the updated policy on our website with a revised date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

13. Contact Us

Finonic – Smart Finance SLU Email: contact@finonic.com Website: www.finonic.com