Data Protection
Privacy Policy
This policy explains how Finest Planner LLP collects, uses, stores and protects personal data and business information when you use the FINEST Planner platform or interact with us directly.
Last updated: 4 September 2026
Who we are
The data controller for your account and billing information is:
Finest Planner LLP
Company number: OC461008
Registered office: Harbro House, Crown Lane, Denbigh, LL16 3SY
Email: hello@finestplanner.com
Phone: 01202 237 367
ICO registration number: Z2367786
What data we process
FINEST Planner is a client-lifecycle and CRM platform used by subscribing firms. The data we process falls into two categories:
Data you enter
Client records, contact details, addresses, financial and estate-planning information, case notes, document metadata, transaction or plan data, and any other business information inputted by authorised users of a subscribing firm.
Data we collect directly
Account holder names, business contact details, billing information, support correspondence, demonstration enquiries, website analytics, and technical logs needed to run and secure the service.
Controller and processor roles
When Finest Planner is a processor. For any personal data about a subscribing firm’s own clients, prospective clients, or business contacts that users enter into FINEST Planner, the subscribing firm is the data controller and Finest Planner LLP acts as a processor. We only process that data on documented instructions from the firm, to deliver, secure and improve the platform.
When Finest Planner is a controller. For your FINEST Planner account, billing records, direct marketing preferences, support tickets and enquiries sent to us, Finest Planner LLP is the data controller.
We do not sell personal data. We do not use client records entered by a subscribing firm for any purpose other than providing the service to that firm.
Purpose and legal basis
We process personal data under UK GDPR on the following legal bases:
- Contract. To provide and maintain the FINEST Planner CRM platform, process subscriptions, authenticate users, and respond to support requests.
- Legitimate interests. To keep the service secure, prevent fraud, enforce our terms, and communicate service updates relevant to subscribers.
- Consent. Where you have opted in to receive marketing communications or non-essential analytics cookies.
- Legal obligation. To comply with applicable laws, court orders, or regulatory requests.
How we keep data secure
Security is built into the platform by design:
- All data is encrypted in transit using TLS and at rest using industry-standard encryption.
- Access is controlled by role-based permissions and strong authentication.
- We conduct regular backups and maintain business-continuity procedures.
- We monitor for vulnerabilities and unauthorised access, and we train our staff on data-protection obligations.
Sub-processors and hosting
We use carefully selected sub-processors to host, back up and support the platform. Current categories include:
Cloud hosting and database services
Provided by ISO 27001-certified and UK/EU-based infrastructure partners. Data is stored within the United Kingdom or European Economic Area unless a specific lawful transfer mechanism applies.
Backup and disaster recovery: Automated encrypted backups are retained according to our retention schedule and tested periodically.
A current list of specific sub-processors is available on request to subscribing firms and is covered by data-processing terms in our service agreement.
Data retention
Platform data entered by a subscribing firm. Retained for as long as the firm maintains an active FINEST Planner subscription and for a reasonable period afterwards to allow for export, legal holds, or business continuity. After contract termination, data is deleted or returned in accordance with the firm’s instructions and our service terms, unless a longer retention period is required by law.
Billing and account records. Retained for at least six years to meet accounting, tax and legal obligations.
Support and enquiry records. Retained for as long as necessary to manage the relationship and then securely deleted.
Your data protection rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request erasure, subject to our legal and contractual obligations.
- Restrict or object to certain processing.
- Request a portable copy of your data.
- Withdraw consent at any time, where processing is based on consent.
If you are an individual whose data has been entered into FINEST Planner by a subscribing firm, please contact that firm directly in the first instance, since it is the data controller for your client record. You may also contact us and we will direct your request appropriately.
Cookies and analytics
Our website and platform use essential cookies for authentication, security and service continuity. Where we use analytics or marketing cookies, we will ask for your consent first. You can manage or withdraw consent at any time through the cookie preferences on the site.
How to complain
If you have a concern about how we handle personal data, please contact us first so we can resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: www.ico.org.uk
Data protection contact
For any privacy or data-protection questions, including subject-access requests, please contact:
Data Protection Enquiries
Finest Planner LLP
Harbro House, Crown Lane, Denbigh, LL16 3SY
Email: privacy@finestplanner.com
Changes to this policy
We may update this policy from time to time to reflect changes in law, our services, or our data practices. The latest version will always be published on this page with the date of the last update.