Information We Collect
Xuralenthosis collects information to provide our financial planning subscription services effectively and securely. We collect information you provide directly, automatically through your use of our services, and from third parties where legally permitted.
Information You Provide
- Personal details: name, email address, phone number, postal address
- Financial information: income, expenses, financial goals, investment preferences
- Account information: subscription details, payment information, service preferences
- Communication records: emails, phone calls, chat messages, feedback
Information Collected Automatically
- Device information: IP address, browser type, operating system
- Usage data: pages visited, time spent, features used, click patterns
- Technical data: cookies, web beacons, similar tracking technologies
How We Use Your Information
We use your personal information for the following purposes:
Service Delivery
- Providing personalised financial planning advice and recommendations
- Processing subscription payments and managing your account
- Communicating about your financial plans and service updates
- Delivering customer support and responding to inquiries
Business Operations
- Improving our services and developing new features
- Conducting research and analysis to enhance user experience
- Preventing fraud and ensuring platform security
- Complying with legal obligations and regulatory requirements
Legal Basis for Processing
Under UK GDPR, we process your personal data based on:
- Contract performance: To deliver our financial planning services
- Legitimate interests: To improve services and prevent fraud
- Legal obligations: To comply with financial regulations
- Consent: For marketing communications and optional features
Information Sharing
We do not sell your personal information. We may share your information in these circumstances:
Service Providers
We work with trusted third-party service providers who help us deliver our services, including payment processors, cloud storage providers, and analytics services. These providers are contractually bound to protect your information.
Legal Requirements
We may disclose information when required by law, court order, or regulatory authority, or to protect our rights, property, or safety, or that of our users or the public.
Data Security
We implement appropriate technical and organisational measures to protect your personal information:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and employee training
- Secure payment processing through certified providers
Your Rights
Under UK data protection law, you have the following rights:
- Access: Request copies of your personal information
- Rectification: Correct inaccurate or incomplete information
- Erasure: Request deletion of your personal information
- Restriction: Limit how we process your information
- Portability: Receive your data in a structured format
- Objection: Object to processing based on legitimate interests
Data Retention
We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Typically:
- Active subscription data: retained while your subscription is active
- Financial records: retained for 7 years after subscription ends
- Marketing data: retained until you withdraw consent
- Technical data: typically retained for 24 months
International Transfers
Your personal information may be transferred to and processed in countries outside the UK. When this occurs, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses.
Contact Us
For questions about this Privacy Policy or to exercise your rights, contact us:
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal information appropriately.
Last updated: June 23, 2025