Privacy Policy

1. About This Policy

This Privacy Policy explains how Intent Holdings Ltd ("we", "us", "our") collects, uses, stores, and protects personal data in connection with the FXscanner platform. We are the data controller for personal data processed under this policy.

We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

2.1 Account data

When you create an account, we collect your name, email address, company name, and job title. This is necessary to provide you with access to the platform.

2.2 Usage data

We collect information about how you use the platform, including pages visited, features accessed, search queries made, and exports generated. This helps us improve the service.

2.3 Billing data

Payment and billing information is handled directly by our third-party billing provider (Stripe). We retain only transaction records necessary for accounting and legal compliance. We do not store payment card details.

2.4 Communications

If you contact us by email or through the platform, we retain records of that correspondence.

3. How We Use Your Data

We use personal data for the following purposes and on the following legal bases:

Providing and managing your account and platform access (contractual necessity)
Processing payments and maintaining financial records (contractual necessity and legal obligation)
Communicating with you about your account, service updates, and support (contractual necessity)
Improving and developing the platform (legitimate interests)
Complying with legal obligations including tax and accounting requirements (legal obligation)
Sending product updates and relevant communications where you have not opted out (legitimate interests)

4. Data Retention

We retain your personal data for as long as your account remains active. If you delete your account, we will erase your personal data within 30 days of the deletion request, subject to the exceptions below.

We are required by law to retain certain financial and billing records for a minimum of 7 years for HMRC compliance purposes. These records are held by our billing provider and contain only the minimum information required by law. This retention obligation applies even after account deletion.

5. International Data Transfers

FXscanner is hosted on cloud infrastructure that may process data in locations outside the United Kingdom. Where data is transferred outside the UK, we ensure that appropriate safeguards are in place, including standard contractual clauses or UK International Data Transfer Agreements (IDTAs), as required under UK GDPR.

Our key infrastructure providers maintain their own UK GDPR-compliant data transfer mechanisms, details of which are available in their respective privacy documentation. A list of our subprocessors is available at fxscanner.io/security.

We do not sell personal data. We share personal data only in the following circumstances:

With subprocessors who provide services necessary to operate the platform (see our subprocessor list at fxscanner.io/security)
Where required by law, court order, or regulatory authority
In connection with a business transfer or acquisition, where we will notify affected users in advance

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access: obtain a copy of the personal data we hold about you
Right to rectification: request correction of inaccurate or incomplete data
Right to erasure: request deletion of your personal data, subject to legal retention obligations
Right to restriction: request that we limit how we process your data in certain circumstances
Right to data portability: receive your data in a structured, machine-readable format
Right to object: object to processing based on legitimate interests

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Cookies

We use essential cookies to operate the platform (session management, authentication). We may also use analytics cookies to understand how the platform is used. You can manage cookie preferences through your browser settings. A full cookie policy is available on our website.

9. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These measures include encryption in transit and at rest, access controls, and multi-factor authentication for administrative access. Further details are available in our Security documentation at fxscanner.io/security.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay as required by UK GDPR.

ICO registration: ZA550724