Privacy Policy

Last updated: June 2026

FinData Consultant ("we," "our," or "us") is committed to protecting the privacy and confidentiality of your financial data. This Privacy Policy outlines how we collect, store, process, and safeguard information when you use our accounting, bookkeeping, and compliance services.

Data Isolation Protocols

All client accounting databases, transactional logs, and ledger uploads are maintained in logically and physically isolated environments. Each client engagement is provisioned with dedicated storage partitions, ensuring that no cross-contamination of financial records occurs between clients. Access to client data is restricted to authorized personnel only, enforced through role-based access controls and multi-factor authentication.

Storage Encryption Standards

We employ end-to-end encryption (AES-256) for all data at rest and in transit. Bank statement files, API connection payloads, software logs, and any uploaded financial documents are encrypted before storage and decrypted only during authorized processing. Our infrastructure uses TLS 1.3 for all network communications, ensuring that data transmitted between your systems and ours remains secure from interception.

Regulatory Alignment

Our data handling practices are designed to align with international and regional privacy frameworks, including the General Data Protection Regulation (GDPR) and applicable data protection laws in the Kingdom of Saudi Arabia and the Gulf Cooperation Council. We regularly review our policies to remain compliant with evolving regulatory requirements.

Audit Intervals

We conduct scheduled third-party security audits on a bi-annual basis to identify and remediate potential vulnerabilities. These audits cover access controls, encryption protocols, network security, and physical data center safeguards. Audit reports are reviewed by our security team, and any findings are addressed promptly to prevent credential or data exposure.

Data Retention & Deletion

Client data is retained for the duration of the engagement plus any applicable statutory retention period. Upon request or termination of services, data is securely deleted or returned to the client in a standard export format, unless retention is required by law.

Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at Info@findataconsultant.com.