Legal
How Aston Finch handles personal information provided through this website and in the course of our advisory work.
Last updated: 26 September 2026
Aston Finch is an independent advisory business based in the United Kingdom, and is the data controller for personal information collected through this website.
For any question about this notice, or to exercise your rights, contact us at info@astonfinch.com.
If you use the enquiry form, we collect the name, business name, email address, telephone number and, if you provide them, approximate turnover band and the engagement you are interested in, together with what you tell us about your enquiry.
An enquiry sent through the form is emailed to us and a copy is kept in the client system described below, so that we can pick it up and, if an engagement follows, work from it.
If you go on to commission an engagement, we will hold the business information you share with us for that purpose, which may include personal information about you and, in limited circumstances, about others connected to the business.
Where we set up access to the Client Portal for you, we also hold your name, email address, your role in the business if you give it, the answers you enter in the portal, what you tell us about the information we have asked for, and a record of what happened on your engagement and when. Passwords are held by our authentication supplier and are never visible to us.
Supporting documents may be provided through the Client Portal, against the items we have asked for. They are used to deliver the engagement they were provided for, and form part of that engagement’s record. Access is limited to the people at your organisation who have been given portal access, and to Aston Finch advisers. You can remove a document yourself while the item it answers is still open.
This website does not use advertising cookies or tracking pixels, and no non-essential cookies are set. We use cookieless analytics provided by our hosting supplier to count visits to pages. The Client Portal sets only the cookies needed to keep you signed in.
We do not use your information for marketing lists or automated decision-making.
Information is not sold, and it is not shared with brokers, buyers or introducers. We use a small number of service providers, who process information on our instructions only: Vercel hosts this website, Supabase provides the database and sign-in for the Client Portal, and Resend sends our email. We will share information with your own advisers where you ask us to, and with others where we are required to by law.
Enquiries that do not proceed are normally retained for up to 12 months after our last meaningful contact and are then securely deleted. Records relating to completed engagements are retained for up to six years after completion to meet legal, regulatory and professional record-keeping requirements, after which they are securely deleted unless a longer retention period is required by law. This applies to what is held in the Client Portal as well as to our own files and email.
You can ask us to delete your enquiry or your portal records sooner, and we will do so unless we are required to keep them. Write to us at the address below.
Information is held on systems provided by established suppliers. Where information is transferred outside the United Kingdom, we rely on the safeguards those suppliers put in place, such as the UK international data transfer agreement or an adequacy decision.
You have the right to ask for a copy of the personal information we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to ask for it to be transferred to another organisation. Where we rely on consent, you can withdraw it at any time.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk. We would prefer the chance to put things right first.
We take reasonable technical and organisational measures to protect the information we hold, and we ask for no more information than a review requires.
We may update this notice from time to time. The current version is always the one published on this page.