Your planning data should stay under your control.

01 · Local planning

You can use the planning tools without an account.

Many Money Plan, checklist and calculator records are stored in your browser's local storage. This means the underlying plan normally stays on that browser/device unless you deliberately export it or use the optional cloud-sync feature.

• Another device, browser or private browsing session will not automatically have the same local copy.
• Browser/device settings can clear local storage.
• Signing out does not delete local planning data.
• A local export excludes account-session tokens and sync metadata.

02 · Optional account & cloud sync

Account sign-in and plan upload are separate choices.

If you choose to create/use an account, your email address is used for passwordless magic-link sign-in. Supabase provides the authentication and cloud-data infrastructure, and Resend delivers the transactional sign-in email from The Finance Place.

• Signing in by itself does not upload your Money Plan.
• Cloud snapshots are stored in Supabase and protected by account-ownership access controls.
• You can delete the cloud copy while retaining the local browser copy.
• You can separately delete your sign-in account and user-owned cloud planning records after typed confirmation; local planning on that browser is intentionally left on the device.
• Your account session is stored in the browser so the site can recognise your signed-in session.

03 · Anonymous site analytics

We measure aggregate site use without advertising or cross-site tracking.

The Finance Place uses Vercel Web Analytics to understand which public pages are visited, how visitors reached the site, broad device/browser categories and coarse geographic statistics. We use those statistics only to understand and improve the website.

• Vercel Web Analytics does not use analytics cookies and is designed so visitors cannot be tracked across different websites.
• TFP does not use this data for advertising, behavioural profiling, automated decisions or personalised financial recommendations.
• Private account, Money Plan and admin routes are excluded from analytics events.
• Before an event is sent, TFP removes ordinary query parameters and keeps only utm_source, utm_medium and utm_campaign campaign labels where present.
• You can object at any time using the control below. The preference is stored in this browser so future analytics events are stopped.

Vercel describes Web Analytics as first-party, cookie-free and anonymised. See Vercel Web Analytics privacy information ↗.

04 · Why we process data

We use only the data needed to provide and protect the service you choose to use.

• Optional account, authentication and cloud sync: processed because it is necessary to provide the account/cloud service you request (UK GDPR Article 6(1)(b)).
• Security, authentication integrity and anti-abuse: processed where necessary for our legitimate interests in operating and protecting the service (UK GDPR Article 6(1)(f)).
• Aggregate site analytics: used for the sole purpose of producing statistical information to understand and improve the website. TFP provides a simple opt-out and does not use the analytics for advertising or profiling. Where personal data is briefly processed to create those aggregate statistics, we rely on legitimate interests in improving the service, subject to your right to object.
• Local-only planning: where the information remains solely in your browser and is not transmitted to us, The Finance Place does not receive that underlying planning data.

We do not use a catch-all consent box as the legal basis for the core account/cloud service, and the current Phase 1A site does not run direct-marketing campaigns, behavioural advertising or analytics designed to track identifiable visitors.

05 · Security & anti-abuse

The current account and platform use technical safeguards designed to reduce risk.

• Cloud planning is protected by account-ownership row-level access controls.
• The public site uses a browser-safe publishable key rather than a privileged service key.
• Account deletion requires a signed-in session, approved site origin and typed confirmation.
• The private Referral Desk operator identity is protected from accidental self-deletion while it holds operator access.
• The site uses HTTPS and enforced security headers, including a Content Security Policy.
• No internet service can guarantee absolute security.

06 · Service providers & international transfers

We use specialist infrastructure providers to operate the service.

Where service providers process information outside the UK, we assess and rely on the provider's applicable contractual and transfer safeguards as part of the service arrangement.

07 · How long data is kept

We keep personal information only for as long as it is needed for the relevant purpose.

• Browser-local planning remains on the device until you or the browser/device removes it.
• The analytics opt-out preference remains in this browser until it is changed or local site data is cleared.
• Optional cloud planning remains until you delete the cloud copy/account or we otherwise need to remove it to operate the service lawfully and securely.
• Authentication and delivery providers may retain operational/security logs for their own limited service periods.
• Short-lived anti-abuse/rate-limit records used by the enquiry infrastructure are designed to be removed when more than two days old.

08 · Your rights

You can contact us about your personal information.

Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict or receive a copy of your personal information, and to object to certain processing. You can also use the analytics control above to object to anonymous site analytics in this browser.

To make a privacy request, email privacy@thefinanceplace.co.uk. We may need to confirm your identity before acting on a request.

You also have the right to complain to the UK Information Commissioner's Office if you believe your personal information has been handled unlawfully. We would appreciate the opportunity to address your concern first.

09 · Professional introductions

The professional-introduction service is not open in Phase 1A.

The Professionals page currently keeps customer contact-detail submission disabled. A saved Money Plan is therefore not an enquiry and is not automatically sent to a professional or firm.

Before a commercial professional-introduction route is opened, The Finance Place will complete the separate privacy, partner/data-sharing and route-specific regulatory work for that service and update this notice where required.