Privacy Policy
Last updated: 15 January 2025
Look, we know privacy policies can feel like reading terms and conditions written in legal speak. But here's the thing — your data matters to us. Not in a corporate-speak way, but genuinely.
This policy walks you through how xerafionlo collects, uses, and protects your information when you use our digital budgeting platform. We've structured this so you can find what you need without wading through unnecessary jargon.
Questions about anything here? Drop us a line at info@xerafionlo.com or call us on +44 7743 376690. Our office is at Canonbury Business Centre, 190A New N Rd, London N1 7BJ.
What Information We Collect
When you sign up for xerafionlo, we collect certain pieces of information. Some you give us directly, others we gather as you use the platform.
Information You Provide
- Name and email address when you create an account
- Financial data you input for budgeting purposes (income, expenses, savings goals)
- Payment information if you upgrade to premium features
- Communication preferences and settings you choose
- Messages you send us through support channels
Information We Collect Automatically
- Device information (browser type, operating system, IP address)
- Usage patterns (which features you use, how often you log in)
- Technical data about your interactions with our platform
- Cookies and similar tracking technologies (more on this below)
We don't sell your financial data. Period. That's not our business model, and it never will be.
How We Use Your Information
Right, so we're not hoarding data for the sake of it. Everything we collect serves specific purposes that make xerafionlo work better for you.
| Purpose | What It Means |
|---|---|
| Platform Operation | Running the budgeting tools, saving your data, syncing across devices |
| Personalization | Tailoring insights and recommendations based on your spending patterns |
| Communication | Sending updates, responding to support requests, sharing relevant tips |
| Security | Detecting fraud, preventing unauthorized access, protecting your account |
| Improvement | Understanding how people use xerafionlo to make it better |
We operate under UK GDPR guidelines, which means we have legitimate legal grounds for processing your data. When we need explicit consent (like for marketing emails), we'll ask for it directly.
Your Rights Under UK GDPR
Data protection laws in the United Kingdom give you considerable control over your information. Here's what you can do:
Access
Request a copy of all personal data we hold about you. We'll provide this within 30 days at no charge.
Correction
Update incorrect information directly in your account settings, or contact us if you need help.
Deletion
Ask us to delete your account and associated data. Some information may need to be retained for legal compliance.
Portability
Export your budgeting data in a commonly used format to take elsewhere if you choose.
Objection
Object to certain types of processing, particularly for marketing purposes or automated decisions.
Restriction
Request that we limit how we use your data while you challenge its accuracy or our legal basis.
How to Exercise Your Rights
- Send an email to info@xerafionlo.com with "Data Rights Request" in the subject line
- Specify which right you want to exercise (access, deletion, etc.)
- We'll verify your identity to protect your information
- You'll receive a response within 30 days explaining what we've done
- If you're not satisfied, you can lodge a complaint with the Information Commissioner's Office
Data Security Measures
Protecting your financial information isn't something we take lightly. Our security approach combines industry standards with common sense precautions.
Technical Safeguards
- 256-bit SSL encryption for all data transmitted between your device and our servers
- Encrypted storage using AES-256 for data at rest
- Regular security audits by third-party specialists
- Automatic logout after periods of inactivity
- Multi-factor authentication available for all accounts
Organizational Protections
- Strict access controls limiting who can view user data internally
- Regular training for staff on data protection practices
- Incident response procedures if a breach occurs
- Background checks for employees handling sensitive information
No system is completely bulletproof. If we detect a breach affecting your data, we'll notify you within 72 hours as required by UK GDPR, along with steps to protect yourself.
How Long We Keep Your Data
We don't hang onto information longer than necessary. But "necessary" depends on the type of data and why we collected it.
Active Account Data
Kept for as long as your account remains active. You control this timeline.
Closed Account Data
Deleted within 90 days after you close your account, except where we have legal obligations to retain records.
Financial Records
Transaction history for premium subscriptions kept for 7 years to comply with UK tax and accounting regulations.
Marketing Data
Removed immediately when you opt out of communications. No grace period.
Aggregated Analytics
Anonymous usage patterns kept indefinitely for product improvement, but stripped of personal identifiers.
Third Parties and Data Sharing
Sometimes we work with other companies to provide xerafionlo's services. We're selective about who we share data with, and we make sure they meet our standards.
Service Providers We Work With
- Cloud hosting providers for secure data storage and platform infrastructure
- Payment processors to handle subscription transactions securely
- Email service providers for sending communications you've opted into
- Analytics platforms to understand how our features perform
- Customer support tools to respond to your questions efficiently
When We Must Share Data
In certain situations, we're legally required to disclose information:
- Valid court orders or legal processes we can't refuse
- Requests from law enforcement with proper documentation
- Protection of xerafionlo's legal rights or defense against claims
- Prevention of fraud or illegal activity on our platform
If a third party ever acquires xerafionlo (through merger, acquisition, etc.), your data would transfer to them. We'd notify you beforehand and give you options about your account.
Cookies and Tracking Technologies
Like most websites, we use cookies. They're small files stored on your device that help xerafionlo remember your preferences and function properly.
Types of Cookies We Use
Essential Cookies
- Session management — keeps you logged in as you navigate
- Security tokens — protects against unauthorized access attempts
- Load balancing — distributes traffic efficiently across our servers
Functional Cookies
- Language preferences — remembers your chosen display settings
- Theme selection — saves whether you prefer light or dark mode
- Feature settings — retains your dashboard customizations
Analytics Cookies
- Usage patterns — shows us which features get used most
- Error tracking — helps us spot and fix technical issues
- Performance monitoring — identifies slow-loading pages
You can control cookies through your browser settings. Disabling essential cookies will affect how xerafionlo works, but you're free to block functional and analytics cookies if you prefer.
International Data Transfers
Our primary servers are located in the United Kingdom. Occasionally, data might be processed in other countries when our service providers operate internationally.
When this happens, we ensure adequate protections through:
- Standard contractual clauses approved by UK authorities
- Verification that destination countries have adequate data protection laws
- Additional security measures beyond what's legally required
- Regular audits of international partners' security practices
If you're accessing xerafionlo from outside the UK, your information will be transferred to and processed in the United Kingdom, where our main operations are based.
Children's Privacy
xerafionlo isn't designed for children under 16. We don't knowingly collect information from anyone under this age.
If you're a parent and believe your child has created an account, contact us immediately at info@xerafionlo.com. We'll delete their information promptly.
For users between 16 and 18, we recommend discussing budgeting tools with a parent or guardian before signing up, though it's not legally required.
Changes to This Policy
Privacy practices evolve. Laws change. Technology advances. When we update this policy, we'll notify you through:
- Email notification to your registered address (for significant changes)
- Prominent notice on the xerafionlo dashboard when you log in
- Updated "last modified" date at the top of this page
Continued use of xerafionlo after changes take effect means you accept the updated terms. If you disagree with modifications, you can close your account before they come into force.
We archive previous versions of this policy. Request older versions by emailing info@xerafionlo.com if you need to reference historical terms.
Still Have Questions?
Privacy can be complicated. If something in this policy isn't clear, or you have specific concerns about how we handle your data, we're here to help.
Get in Touch