Privacy policy
Who we are
FNZ Group and its affiliates, the data controllers (collectively referred to as "FNZ", "we", "us" or "our" ), understand the importance of maintaining the confidentiality and security of personal information. This privacy policy describes the privacy practices of FNZ globally and aims to provide transparent information with privacy laws.
For FNZ entities based in Germany, please refer to fnz.de privacy notice.
The following describes information we collect about you, those with whom we share information, how we safeguard your information and how you can contact us regarding our privacy notice and practices or how to exercise your rights. FNZ does not sell your personal information.
This privacy policy is issued by FNZ Group Technologies Limited, as the operator of this website on behalf of the FNZ Group entities who are data controllers in relation to the processing described in this privacy policy. FNZ Group Technologies Limited is a company incorporated under the laws of Jersey with registration number 140226, whose registered office is at 2nd Floor Sir Walter Raleigh House, 48-50 Esplanade, St.Helier, JE2 3QB, Jersey. FNZ Group Technologies Limited’s principal place of business is at No 1 Tanfield, Edinburgh, EH3 5DA. Our telephone number is: +44 (0) 303 333 3330.
FNZ may process your personal data for the purposes set out in this privacy policy, and may also carry out other processing, for any additional purposes that may be separately notified by them to you and, where mandated by local law, they would ask for your consent. Therefore, it is important that you read this privacy policy together with any other privacy policy or fair processing notice provided to you by us . This privacy policy supplements other notices and privacy policies and is not intended to override them.
Our commitment to privacy
We are committed to ensuring that your privacy is protected when personal information about you is provided to us.
Please read this privacy policy carefully. It explains:
The types of personal information which we hold and how it is obtained.
The purposes for which we hold personal information and the legal basis for processing.
How we use the personal information which we hold and who we share it with.
For how long we hold personal information.
Your rights in relation to your personal information.
The procedures we have in place to protect your privacy.
What personal Information do we hold?
We hold the following personal information:
Information which individuals and entities provide to us when contacting us (including through using this website) such as their first name, last name, email address, company name, company address, telephone number, location;
Contact information obtained from our corporate clients, suppliers and other business contacts and prospects, collected in the course of our business dealings and through events, conferences and publication of newsletters, articles and publications in the media. This information will include name, and business contact details, job role, employer entity or professional status;
Contact details and information gathered from professional end users who agree to participate in market research on our products;
Information obtained by us through users visiting this website (such as the user’s IP address, location, user journey through the website and whether the user visited the website via LinkedIn). We obtain this information from the users themselves and from the third parties we use to analyze our website traffic and provide us with analytics; and
Information about individuals who may be interested in working with, or being employed by, FNZ. This information may include name, address and contact details, civil and immigration status, information about current and past roles, skills, experience and qualifications, references and the results of pre-employment checks and assessments.
For what purposes do we hold personal information?
Business contacts and enquiries
If you contact us through a form on our website, then your personal information is stored securely in our instance of HubSpot, which is a Marketing Automation platform.
We use information provided to us by individuals who have contacted us or given us business contact information for our own administrative and business development purposes. This includes responding to enquiries we receive, following up business contacts and providing information about our business and products where you have agreed to receive this information. Depending on how you have contacted us, we may respond to you by letter, e-mail, fax, telephone or SMS.
From time to time, we may invite our corporate clients, suppliers, other business contacts or other professional end users to participate in market research, including feedback surveys, on existing and/or potential new products and services developed by members of the FNZ group.
Marketing (including email marketing)
Provided that you have opted in to receive marketing communications from FNZ , our Group entities may share your contact details with other FNZ Group entities, who may also send you marketing communications.
From time-to-time we may send you content via email that we believe will be of interest to you. This content may include updates about forthcoming events, webinars, company news, press releases, reports, analysis, product releases, videos, and thought leadership.
We will only send marketing communications to you if you opt-in to receive them from us. You have the right to opt-out of these communications at any time by clicking on ‘unsubscribe’ link or button in the footer of the marketing email you receive.
We will also use your personal data to deliver relevant website content on our website and advertisements on third party websites to you. We will use analytical tools to measure and understand the effectiveness of advertising that we serve you and your engagement with our marketing efforts.
Website traffic
We use information obtained by us through users visiting this website for our own administrative, business and product development purposes. We monitor interest in our website pages, to improve the content and performance of our website and monitor and protect the security of our website. In doing so we use your IP address and session data. We undertake analysis of our website visitor data using tools provided by third party digital service providers, such as Google Analytics, which do not identify individual users or associate your IP address with any other data, and we may share the results at an aggregated level with our website development partners. This aggregated data is made up from statistics in respect of individual persons but will not include personally identifying information.
We also use HubSpot, which is a Marketing Hub that helps us better understand user behaviour on fnz.com. HubSpot cookies are set when a visitor on fnz.com accepts these cookies. If you're a visitor to fnz.com, you can opt out of these optional cookies by not giving consent. We use this data to understand activities on our website and the performance of our content, in order to make improvements to our website. We also use this data to remember preferences, such as previously submitted form field values, when a visitor returns to our website, which makes contacting us easier.
For information about how we use cookies and how to change your cookie preferences, please see here.
Recruitment
For recruitment and selection purposes we collect the following information:
personal contact details - name, title, addresses, telephone numbers, and personal email addresses, provided by you or the recruitment agency;
information to assist us monitor diversity (optional);
information from your CV or gained from the sources mentioned below, about your employment history, education, skills, experience and qualifications; and
interview feedback, results of aptitude tests and assessments of your suitability for the role, where applicable
For referencing and pre-employment screening purposes, we collect the following information:
references from past employers (including regulatory references if required for your role);
immigration status, nationality and citizenship and copies of right to work documentation;
credit, criminal, identity, financial, fraud and sanctions checks, which include past criminal record, credit history and sanctions status if local laws allow; and
academic qualifications checks.
We might receive some personal data about candidates for employment from recruitment consultants, employees as part of our referral plan, our business partners who provide us with candidate information, professional networking sites that you subscribe to, such as LinkedIn, your past employers where you have nominated them as referees; credit checking agencies; fraud and sanctions checking agencies; background and criminal records checking agencies; educational establishments from whom you have gained qualifications; and any specialist firms we use to advise us on matters such as visa, immigration or tax requirements for specific situations.
We use information about potential candidates for employment or services contracts with the relevant FNZ Group entity to assess suitability for roles and opportunities that we have available.
We collect certain personal information from recruitment candidates, on a voluntary basis, for the purpose of monitoring and promoting diversity and inclusion within our business. Individuals may choose to provide information such as their socio-economic background, military service, gender identity, ethnicity, disabilities, and/or sexual orientation. There are no consequences for the individual choosing not to provide us with any diversity data.
We use this data to understand the diversity of our organization and promote fairness and equality; to benchmark our progress; and to demonstrate to internal and external stakeholders that we are a diverse organization with an inclusive culture. Diversity data is only used at an aggregate level which does not identify individuals. Your individual data is held securely on our HR system and is not shared with any third party, except the system provider for service and support purposes.
If you submit an application through the FNZ website recruitment portal, FNZ Group Technologies Limited, as operator of the website, will pass the application to the appropriate FNZ Group employer entity for the role you have applied for. That FNZ entity will be the controller of your information, as potential employer entity, and will be responsible for the selection and recruitment process.
Legal basis for processing
Where UK and/or European data protection laws apply:
When processing your business contact, market research, website usage or recruitment candidate personal data as described above, we rely on the legal basis that the processing is in our legitimate business interests as a commercial business, and our interests are not outweighed by your privacy rights as an individual.
When sending you marketing emails or newsletters, we rely on a legal basis that you have given us your consent to receive these
When processing immigration and right to work information in a recruitment context, we rely on the lawful basis that it is necessary for us to meet our legal obligations.
When processing regulatory references, and criminal records information obtained from initial screening, we rely on the lawful basis that the processing is necessary for the prevention of unlawful acts, in the public interest.
When processing diversity data, we rely on the legal basis that we have a legitimate interest in doing so, and that monitoring equality of opportunity and treatment of individuals is in the public interest.
Recipients (or categories of recipients) of your personal data
Each member of the FNZ Group which is a data controller may share your personal data with:
Third parties who provide us with candidate information, host our HR system, administer specialist assessments and carry out pre-employment checks with past employers, credit, fraud and sanctions checking agencies, background and criminal record checking agencies and educational establishments;
Third parties which we use to maintain this website, analyze website use, maintain our contact database and assist us with marketing and market research;
Third parties which host our Client Relationship Management, Supplier Management and Finance tools;
Other members of the FNZ Group;
Our legal, accounting and other professional advisers; and
Third parties to comply with any requests made to us by law enforcement or regulatory bodies and where we are required to do so by law or in connection with legal proceedings.
Due to the international nature of FNZ’s business, we will sometimes send personal data to another member of the FNZ Group. Our suppliers might also process and/or host your data in a foreign country. In such cases, we ensure that your data benefits at least from the same level of protection you would have in your home country, and is in compliance with your jurisdiction’s laws. In some jurisdictions this can only occur once consent is sought.
Transfers of personal data to countries outside the UK and/or European Economic Area (EEA) and/or Switzerland
To protect your personal data when it is shared with FNZ Group entities outside the UK/EEA/Switzerland, we ensure that the recipient entities are bound by UK/EEA/Swiss approved Standard Contractual Clauses (SCCs), unless the recipient is in a country where the data protection regime is deemed equivalent to your jurisdiction’s law by local authorities.
For the purposes of UK/EU/Swiss data protection laws (where applicable), your personal data may also be processed outside the UK/EEA/Switzerland when we use suppliers who have global operations and/or international data hosting.
When we transfer personal data to third parties who might operate and/or store data outside of the UK/EEA/Switzerland, we ensure that there are adequate organizational, technical and legal safeguards in place to protect your personal data. Generally, legal safeguards will take the form of UK or EU or Swiss adequacy decision, including the EU/UK/Swiss-US Data Privacy Framework (DPF) or approved Standard Contractual Clauses (SCCs), unless the supplier has ‘Binding Corporate Rules’ (BRC) in place within the supplier’s organization.
Automated decision making
In carrying out the processing described in this privacy policy, we do not make any decisions about individuals (which would have a legal or similar significant effect) based solely on automated processing of their personal data.
For how long do we hold personal information?
We will not hold on to any personal information collected for the purposes described above for longer than is reasonably necessary for those purposes, and to ensure we are able to comply with legal, regulatory and accounting requirements. We have Country Record Retention Schedules which define local retention rules depending on local laws and regulations, and market practices.
Our standard retention period for candidate personal data is 24 months in the talent pool for future opportunities. You can exercise your right to delete, would you wish to have your data removed earlier. Our retention period for business contact information depends on local business practice. It is typically 7 years in the UK. The retention periods that apply to the cookies we collect via the website are set out in our Cookie Policy here. If you withdraw your consent to receive sales and marketing material, we will remove your details from our contact list.
Once the retention period expires, personal data is deleted. Therefore, where applicable, the right to access, the right to erasure, the right to rectification, and the right to data portability cannot be enforced after the expiration of the retention period.
Your rights in relation to your personal information
To the extent that local data protection laws apply, you will have the following rights in relation to the information about you which we process as described in this privacy notice:
To receive a copy of your personal information, free of charge;
To have your information amended, if it is incomplete or incorrect;
To object to our processing your information, on grounds relating to your particular situation (but we can decline your request, if we can show compelling legitimate grounds for the processing which override your interests, or if we need to process your information for the establishment, exercise or defense of legal claims);
To require us to restrict the processing of your data, if you have asked for it to be amended or objected to our processing, until we have verified your request. You can also ask us to keep your personal data, but restrict the processing of it, if we no longer need it and would delete it, but you want us to keep it to enable you to bring or defend a legal claim;
To have your information deleted, if we no longer need to keep it, if you have objected to the processing, and we have not demonstrated an overriding need to keep it, or if we are required by law to delete it.
To ask us to delete any information that you provide to us on a voluntary basis and with your express consent – in that case you can withdraw your consent at any time and ask us to delete the information;
To have your personal data processed by us electronically transferred to you, or to someone else nominated by you, in a structured, commonly used and machine-readable format. This only applies to information you have provided to us voluntarily;
To lodge a complaint about our processing of your information with the relevant supervisory authority (e.g. the Information Commissioner’s Office (ICO) for the UK)
If you wish to exercise any of these rights in relation to your personal data, please
What procedures do we use to protect your privacy?
We undertake to process the personal information which we collect in accordance with the applicable laws on data protection.
We have strict security procedures covering the storage and disclosure of your information (although we do not warrant that this is the case) in order to prevent unauthorized access. This means that we may ask for proof of identity before disclosing personal information to you.
This website contains links to other websites. Equally, other websites may provide links to this website. Please be aware that we are not responsible for the privacy practices of such other websites. We encourage you to read the privacy policies, if any, of each and every website which you use.
Please note that the Internet is not a secure medium. When submitting personal information to us using the Internet, your details may not be secure from access by third parties. The submission of personal information to us using the Internet is therefore made at your own risk.
Further important points
If we change our privacy policy while this website remains active, we will post the new Privacy Policy on this website. This Privacy Policy was last updated on 31 July 2025.
We welcome your views about our website and our Privacy Policy. If you would like to contact us with your views, please contact us by filling in the form here or writing to the relevant office location.