Privacy Policy
This Privacy Policy explains how Three Sixty Finance Group Ltd (“we,” “us,” or “our”) collects, uses, and protects personal data through this website, the pages and portals linked from it, and our business development, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Three Sixty Finance Group Ltd is a company registered in England and Wales (Company No. 13520138). Our registered office is at 411 Bowes Road, London, N11 1AB. We are the data controller for the personal data described in this policy.
What data we collect
We collect only the following categories of personal data:
- Contact information: name, email address, phone number and company name when you enquire about our services by email or via a scheduled call.
- Scheduling data: meeting preferences and availability, collected via Calendly if you choose to book a consultation through the embedded booking widget. Calendly is only loaded if you have accepted third-party embeds in the cookie preferences on this site.
- Communication data: any information you provide when corresponding with us by email.
- Model Health Check data: if you take our free Model Health Check, the answers you give about your financial model, the score and report we work out from them, your name, work email address, company and role, what you tell us is coming up for the business, how you found the check, and whether you asked for the newsletter. We also record when you open your report, ask us for a call, confirm the newsletter or ask us to stop emailing you.
- Introductions from partners: if one of our partners introduces you, or you leave your details on a partner’s referral page, your name, work email, company, what you need, whether you are happy for us to get in touch, and who introduced you.
- Partner data: if you are one of our partners, your name, company, work email, your sign-in to our partner area, the introductions you make, the terms we agree and the fee invoices you send us.
- Proposal data: if we send you a proposal, your name and email address, when the proposal page is opened, and, if you accept, the name you accept with. If you share it with a colleague, the name and email address you give us for them.
- 10-Day Model qualifier data: your answers and the result, and if you hold a start date, the name, role and email address for the engagement letter and any purchase order number you give us.
- Business development data: professional information about people at businesses we may be able to help: name, job title, employer, work contact details and LinkedIn profile, our LinkedIn connection requests and messages with you, and publicly available information about your company and role, such as Companies House filings, company websites and news.
- Client portal data: if your business is our client, your sign-in details, the project information, messages, questions and files you share with us in the portal, and a record of what was done and by whom.
This website does not run any analytics or tracking software. We do not use Google Analytics, Meta Pixel or any equivalent. Fonts are self-hosted on our own server; no request is made to Google Fonts or any third-party font service. Standard server access logs are held by our hosting provider (Vercel) for a short period and are used only for security and operational purposes.
Where we get your data
Most of it comes from you. Some comes from others: from a partner or contact who introduces you, from LinkedIn when we connect or exchange messages with you, and from public sources such as Companies House, company websites and published news. If we contact you using data we did not get from you, we will tell you where it came from if you ask.
How we use your data
We use your personal data for the following purposes:
- To respond to your enquiries and schedule consultations
- To deliver services where we have entered into an engagement
- To send relevant communications you have requested
- To improve our website and understand how visitors use it
- To produce your Model Health Check report, send it to you, and follow up with you about your model once
- To keep a record of you as a prospective client in our CRM, with the signals from your Health Check, so we know what to talk to you about
- To contact people at businesses we may be able to help, on LinkedIn or by email, where it is relevant to their role, and to prepare for a first call using public information
- To follow up introductions from our partners, and to track and pay the fees we owe them
- To prepare, send and follow up proposals and 10-Day Model bookings
- To run the client portal and deliver the work we have agreed
We use AI tools to help us keep these records up to date, summarise public information and draft messages. A member of our team reviews and sends every message to you. We do not make decisions about you by automated means alone.
Legal basis for processing
We process your personal data on the following legal bases under UK GDPR:
- Legitimate interests: responding to business enquiries, producing and sending the Model Health Check report you asked for, one follow-up about it, following up introductions, contacting people at businesses we may be able to help about matters relevant to their role, and managing our client, partner and prospect relationships. We use only professional information for this. You can object at any time: every email we send carries a link to stop further emails, and if you tell us on LinkedIn or by email we will not contact you again.
- Contract performance: processing data necessary to deliver agreed services, to run a 10-Day Model booking you make, and to work with our partners under the terms we agree
- Legal obligation: keeping invoices and accounting records
- Consent: where you have specifically opted in, such as the newsletter. We only add you after you confirm from your own inbox, and you can withdraw consent at any time.
Third parties
We share data only where necessary with the following trusted providers:
- Calendly: meeting scheduling. Loaded on this website only if you have opted in via the cookie preferences panel. Calendly's own privacy notice applies to data processed through their platform: calendly.com/pages/privacy.
- Google Workspace: email, calendar and document storage.
- Vercel: website and application hosting. No personal data is stored by Vercel beyond standard server access logs used for security and operational purposes.
- Supabase: the database behind the Model Health Check, proposals, the 10-Day Model qualifier, the partner area and our client portal, hosted in Ireland (EU).
- Resend: sends the emails we write to you, such as your Health Check report, sign-in links and reminders.
- Attio: our CRM, where we keep our records of prospective clients, partners and clients.
- Groovin: records our LinkedIn connection requests and messages in our CRM.
- Anthropic: provides the AI tools we use to keep our CRM up to date, summarise public information and draft messages for our team to review.
- LinkedIn: where we connect and exchange messages with you. LinkedIn’s own privacy policy applies to its platform.
- Substack: publishes our newsletter. We add your email address only after you confirm from your own inbox, and you can unsubscribe from any issue.
We do not sell, rent or trade your personal data to third parties for marketing purposes. This website does not run advertising, retargeting or behavioural profiling of any kind.
International transfers
Some of these providers process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations or the safeguards approved by the Information Commissioner, such as the International Data Transfer Agreement or Addendum.
Data retention
We retain personal data only for as long as necessary for the purposes for which it was collected. Enquiry and correspondence data is typically retained for up to three years. Client engagement data may be retained for up to seven years in line with our legal and regulatory obligations.
Model Health Check answers, scores and reports are deleted automatically eighteen months after the last contact between us, unless you have become a client. Ask us at any time and we delete them sooner, within a month. Your report link stops working when they are deleted.
Prospect records in our CRM, including introductions, proposals and 10-Day Model qualifier answers, are deleted or anonymised once we no longer expect to work together, and no later than three years after our last contact, unless you have become a client. Partner records and fee invoices are kept for up to seven years for accounting purposes.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (the “right to be forgotten”)
- Object to or restrict processing
- Request data portability
- Withdraw consent at any time (where processing is based on consent)
- Stop our emails at any time, using the link in the footer of every email we send
- Ask us not to contact you on LinkedIn or by email again
- Ask where we got your data, if it did not come from you
To exercise any of these rights, please contact us at hello@threesixtyfinance.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Data security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data transmitted via this website and our portals is encrypted using HTTPS. Access to our portals needs a personal sign-in, and our team signs in with a second step.
Changes to this policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of our website following any changes constitutes your acceptance of the revised policy.
Terms of Use
By accessing and using this website, you agree to the following terms. If you do not agree, please do not use this site.
Intellectual property
All content on this website (including text, design, graphics, and the Three Sixty Finance name and logo) is the property of Three Sixty Finance Group Ltd and is protected by applicable intellectual property laws. You may not reproduce, distribute, or use any content without our prior written permission.
Use of the website
You agree to use this website only for lawful purposes and in a manner that does not infringe the rights of others. You must not attempt to gain unauthorised access to any part of the website or its underlying systems.
Third-party links
This website may contain links to third-party websites. We are not responsible for the content, privacy practices, or accuracy of any third-party sites and their inclusion does not imply endorsement.
Limitation of liability
To the fullest extent permitted by law, Three Sixty Finance Group Ltd shall not be liable for any direct, indirect, incidental, or consequential damages arising from your use of, or inability to use, this website or its content.
Governing law
These Terms of Use are governed by and construed in accordance with the laws of England and Wales. Any disputes arising in connection with these terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.
Changes to these terms
We reserve the right to update these Terms of Use at any time. Changes take effect immediately upon posting. Continued use of the website constitutes acceptance of the revised terms.
Disclaimer
Not financial advice
The information on this website is provided for general informational purposes only. Nothing on this site constitutes financial, investment, legal, tax, or accounting advice. You should not act or refrain from acting on the basis of any content on this website without seeking appropriate professional advice tailored to your specific circumstances.
No guarantee of outcomes
Any case studies, examples, or references to past engagements on this website are illustrative only. They do not guarantee or predict similar results for any future client or engagement. Every business is different, and outcomes will vary.
Accuracy of information
While we take reasonable care to ensure the accuracy of information on this website, we make no representations or warranties, express or implied, as to its completeness, accuracy, or fitness for a particular purpose. We reserve the right to update or remove content at any time without notice.
FCA regulation
Three Sixty Finance Group Ltd provides finance, reporting, and operational consultancy services. We do not provide regulated financial advice and are not authorised or regulated by the Financial Conduct Authority (FCA) for the purposes of conducting regulated activities.
Contact
If you have any questions about any of the policies on this page, please contact us at hello@threesixtyfinance.com.