Privacy Policy
Last updated: January 1, 2025
CFO Upgrade is a product of Onetribeadvisory Ltd, with its registered office at 71-75 Shelton Street, London, United Kingdom, WC2H 9JQ (hereinafter “Onetribe”, “CFO Upgrade”, or “we”). We are committed to protecting your personal data. This policy explains how we collect, process, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU) 2016/679 (GDPR).
1. Data Controller
The controller of your personal data is:
Onetribeadvisory Ltd 71-75 Shelton Street, London, United Kingdom, WC2H 9JQ Email: support@cfoupgrade.com
2. Data We Collect
2.1 Data you provide directly
- Full name
- Email address
- Phone number
- Company name and registration number
- Billing information
2.2 Data collected automatically
- IP address and browser type
- Website usage data (cookies, analytics)
- Technical access logs for the platform
2.3 Data processed within the platform
- Client ERP and accounting system data (Xero, QuickBooks, Sage, Business Central, and others)
- Analytics outputs and reports generated by the platform
- User queries and interactions with the AI analyst
3. Purposes of Processing
We process your personal data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Contract performance and service delivery | Art. 6(1)(b) GDPR |
| Invoicing and accounting | Art. 6(1)(c) GDPR |
| Communication and customer support | Art. 6(1)(b) GDPR |
| Website analytics | Art. 6(1)(a) GDPR (consent) |
| Protection of legitimate interests | Art. 6(1)(f) GDPR |
4. Data Security
Your data is protected in a secure Microsoft Azure environment with enterprise-grade standards:
- Entra ID — identity and access management
- Encryption — data encrypted in transit (TLS) and at rest (AES-256)
- MFA — multi-factor authentication
- UK GDPR & EU GDPR — full compliance with UK and European data protection regulations
- ISO 27001 — information security standards
5. Data Sharing
We do not share your personal data with third parties except:
- Infrastructure providers: Microsoft Azure (data processor within the EU)
- Accounting and legal services: to the extent necessary for legal compliance
- Public authorities: when required by law
Your ERP data processed within the platform is never shared with third parties and is used solely to generate analyses for you.
6. Data Retention
- Contractual data: for the duration of the contract and 5 years after termination
- Accounting documents: 10 years in accordance with accounting legislation
- Website analytics data: 26 months
- Platform ERP data: for the duration of the subscription; deleted within 30 days after termination
7. Your Rights
Under the GDPR, you have the right to:
- Access — obtain information about what data we process about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data
- Restriction of processing — limit how we use your data
- Data portability — receive your data in a structured format
- Object — object to processing based on legitimate interest
- Withdraw consent — withdraw consent at any time (e.g., cookies)
To exercise your rights, contact us at support@cfoupgrade.com .
8. Cookies
Our website uses cookies for proper functionality and traffic analytics. You can review and configure cookie preferences via the cookie banner displayed on your first visit.
9. Changes to This Policy
We reserve the right to update this policy. We will notify you of material changes via email or a notice on our website.
10. Contact
If you have questions about the protection of your personal data:
Onetribeadvisory Ltd (operating as CFO Upgrade) Email: support@cfoupgrade.com Address: 71-75 Shelton Street, London, United Kingdom, WC2H 9JQ