Can we use a cookie to see how you use this site? It tells us which pages you read, including before you get in touch. None of it is used for advertising. How we use it

Legal

Privacy policy

This Privacy Policy applies between you, the User of this Website, and Northexis Limited, the owner and provider of this Website. Northexis Limited takes the privacy of your information very seriously. This Privacy Policy applies to our use of any and all Data collected by us or provided by you in relation to your use of the Website.

This Privacy Policy should be read alongside, and in addition to, our Terms and Conditions.

Please read this Privacy Policy carefully.

Definitions and interpretation

  1. In this Privacy Policy, the following definitions are used:

    Data
    collectively all information that you submit to Northexis Limited via the Website. This definition incorporates, where applicable, the definitions provided in the Data Protection Laws;
    Cookies
    a small text file placed on your computer by this Website when you visit certain parts of the Website and/or when you use certain features of the Website. Details of the cookies used by this Website are set out in the clause below (Cookies);
    Data Protection Laws
    any applicable law relating to the processing of personal Data, including but not limited to the GDPR, and any national implementing and supplementary laws, regulations and secondary legislation;
    GDPR
    the UK General Data Protection Regulation;
    Northexis Limited, we or us
    Northexis Limited, a company incorporated in England and Wales with registered number 16159761 whose registered office is at 88 Boundary Road, Hove, BN3 7GA, United Kingdom;
    UK and EU Cookie Law
    the Privacy and Electronic Communications (EC Directive) Regulations 2003 as amended by the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011 & the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2018;
    User or you
    any third party that accesses the Website and is not either (i) employed by Northexis Limited and acting in the course of their employment or (ii) engaged as a consultant or otherwise providing services to Northexis Limited and accessing the Website in connection with the provision of such services; and
    Website
    the website that you are currently using, northexis.com, and any sub-domains of this site unless expressly excluded by their own terms and conditions.

  2. In this Privacy Policy, unless the context requires a different interpretation:

    1. the singular includes the plural and vice versa;
    2. references to sub-clauses, clauses, schedules or appendices are to sub-clauses, clauses, schedules or appendices of this Privacy Policy;
    3. a reference to a person includes firms, companies, government entities, trusts and partnerships;
    4. “including” is understood to mean “including without limitation”;
    5. reference to any statutory provision includes any modification or amendment of it;
    6. the headings and sub-headings do not form part of this Privacy Policy.
Back to top

Scope of this Privacy Policy

  1. This Privacy Policy applies only to the actions of Northexis Limited and Users with respect to this Website. It does not extend to any websites that can be accessed from this Website including, but not limited to, any links we may provide to social media websites.
  2. For purposes of the applicable Data Protection Laws, Northexis Limited is the “data controller”. This means that Northexis Limited determines the purposes for which, and the manner in which, your Data is processed.
Back to top

Data collected

  1. We may collect the following Data, which includes personal Data, from you:

    1. name;
    2. contact Information such as email addresses, telephone numbers and professional information;
    3. IP address (automatically collected);
    4. web browser type and version (automatically collected);
    5. operating system (automatically collected);
    6. the pages of the Website you visit, how long they are on screen, the website that referred you and any campaign it tagged, your approximate location (country) and your device type, and the words you type into the Website’s search, with anything that looks like an email address, web address or number removed (automatically collected);
    7. where you accept analytics cookies, a record of your visits to the Website linked by a random identifier and, if you contact us, linked to the details you give us;
    8. if you send us a job application or ask to be considered for a role, your CV and anything else you choose to include, such as your employment history and qualifications;
    9. if you use The Finance Check on the Website, your answers to its questions and, if you ask us to email you the full version of your result, the details you give us for that: your name, work email address, organisation (if you give it), your choice of free consulting time and, if you tell us you are a charity, your charity number;
    10. if you sign up to The Compass, our monthly newsletter, your email address, where on the Website you signed up, and when you asked and when you confirmed;
    11. if you raise a support ticket on the Website, your name, work email address, company, the priority you choose, your description of the problem and any file you attach;
    12. if you register for one of our events, such as The FP&A Takeaway, your name, work email address, company, the email address you would like any voucher sent to, and anything you choose to tell us;

    in each case, in accordance with this Privacy Policy.

Back to top

How we collect Data

  1. We collect Data in the following ways:

    1. data is given to us by you;
    2. data is received from other sources; and
    3. data is collected automatically.
Back to top

Data that is given to us by you

  1. Northexis Limited will collect your Data in a number of ways, for example:

    1. when you contact us through the Website, by telephone, post, email or through any other means;
    2. when you register with us and set up an account to receive our products/services;
    3. when you elect to receive marketing communications from us;
    4. when you use our services;
    5. when you send us a job application or CV;
    6. when you ask us to email you the full version of your result from The Finance Check;
    7. when you sign up to The Compass on the Website, including by ticking the box on our contact form;
    8. when you raise a support ticket on the Website;
    9. when you register for one of our events on the Website;

    in each case, in accordance with this Privacy Policy.

Back to top

Data that is received from publicly available third parties sources

  1. We may receive Data about you from any publicly available third party sources.
Back to top

Data that is collected automatically

  1. To the extent that you access the Website, we will collect your Data automatically, for example:

    1. we automatically collect some information about your visit to the Website. This information helps us to make improvements to Website content and navigation, and includes your IP address, the date, times and frequency with which you access the Website and the way you use and interact with its content.
    2. where this Website uses cookies or similar storage, we will collect your Data automatically in line with the cookie settings on your browser. For more information about cookies, and how we use them on the Website, see the section below, headed “Cookies”.
    3. where you accept analytics cookies, we link your visits over time using a random identifier stored in a cookie, and if you then contact us through the Website we link that record to your enquiry. Full details, including how to refuse or withdraw, are in our Cookies and storage notice.
    4. when you complete The Finance Check, your answers are used to work out your result at the time. Unless you untick the box at the end of the questions, we also keep a copy of your answers for our research, with the month in which you gave them. Nothing that identifies you is kept with that copy: not your name, email address or IP address, and no cookie or other identifier, and it is not linked to any record of your visits. Because it cannot be linked to you, we cannot find or delete it afterwards. To stop the same answers being counted twice, we keep a one-way coded form of the security code in the questions page for eight days, separately from the answers, and then delete it. We only publish figures from this research that combine the answers of at least ten people, and we never publish or share anyone’s individual answers. So that you can return to your result or pass it on, your answers are held, in coded form, in the web address of your result page. Our hosting provider, Cloudflare, keeps a record of the web addresses requested from the Website, including that one, for a short period (currently three days) for the security and operation of its service, after which it is deleted automatically.
Back to top

Our use of Data

  1. Any or all of the above Data may be required by us from time to time in order to provide you with the best possible service and experience when using our Website. Specifically, Data may be used by us for the following reasons:

    1. internal record keeping;
    2. improvement of our products / services;
    3. transmission by email of marketing materials that may be of interest to you;
    4. contact for market research purposes which may be done using email, telephone, fax or mail. Such information may be used to customise or update the Website;
    5. measuring how the Website is used, so that we can improve it;
    6. where you have accepted analytics cookies and then contacted us, understanding which parts of the Website you read before contacting us, so that we can respond to your enquiry;
    7. considering you for a role with us, now or in the future, where you have sent us an application or CV. If you tell us about a disability or health condition so that we can make adjustments, we use that information only for that purpose;
    8. where you ask us to, sending you the full version of your result from The Finance Check, arranging any free consulting time you choose and checking any charity number you give us against the relevant public register of charities;
    9. unless you opt out, research into how finance teams work, using anonymous copies of answers to The Finance Check, and publishing figures that combine the answers of at least ten people;
    10. sending you The Compass, our monthly newsletter, where you have signed up and confirmed that you want it;
    11. dealing with support tickets you raise, and keeping a record of them;
    12. running events you register for: sending you the joining details, any voucher and the link to claim any certificate that comes with the event, keeping a record of who registered and, from the attendance report of the meeting service, who attended and for how long, and following up with you afterwards, including with a recording of the session;

    in each case, in accordance with this Privacy Policy.

  2. We may use your Data for the above purposes if we deem it necessary to do so for our legitimate interests. If you are not satisfied with this, you have the right to object in certain circumstances (see the section headed “Your rights” below).

  3. For the delivery of direct marketing to you via email, we’ll need your consent, whether via an opt-in or soft-opt-in:

    1. soft opt-in consent is a specific type of consent which applies when you have previously engaged with us (for example, you contact us to ask us for more details about a particular product/service, and we are marketing similar products/services). Under “soft opt-in” consent, we will take your consent as given unless you opt-out.
    2. for other types of e-marketing, we are required to obtain your explicit consent; that is, you need to take positive and affirmative action when consenting by, for example, checking a tick box that we’ll provide.
    3. if you are not satisfied with our approach to marketing, you have the right to withdraw consent at any time. To find out how to withdraw your consent, see the section headed “Your rights” below.
  4. The linking of your visits described in clause 9c relies on your consent, which you give by clicking Accept and can withdraw at any time from our Cookies and storage notice. Counting visits to the Website without identifying anyone relies on our legitimate interest in understanding how the Website is used and improving it. Keeping an anonymous copy of your answers to The Finance Check, described in the section headed “Data that is collected automatically”, relies on our legitimate interest in researching how finance teams work and publishing that research. You can opt out by unticking the box at the end of the questions before you see your result. Sending you The Compass relies on your consent. You give it by signing up and then clicking the link in the email we send you to confirm; entering your email address, or ticking the box on our contact form, does not sign you up on its own. You can withdraw your consent at any time using the unsubscribe link in every issue, or as described in the section headed “Your rights”.
  5. When you register with us and set up an account to receive our services, the legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract. When you ask us to email you the full version of your result from The Finance Check, the legal basis for processing the details you give us is taking steps at your request. When you raise a support ticket, we rely on our legitimate interest in providing the support that your organisation has contracted with us for. When you register for one of our events, we rely on our legitimate interest in running the event you asked to attend and in following up with you about it.
Back to top

Who we share Data with

  1. We may share your Data with the following groups of people for the following reasons:

    1. any of our group companies or affiliates – in the course of delivering our products and services;
    2. our employees, agents and/or professional advisors – in the course of delivering our products and services;
    3. relevant authorities – to the extent required by law;
    4. our service providers, who process Data on our behalf and only on our instructions: Cloudflare, Inc. (website hosting and analytics), HubSpot, Inc. (customer relationship management, where enquiries, including requests for results from The Finance Check, and event registrations, are recorded, and from which The Compass is sent), Teamwork Crew Limited, trading as Teamwork.com (project management, where support tickets you raise are recorded), Microsoft Corporation (Microsoft 365 and Microsoft Teams, through which we send event invitations and hold our online events) and Resend (delivery of enquiry emails to us, of results from The Finance Check that you ask us to email to you, of the email asking you to confirm a subscription to The Compass, and of the email confirming a support ticket you raise);

    in each case, in accordance with this Privacy Policy.

Back to top

Keeping Data secure

  1. We will use technical and organisational measures to safeguard your Data, for example:

    1. access to your account is controlled by a password and a user name that is unique to you.
    2. we store your Data on secure servers.
  2. Technical and organisational measures include measures to deal with any suspected data breach. If you suspect any misuse or loss or unauthorised access to your Data, please let us know immediately at data@northexis.com, or through our contact page.
  3. If you want detailed information from Get Safe Online on how to protect your information and your computers and devices against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.
Back to top

International transfers

  1. Some of our service providers are based outside the UK, including in the United States. Where Data is transferred outside the UK, we rely on UK adequacy regulations or on appropriate safeguards such as the UK International Data Transfer Addendum.
Back to top

Data retention

  1. Unless a longer retention period is required or permitted by law, we will only hold your Data on our systems for the period necessary to fulfil the purposes outlined in this Privacy Policy or until you request that the Data be deleted. The record of visits linked by an analytics identifier is deleted automatically 13 months after your last visit, unless it has been attached to an enquiry, in which case it is kept with that enquiry. Totals that do not identify anyone may be kept indefinitely. Job applications and CVs are kept for 12 months from when we receive them and then deleted, unless you ask us to delete them sooner or you join us, in which case they become part of your employment record. Anonymous copies of answers to The Finance Check, kept for research unless you opt out, do not identify anyone and may be kept indefinitely. Otherwise, your answers to The Finance Check are not kept by us unless you ask us to email you the full version of your result, in which case they are kept with your request. If you sign up to The Compass, the Website holds your email address for up to eight days while it waits for you to confirm, and then deletes it whether or not you did; once you confirm, your subscription, with a record of when and how you gave your consent, is kept until you unsubscribe or ask us to delete it. Support tickets, and any file attached to them, are kept for as long as we provide services to your organisation, and for six years afterwards. A ticket that looks like spam is held by the Website for up to seven days so that we can check it, and then deleted unless we add it to our queue. Event registrations are kept with your record in our customer relationship management system, for as long as we keep that record.
  2. Even if we delete your Data, it may persist on backup or archival media for legal, tax or regulatory purposes.
Back to top

Your rights

  1. You have the following rights in relation to your Data:

    1. Right to access – the right to request (i) copies of the information we hold about you at any time, or (ii) that we modify, update or delete such information. If we provide you with access to the information we hold about you, we will not charge you for this, unless your request is “manifestly unfounded or excessive.” Where we are legally permitted to do so, we may refuse your request. If we refuse your request, we will tell you the reasons why.
    2. Right to correct – the right to have your Data rectified if it is inaccurate or incomplete.
    3. Right to erase – the right to request that we delete or remove your Data from our systems.
    4. Right to restrict our use of your Data – the right to “block” us from using your Data or limit the way in which we can use it.
    5. Right to data portability – the right to request that we move, copy or transfer your Data.
    6. Right to object – the right to object to our use of your Data including where we use it for our legitimate interests.
  2. To make enquiries, exercise any of your rights set out above, or withdraw your consent to the processing of your Data (where consent is our legal basis for processing your Data), please contact us at data@northexis.com, or through our contact page.
  3. If you are not satisfied with the way a complaint you make in relation to your Data is handled by us, you may be able to refer your complaint to the relevant data protection authority. For the UK, this is the Information Commissioner’s Office (ICO). The ICO’s contact details can be found on their website at ico.org.uk.
  4. It is important that the Data we hold about you is accurate and current. Please keep us informed if your Data changes during the period for which we hold it.
Back to top
  1. This Website may, from time to time, provide links to other websites. We have no control over such websites and are not responsible for the content of these websites. This Privacy Policy does not extend to your use of such websites. You are advised to read the Privacy Policy or statement of other websites prior to using them. Some posts on our Insights blog, and our Vena page, include a YouTube video. Nothing is sent to YouTube until you press play. When you do, your browser connects directly to YouTube (part of Google), which receives your IP address and information about your browser and device, and may set cookies as described in our Cookies and storage notice. Google uses that data under its own privacy policy, and may process it in the United States.
Back to top

Changes of business ownership and control

  1. Northexis Limited may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of Northexis Limited. Data provided by Users will, where it is relevant to any part of our business so transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Policy, be permitted to use the Data for the purposes for which it was originally supplied to us.
  2. We may also disclose Data to a prospective purchaser of our business or any part of it.
  3. In the above instances, we will take steps with the aim of ensuring your privacy is protected.
Back to top

Cookies

  1. This Website’s use of Cookies and similar storage is set out in full in our Cookies and storage notice, which records what is stored, why, how long it is kept and how to object. Any Cookies used by this Website are used in accordance with current UK and EU Cookie Law.
Back to top

General

  1. You may not transfer any of your rights under this Privacy Policy to any other person. We may transfer our rights under this Privacy Policy where we reasonably believe your rights will not be affected.
  2. If any court or competent authority finds that any provision of this Privacy Policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this Privacy Policy will not be affected.
  3. Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.
  4. This Agreement will be governed by and interpreted according to the law of England and Wales. All disputes arising under the Agreement will be subject to the exclusive jurisdiction of the English and Welsh courts.
Back to top

Changes to this Privacy Policy

  1. Northexis Limited reserves the right to change this Privacy Policy as we may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the Website and you are deemed to have accepted the terms of the Privacy Policy on your first use of the Website following the alterations. You may contact Northexis Limited at data@northexis.com, or through our contact page.
Back to top

This document was last updated on 4 October 2026.