Compliance and data protection

Last updated: 5 July 2026

1. Who we are

Avagance Limited is the data controller for the personal data we handle. We are registered in England and Wales under company number 15991387, registered office 128 City Road, London, EC1V 2NX. We are a software provider for UK financial advice firms and are not FCA-authorised; we do not provide financial advice.

This page summarises how we meet our obligations under the UK GDPR and the Data Protection Act 2018, our ICO registration, and how customer data is protected, retained and recovered. It sits alongside our Website Privacy Notice and Cookie Notice.

2. ICO registration

We are registered with the Information Commissioner's Office (ICO), the UK's data-protection regulator, as a data controller who pays the annual data-protection fee.

You can verify our entry on the ICO's public register at ico.org.uk.

3. Our GDPR commitments

We handle personal data in line with the UK GDPR principles: we process it lawfully, fairly and transparently; only for specified, explicit purposes; we collect the minimum we need; we keep it accurate and up to date; we keep it only as long as necessary; and we keep it secure. We do not sell personal data. Where we rely on other providers to run the service, they act under contract and only on our instructions.

4. Your rights

Subject to the conditions in UK data-protection law, you have the right to:

• Be informed about how your data is used (this page and our Privacy Notice).
• Access the personal data we hold about you.
• Rectify data that is inaccurate or incomplete.
• Erase your data (the "right to be forgotten"), where the conditions are met.
• Restrict or object to our processing.
• Data portability, to receive your data in a commonly used, machine-readable format.
• Withdraw consent at any time, including opting out of marketing.

To exercise any right, email lithika@avagance.com. We may need to verify your identity, and we will respond within the legal timeframe, usually one month.

5. How we protect data

We use appropriate technical and organisational measures to keep personal data secure, including encryption in transit and at rest, role-based access controls on a least-privilege basis, and monitoring and logging. Access to customer data is limited to people who need it for their role. Human sign-off is built into how the platform is used, so nothing sensitive leaves a firm without a person approving it.

6. Data retention, backup and recovery

Retention. We keep personal data only as long as necessary for the purposes it was collected for, then securely delete or anonymise it. Payment and tax records are generally kept for at least 6 years to meet legal requirements.

Backup and recovery. Customer data is backed up regularly to protect against loss or corruption. Backups are encrypted and stored so that data can be restored if a system fails. We test our ability to recover data as part of our business-continuity planning, so that after an incident, service and data can be brought back with minimal disruption.

Deletion and return. On request, or when our relationship ends, we return or securely delete personal data in line with our retention rules and any contract in place, unless we are required by law to keep it.

7. Personal data breaches

We have procedures to detect, investigate and respond to personal-data breaches. Where a breach is likely to result in a risk to people's rights and freedoms, we will report it to the ICO within 72 hours of becoming aware of it, and we will tell affected individuals without undue delay where the law requires.

8. Contact and complaints

Avagance Limited · Company number 15991387 (England and Wales)
Registered office: 128 City Road, London, EC1V 2NX
Person responsible for data protection: Mr Ranepura Ranepura · lithika@avagance.com

If you have a concern about how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, helpline 0303 123 1113.