PRIVACY NOTICE

Last updated: 29 August 2026

1. About this notice

This privacy notice explains how your personal information is collected, used, stored and protected when you:

  • visit this website;

  • contact us;

  • subscribe to a mailing list;

  • enquire about or purchase a service;

  • register for a course, workshop, membership or event; or

  • otherwise interact with TOBASS, Nailing the Finances or TRIFINA.

The service you contact or purchase from determines which company is responsible for your personal information.

2. Who is responsible for your information?

The relevant data controller will be:

TOBASS

TOBASS Ltd
Company number: 12292719
Registered office: Suite 209, Peel House, 30 The Downs, Altrincham, England, WA14 2PX
Email: tanya@tobass.co.uk

TOBASS Ltd is responsible for information relating to TOBASS enquiries, clients and services.

Nailing the Finances

Nailing the Finances Ltd
Company number: 16316219
Registered office: Suite 209, Peel House, 30 The Downs, Altrincham, England, WA14 2PX
Email: hello@nailingthefinances.co.uk

Nailing the Finances Ltd is responsible for information relating to its mailing list, courses, workshops, training, resources, memberships and enquiries.

TRIFINA

TRIFINA is a trading name of Third Sector Finance Ltd.
Company number: 15015032
Registered office: Suite 209, Peel House, 30 The Downs, Altrincham, England, WA14 2PX
Email: hello@trifina.co.uk

Third Sector Finance Ltd is responsible for information relating to TRIFINA enquiries, clients and services.

Where you use the shared contact form, your information will be directed to Nailing the Finances Ltd.

If you select “I’m not sure”, your information will initially be reviewed by Nailing the Finances Ltd and passed only to the company best placed to respond.

In this notice, “we”, “us” and “our” mean the relevant company responsible for your information.

3. Information we collect

Depending on how you interact with us, we may collect:

  • your name;

  • email address;

  • telephone number;

  • business or organisation name;

  • job title or role;

  • the type of organisation you represent;

  • your preferred method of contact;

  • information included in an enquiry or message;

  • course, workshop, event or membership registrations;

  • purchase and transaction details;

  • invoices and payment records;

  • correspondence and records of our communications;

  • mailing-list preferences and consent records;

  • course progress, participation and responses;

  • feedback and testimonials;

  • technical information about your use of the website, including your IP address, device, browser and cookie information; and

  • any other information you choose to provide.

Please do not send confidential financial records, special-category information or other sensitive personal information through the initial contact form or WhatsApp unless we have specifically asked you to do so and have agreed a secure way to receive it.

4. How we collect your information

We may collect information:

  • directly from you through forms, email, telephone, WhatsApp or in-person communication;

  • when you register for or purchase a service, course, workshop or membership;

  • when you subscribe to a mailing list;

  • through your participation in training, events or services;

  • automatically through website cookies and similar technology;

  • from a business or organisation you represent;

  • through referrals or professional contacts; or

  • from publicly available sources, where appropriate.

If someone else gives us your information, we will provide you with appropriate privacy information where required.

5. Why we use your information

We may use your information to:

  • respond to enquiries;

  • determine which service is most appropriate;

  • provide quotations or proposals;

  • enter into and manage client contracts;

  • deliver consultancy, training, courses, workshops, resources or memberships;

  • administer accounts, payments and invoices;

  • manage course or membership access;

  • communicate about a service you have requested;

  • send newsletters and marketing where you have consented;

  • improve our website, services and learning materials;

  • maintain the security and operation of the website;

  • keep appropriate business and financial records;

  • establish, exercise or defend legal claims; and

  • comply with legal, regulatory and professional obligations.

We will not use your information for a materially different purpose without first providing appropriate information and, where required, obtaining your consent.

6. Our lawful bases

UK data-protection law requires us to have a lawful basis for using personal information.

We may rely on:

Contract

We use information where it is necessary to take steps at your request before entering into a contract or to fulfil a contract with you.

This includes responding to service enquiries, processing registrations, delivering purchased services and managing payments.

Legal obligation

We use information where necessary to meet legal, tax, accounting, regulatory or professional obligations.

Legitimate interests

We may use information where it is necessary for our legitimate business interests and your interests and rights do not override them.

These interests may include:

  • responding to business enquiries;

  • administering and improving our services;

  • maintaining appropriate business records;

  • protecting our systems and website;

  • preventing misuse or fraud; and

  • establishing or defending legal claims.

Consent

We rely on consent for activities including:

  • sending marketing emails where consent is required;

  • publishing an identifiable testimonial, photograph or case study where consent is appropriate; and

  • using non-essential cookies.

You can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

7. Marketing communications

Nailing the Finances Ltd will send newsletters, resources, course information and other marketing emails only where it has an appropriate lawful basis.

Where we rely on consent:

  • you must actively choose to subscribe;

  • the consent will identify Nailing the Finances Ltd;

  • you can unsubscribe at any time; and

  • every marketing email will include an unsubscribe facility.

Subscribing to Nailing the Finances does not automatically subscribe you to marketing from TOBASS or TRIFINA.

We may retain limited information about an unsubscribe request to ensure we respect your preference.

8. Cookies and website information

This website uses cookies and similar technology.

Strictly necessary cookies help the website function. Other cookies, including analytics or marketing cookies, will be used only where the required permission has been obtained.

Further information is available in our Cookie Policy. You can also use the website’s cookie controls to change your preferences.

9. Who we share information with

Where necessary, we may share information with:

  • Kajabi, which provides website, form, contact-management, course and email services;

  • payment processors, where you make a purchase;

  • email and communication providers;

  • secure cloud-storage and IT providers;

  • accountants, auditors, insurers, solicitors and other professional advisers;

  • contractors supporting the delivery or administration of services;

  • government departments, regulators, courts or law-enforcement bodies where required; and

  • another company named in this notice where you ask to be referred or your enquiry clearly relates to its services.

We require service providers processing information on our behalf to handle it securely and only for the agreed purposes.

We do not sell personal information.

10. International transfers

Some technology providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we take steps to ensure that an appropriate legal safeguard is in place. This may include:

  • transfer to a country covered by UK adequacy regulations;

  • use of an approved UK international data-transfer agreement or addendum; or

  • another safeguard permitted under UK data-protection law.

You may contact the relevant company for further information about the safeguards used.

11. How long we retain information

We retain personal information only for as long as reasonably necessary.

Typical retention periods are:

  • unsuccessful or general enquiries: up to two years after the last meaningful contact;

  • client and contractual records: normally six years after the end of the relationship;

  • invoices, transaction and tax records: normally six years, or longer where legally required;

  • mailing-list information: until you unsubscribe or the list is no longer used, with limited suppression information retained to respect your preference;

  • course and membership records: for the duration of your participation and for an appropriate period afterwards;

  • consent records: for as long as necessary to demonstrate how and when consent was obtained;

  • website and security records: for a period appropriate to security and operational requirements; and

  • legal claims or disputes: until the matter and any relevant limitation period have ended.

We may retain information for longer where required by law, regulation, professional obligations, insurance requirements or a legal dispute.

12. How we protect your information

We use appropriate organisational and technical measures designed to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.

These measures may include access controls, passwords, secure systems, appropriate contracts with service providers and procedures for responding to data incidents.

No internet-based service can be guaranteed to be completely secure. Please use an agreed secure method when sending confidential or sensitive documents.

13. Your rights

Depending on the circumstances, you may have the right to:

  • request access to your personal information;

  • ask for inaccurate information to be corrected;

  • ask for information to be deleted;

  • ask us to restrict how information is used;

  • object to certain uses of your information;

  • receive certain information in a portable format;

  • withdraw consent; and

  • object to direct marketing at any time.

These rights are not absolute and may be subject to legal exceptions.

To exercise a right, contact the company responsible for your information using the relevant email address in section 2.

We may need to confirm your identity before responding. We normally respond within one month.

14. Automated decision-making

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects.

15. Children

Our website and services are not directed at children, and we do not knowingly collect children’s personal information through this website.

Where we work with schools, young people or education programmes, any personal information will be handled under appropriate arrangements specific to that activity.

16. Complaints

Please contact the relevant company first if you have a concern about how your information has been handled.

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/

17. Changes to this notice

We may update this privacy notice when our services, legal obligations or use of personal information change.

The latest version will be published on this website with the date it was updated.