Legal

Privacy policy

Last updated 5 October 2026

This policy explains what personal data Solden Systems Ltd. collects, why, how long we keep it and the rights you have. It applies to the Solden website and services.

1. Who we are

Solden Systems Ltd. ("Solden", "we", "us") is a company registered in England and Wales under company number 16823002.

Solden is the AI finance department for growing companies: a finance department delivered as a service, working across a customer's existing systems and bringing the customer only the decisions that need their judgement. We are the controller of the personal data we collect through this website and from the people who contact us. When we handle data inside a customer's systems, we act as that customer's processor, under our agreement with them.

2. What we collect

When you request an invite we collect your name, work email, company and the message you send. To protect the form from spam we also record a one-way hash of your IP address and your browser's user agent.

The invite forms use Cloudflare Turnstile to check for automated submissions. Cloudflare processes technical signals from your browser, including your IP address and browser information, for this verification. See the Cloudflare Turnstile Privacy Addendum for details.

We use Umami, a cookieless analytics service, to count page views and button clicks in aggregate. It sets no cookies and does not identify you. We do not use advertising trackers.

When a customer connects Solden to its systems, we process the data needed to perform the work the customer has authorised. That data is handled on the customer's behalf and remains the customer's.

3. How we use it

  • To reply to your invite request, arrange your replay and keep a record of our conversation.
  • To provide, maintain and improve the services.
  • To secure the website and services and prevent abuse.
  • To comply with our legal obligations.

We do not sell personal data and we do not use it for advertising.

4. Our legal bases

We rely on our legitimate interests to reply to the people who contact us, keep a record of those conversations, understand how the website is used and protect it from abuse. When you ask us to scope a replay or an engagement, we process your data to take steps towards a contract with you. Where the law requires us to keep records, we process data to meet that legal obligation.

5. Who we share it with

We use a small number of service providers, who act only on our instructions and under data processing terms: Resend, to deliver the emails the invite form sends; Railway, to host the website and the database that stores invite requests; and Umami, for cookieless analytics stored in the EU. We also share personal data when the law requires it, or with a buyer or successor if Solden is part of a corporate transaction.

6. How long we keep it

We keep invite requests, and the messages that follow them, for 24 months after our last contact with you, then delete them. If you become a customer, the agreement with your company sets how long we keep its data, and how it is exported, deleted, placed on legal hold and removed from backups. Analytics are kept in aggregate only.

7. Security

We use access controls, encryption in transit, audit logging, and review before any action on customer systems. The controls that apply to customer data are set out in the agreement with each customer. See the controls register.

8. Your rights

Under UK data protection law you have the right to access, correct, delete or port your personal data, and to object to or restrict how we process it. To exercise any of these rights, contact us using the details below. We reply within one month.

You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk. We would appreciate the chance to deal with your concern first.

9. International transfers

Some of our service providers process data in the United States. Where they do, we rely on the UK's adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework, or on the International Data Transfer Agreement or Addendum issued by the Information Commissioner.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will take reasonable steps to tell you and will update the date above.

11. Contact

For privacy questions or to exercise your rights, email compliance@soldenai.com.