Legal

Privacy Policy

Last updated: April 2026

Financial Transformation Hub ("FTH", "we", "us", or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you visit our website or use our services.

FTH is based in Kyiv, Ukraine, and provides financial reporting transformation and IFRS advisory services. We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Ukrainian data protection legislation.

1. Information We Collect

We collect personal data only when you voluntarily provide it to us through our contact form or direct communication. The data we may collect includes:

  • Name - to identify you and address you properly
  • Company name - to understand your business context
  • Email address - to respond to your inquiry
  • Phone number - to contact you if you provide it
  • Message content - the details of your inquiry or request

We do not collect data automatically through tracking technologies, analytics tools, or advertising networks.

2. How We Use Your Data

We use the personal data you provide exclusively for the following purposes:

  • Responding to your inquiries and requests
  • Providing financial advisory, IFRS transformation, and related services
  • Communicating with you about our services and engagements
  • Fulfilling legal and regulatory obligations

We do not use your data for marketing purposes, automated profiling, or decision-making without your explicit consent.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

  • Consent - when you submit our contact form, you consent to the processing of your data for the purpose of responding to your inquiry
  • Legitimate interest - to provide and improve our professional services
  • Legal obligation - when required by applicable law or regulation
  • Contractual necessity - when processing is required to fulfill a service agreement

4. Data Storage and Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include:

  • Encrypted transmission of data (SSL/TLS)
  • Restricted access to personal data on a need-to-know basis
  • Secure storage of electronic records
  • Regular review of our data protection practices

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Contact form submissions are retained for up to 24 months unless a longer retention period is required for an ongoing engagement.

5. Third-Party Sharing

We do not sell, rent, or trade your personal data to third parties. We may share your data only in the following circumstances:

  • When required by law, court order, or governmental authority
  • With professional service providers who assist in our operations, subject to strict confidentiality agreements
  • With your explicit consent

We do not transfer personal data to countries outside the European Economic Area (EEA) or Ukraine without ensuring adequate data protection safeguards.

6. Cookies

Our website uses only essential cookies that are strictly necessary for the website to function correctly. We do not use:

  • Tracking cookies
  • Advertising cookies
  • Third-party analytics cookies
  • Social media tracking pixels

Essential cookies do not collect personal data and cannot be used to identify you.

7. Your Rights

Under the GDPR and applicable data protection laws, you have the following rights regarding your personal data:

  • Right of access - you may request a copy of the personal data we hold about you
  • Right to rectification - you may request correction of inaccurate or incomplete data
  • Right to erasure - you may request deletion of your personal data, subject to legal retention requirements
  • Right to restrict processing - you may request that we limit how we use your data
  • Right to data portability - you may request your data in a structured, machine-readable format
  • Right to object - you may object to the processing of your data based on legitimate interest
  • Right to withdraw consent - you may withdraw your consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us using the details provided below.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

9. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:

We will respond to your request within 30 days of receipt.