Privacy

What we do with
what you tell us

Stated plainly: what we collect, why we hold it, and what we will never do with it.

Last updated 25 July 2026

What we collect

2 kinds of information, and nothing else

We collect what we need to answer you and do the work. No profiles, and we do not buy or enrich data about you.

Information you give us
Contact detailsYour name, email, company and anything you type into the consultation form or send us by email.
Engagement informationThe financial records, models and documents you share so we can quote or carry out the work.
Accounting accessWhere you grant it, read or write access to your accounting software, used only for the agreed scope.
Information collected automatically
Basic site analyticsPages viewed and approximate location, aggregated, so we know which pages are useful.
No advertising trackersWe do not run advertising pixels or sell audience data to ad platforms.
No hidden collectionWe do not record your screen, keystrokes or session replays.
How we use it

To reply, to quote, and to do the work

Every use below is one you would expect from a firm you have asked to look at your numbers.

To send what you asked for

  • Send the template you requested
  • Add you to the monthly newsletter, if you left the box ticked
  • Remove you from it the moment you ask, from any issue

To answer you

  • Reply to your enquiry
  • Prepare a scope and a fixed fee
  • Arrange the consultation call

To deliver the work

  • Build models, reports and materials
  • Keep books and issue statements
  • Retain workpapers that support a figure

To meet obligations

  • Invoicing and our own accounting records
  • Anti-fraud and identity checks where required
  • Responding to a lawful request
Position

What we will never do, and what you can ask for

The commitments on the left are absolute. The rights on the right are yours on request, in writing, answered within 30 days.

We will never
Sell or rent your dataNot to data brokers, not to advertisers, not to anyone.
Share your financials without instructionYour figures go to nobody outside the engagement team unless you tell us to send them.
Name you as a client without consentNo logo on the site, no case study, no reference call unless you have agreed to it.
Add you to a list because you enquiredAsking us a question is not consent to be marketed to.
You can ask us to
Show you what we holdA copy of your personal data and where it came from.
Correct itAnything inaccurate or out of date.
Delete itSubject to records we are legally required to keep, such as invoices.
Sign a mutual NDABefore you send anything, if you would rather have it in writing first.
Holding and sharing

Where it sits, who can see it, and for how long

A short, honest answer rather than a page of hedging.

Access

The engagement team only

Your files are visible to the people working on your engagement and the partner reviewing it. Not the whole firm.

Need to know, not nice to know
Processors

A short list of tools

Email, cloud storage, accounting software and a payments provider. Each is contracted, and none is given data for its own purposes.

Named on request
Location

Across borders, under contract

We work with clients and colleagues in the US, GCC, Europe and Pakistan, so data may be handled in those places under written terms.

Same standard everywhere
Retention

As long as it is useful, then gone

Engagement files are kept while we act for you and 7 years after. Enquiries that do not become engagements are cleared within 12 months.

Deleted on request where we can

If a security incident affected your data, we would tell you what happened and what we were doing about it. To exercise any right above, email info@numberninjas.io.

Questions

Ask us anything
about your data

If something here is unclear, or you want a mutual NDA before you send a single number, say so and we will sort it first.

Book a consultation
If you ask us to act
  • 1

    Email the request

    Tell us what you want to see, correct or delete. No form to fill in.

  • 2

    We confirm receipt

    Within one business day, with anything we need to verify it is really you.

  • 3

    We act within 30 days

    Usually far sooner. If we cannot delete something, we say which record and why.

  • 4

    Written confirmation

    What we did, so you have a record of it as well as our word.