Privacy Policy

About This Privacy Policy

This Privacy Policy explains how RizFin collects, uses, stores and shares personal data when you visit our website, make an enquiry or engage our services. It also explains your rights under applicable data protection law, including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

This policy applies to clients, prospective clients, and visitors to our website.

Who We Are

RizFin (trading name of Riz Financial Services) is the data controller for personal data processed for the purposes described in this Privacy Policy.

Our contact details are:

Email: info@rizfin.ie
Address: Woodward Square, Glencairn, Murphystown Way, Dublin 18, Ireland

If you have any questions about this Privacy Policy or how we handle personal data, see Contact and Complaints below.

Personal Data We Collect

Depending on your relationship with us, we may collect:

Your name, job title and contact details, including email address, phone number and business address
Information about the business or entity you represent, including its structure, ownership and control, activities and the services being considered
Financial details relating to your engagement with our services
Identity verification and due diligence information (see AML and Customer Due Diligence below)
Information you provide through our website’s contact and intake forms, by email, phone or in meetings
Technical information collected through our website (see Cookies and Website Data below)

How We Collect Personal Data

We collect personal data:

directly from you, through our website’s contact and intake forms, correspondence, calls and meetings
from publicly available sources, such as the Companies Registration Office, where relevant to verifying company or officer information
from third parties you authorise to share information with us, such as a previous accountant or adviser, where applicable

How and Why We Use Personal Data

We may process personal data to:

assess enquiries and prospective engagements
carry out client onboarding, identity verification and customer due diligence
provide corporate, accounting and tax services
make filings and communicate with Revenue, the Companies Registration Office and other relevant authorities where authorised or required
administer client engagements, billing and communications
meet legal, regulatory and professional obligations
maintain the security and operation of our systems and website

Lawful Bases for Processing

Depending on the processing activity, we rely on the following lawful bases under the GDPR:

Contract: to provide services, or to take steps at your request before entering into an engagement
Legal obligation: to comply with anti-money laundering, tax and other statutory or regulatory requirements
Legitimate interests: for certain business administration, security and service-management activities, where our interests are not overridden by your rights and interests
Consent: where we rely on your consent for a specific processing activity, such as certain cookies (see Cookies and Website Data below)

Where we rely on legitimate interests, you can request further information about the relevant assessment by contacting us.

AML and Customer Due Diligence

As part of our obligations under Irish anti-money laundering law, we carry out Customer Due Diligence (CDD) checks before and during every client engagement. Depending on the engagement, this may involve collecting and verifying:

proof of identity (e.g. passport, driving licence)
proof of address
information concerning ownership, control, beneficial ownership and relevant officers or other connected persons, where required

This verification is carried out in accordance with the Criminal Justice (Money Laundering and Terrorist Financing) Act 2010 (as amended), and our compliance is supervised by the Department of Justice’s Anti-Money Laundering Compliance Unit (AMLCU). See Data Retention below for how long these records are kept.

We may share personal data, where relevant to your engagement or where we are required to do so, with:

Revenue and the Companies Registration Office (CRO)
regulatory and competent authorities, including the Department of Justice’s AML Compliance Unit
professional advisers engaged to support service delivery, where necessary
IT, hosting, communications and other service providers who support our operations
contractors or service providers supporting a specific engagement, where applicable and subject to appropriate confidentiality and data protection arrangements

We do not sell personal data, and we only share it where necessary for the purposes described in this policy.

International Transfers

Personal data is primarily processed within Ireland and the European Economic Area (EEA). Where a service provider or contractor is located outside the EEA, we take appropriate steps to ensure your data is protected in accordance with applicable data protection law, such as relying on the European Commission’s adequacy decisions or standard contractual clauses. If you would like more information about any such transfer and the safeguards in place, please contact us.

Data Security

We apply appropriate technical and organisational measures to protect personal data, including:

secure, encrypted systems for document storage and communication
access controls within our organisation on a need-to-know basis
regular review of our processes and systems

No method of transmission or storage is completely secure, but we take reasonable steps appropriate to the nature of the data we hold to protect it against unauthorised access, loss or misuse.

Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or to meet our legal, tax and regulatory obligations. Retention periods vary depending on the type of data and the nature of our relationship with you:

Prospective client / enquiry information: retained for as long as reasonably necessary to respond to your enquiry and consider a possible engagement, after which it is deleted or anonymised if no engagement proceeds
Client engagement records: retained for the duration of the engagement and for a period afterwards to meet our professional, contractual and legal obligations
AML/CDD records: retained for a minimum of 5 years from the end of the business relationship, in accordance with the Criminal Justice (Money Laundering and Terrorist Financing) Act 2010 (as amended)
Accounting and tax records: retained in line with the record-keeping periods required by Revenue and other applicable authorities
Website and contact data: retained for as long as necessary for the purpose it was collected, or as set out in our Cookie Policy

Once personal data is no longer required, it is securely deleted or anonymised.

Your Data Protection Rights

Under data protection law, you have the following rights in relation to your personal data:

Access: to request a copy of the personal data we hold about you
Correction (rectification): to have inaccurate or incomplete data corrected
Deletion (erasure): to request deletion of your data, where applicable
Restriction: to request that we restrict how we process your data in certain circumstances
Objection: to object to certain processing, including processing based on legitimate interests
Portability: to receive certain data in a structured, commonly used format, or have it transferred to another controller, where technically feasible
Withdrawal of consent: to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, please contact us. You also have the right to lodge a complaint with the Data Protection Commission, Ireland’s supervisory authority for data protection.

Cookies and Website Data

Our website uses a single, strictly necessary cookie to remember your cookie consent preference. We do not currently use analytics, tracking or third-party advertising cookies. If this changes in future, this policy and our Cookie Policy will be updated in advance. See our Cookie Policy for full details.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our practices or the services we provide. The most current version will always be available on this page.

Contact and Complaints

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us.

If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Commission, Ireland’s supervisory authority for data protection.

Last updated: September 2026