Privacy notice

What we collect

Your work email address (used only to send you sign-in codes and kept by us in a form that cannot be read back), the documents and details you send us (invoices, credit notes, company and bank details, company documents), and technical records of each submission: time, network address and a fingerprint of your browser.

Why

To receive, check and pay your invoices under our contract with your company, and to meet our legal duties to keep accounting records and to prevent payment fraud.

How long

Sign-in sessions are kept for 30 days and sign-in codes for 24 hours. Files are held on this service only until they are handed over to our accounts system. Invoices and payment records are kept for 10 years from the end of the financial year, as the law requires. Contact details are deleted 2 years after a contact is removed.

Your rights

To ask for a copy of your data, a correction or deletion, contact our accounts payable team through your contact at Portofino. Where the law requires us to keep a record, we will tell you the legal basis.