Privacy

Privacy Notice

This notice explains what personal data The Treasury Research Company collects, why we use it, how long we keep it and the choices available to you.

Last updated 23 August 2026

In simple terms. We collect only the information needed to run the TRC service, support client projects and provide research you have asked to receive. We do not sell personal data.

Who we are

The Treasury Research Company (TRC) provides independent treasury technology research, assessment and project tools. For questions about privacy or the use of your personal data, contact research@thetreasuryresearchcompany.com.

When TRC is the controller

TRC is the controller for personal data we use for our own business purposes. This includes account administration, client contacts, enquiries, research subscriptions, security records, service administration and billing or contractual records where applicable.

When TRC is the processor

Where a client uses TRC to store or work with information for its own treasury project, the client will normally decide why that information is being used. In that situation, the client is normally the controller and TRC acts as its processor, following the client's documented instructions and the terms agreed with that client.

What personal data we may collect

Name, job title, employer and business contact details.
TRC account and access information.
Project information supplied through the TRC client workspace, where it contains personal data.
Research mailing-list preferences and unsubscribe records.
Security, access and audit information generated when the service is used.
Correspondence and support requests.

TRC is designed for business and treasury project information. Please do not provide special category personal data, criminal-offence data or unnecessary personal information unless this has been expressly agreed with TRC for a legitimate project need.

Why we use personal data

Provide the TRC service

To create and administer client workspaces, projects, product access and controlled documents.

Client and contract administration

To manage enquiries, client relationships, service delivery and records connected with our agreement.

Security and resilience

To authenticate users, maintain audit records, investigate incidents and protect the service and client information.

Research communications

To send TRC research where you have subscribed or otherwise asked us to contact you. You can unsubscribe at any time.

Legal and regulatory obligations

To keep records or disclose information where the law requires us to do so.

Our lawful bases

Depending on the activity, TRC relies on one or more of the following lawful bases under UK data protection law:

Contract where processing is necessary to provide a service or take steps requested before entering into a contract.
Legitimate interests for proportionate business administration, service security, improvement and relevant business-to-business communication where those interests are not overridden by your rights.
Consent where we ask you to opt in, for example to a research mailing list where consent is used. You can withdraw consent at any time.
Legal obligation where we must process or retain information to comply with law.

Who we share data with

We use a small number of service providers to operate TRC. They may process personal data only to provide the relevant service and subject to appropriate contractual safeguards.

Vercel — application hosting, delivery and related infrastructure.
Neon — managed PostgreSQL database infrastructure used for persistent client and project data.
Professional advisers or authorities where disclosure is reasonably necessary or legally required.

More information is set out on our Data protection & security page.

International transfers

Some of our service providers may process information outside the United Kingdom. Where UK personal data is transferred internationally, we use an appropriate legal mechanism, such as an adequacy regulation or approved contractual safeguards, and take account of the protections offered by the relevant provider.

How long we keep information

We keep personal data only for as long as it is reasonably needed for the purpose for which it was collected, to provide the service, to meet contractual or legal obligations, or to establish, exercise or defend legal claims.

Client project information is retained in line with the client agreement and project needs, then returned or deleted as agreed, subject to lawful backup and record-retention requirements.
Account and security records are retained for the period needed to administer and protect the service and maintain an appropriate audit trail.
Research subscription details are retained until you unsubscribe or the purpose ends. We may keep a minimal suppression record so we do not contact you again after an unsubscribe request.

Cookies and local storage

TRC uses cookies or browser storage where they are necessary for sign-in, security and service operation. We do not currently use advertising cookies. If we introduce non-essential analytics or marketing cookies that require consent, we will update our controls and this notice before using them.

Automated decision-making

TRC technology may help assess treasury technology options, but we do not use personal data to make solely automated decisions about individuals that produce legal or similarly significant effects.

Your rights

Depending on the circumstances, you may have rights to ask for access to your personal data, correction, deletion, restriction, portability, or to object to certain processing. Where processing is based on consent, you can withdraw that consent.

If TRC is processing personal data only on behalf of a client, we may need to pass your request to that client because it is the controller responsible for deciding how the request should be handled.

Questions or complaints

Contact us first at research@thetreasuryresearchcompany.com and we will try to resolve the issue. You also have the right to complain to the UK Information Commissioner's Office.

Changes to this notice

We review this notice as the TRC service develops. If we make a material change to how we use personal data, we will update this page and, where appropriate, bring the change to the attention of affected users.