Data Protection & Privacy
Data protection, privacy, and regulatory compliance at FMIS
Data protection, privacy, and regulatory compliance at FMIS

FMIS provides systems used to manage financial and operational data. Data protection is therefore a core part of how our solutions are delivered and supported.
This page explains how FMIS handles data in practice, including roles, responsibilities, and the controls applied to protect client information.

If you have questions about security, data protection, or require documentation for a review, get in touch with our team.
Email our team Privacy policy Cookie policy
FMIS aligns its data protection practices with recognised regulatory frameworks and maintains registration with the UK Information Commissioner’s Office (ICO).
Our approach is designed to support organisations operating across multiple regions, with consistent data handling and security controls regardless of location.

Data is managed within a controlled environment, with consistent standards applied across all systems.
These controls are applied as part of day-to-day system operation, not as separate or optional measures.

FMIS acts as a data processor, with clients retaining responsibility as the data controller.
In practice, this means:
This separation ensures that control remains with the organisation that owns the data.

FMIS cloud solutions are hosted in the UK unless otherwise specified, with data stored and managed within this environment. Systems are accessed by organisations internationally, but the same controls and standards are applied across all deployments.
Where third-party services are required, they are selected and managed in line with our information security and data protection policies. This includes appropriate due diligence and ongoing review.

FMIS supports clients in meeting their own data protection obligations.
This includes:
Formal policies and additional detail can be found here:
If you have specific questions relating to data protection or require additional documentation, please contact:



https://www.fmis.co.uk/wp-content/uploads/2026/02/SORP-Lease-Accounting-Changes-2026.webp
1024
1024
John de Robeck
https://www.fmis.co.uk/wp-content/uploads/2026/04/FMISNavyTeal-1-150x80-1.webp
John de Robeck2026-02-23 11:00:512026-03-18 08:50:32Preparing for Charities SORP Lease Accounting Changes 2026FMIS Ltd
167b John Wilson Business Park
Whitstable
Kent
CT5 3RA
United Kingdom
Phone:+44 (0) 1227 773003
Fax:+44 (0) 1227 773005
Sales:sales@fmis.co.uk
Support:support@fmis.co.uk
| Cookie | Duration | Description |
|---|---|---|
| cookielawinfo-checkbox-advertisement | 1 year | Set by the GDPR Cookie Consent plugin, this cookie is used to record the user consent for the cookies in the "Advertisement" category . |
| cookielawinfo-checkbox-analytics | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics". |
| cookielawinfo-checkbox-functional | 11 months | The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional". |
| cookielawinfo-checkbox-necessary | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary". |
| cookielawinfo-checkbox-others | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other. |
| cookielawinfo-checkbox-performance | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance". |
| CookieLawInfoConsent | 1 year | Records the default button state of the corresponding category & the status of CCPA. It works only in coordination with the primary cookie. |
| PHPSESSID | session | This cookie is native to PHP applications. The cookie is used to store and identify a users' unique session ID for the purpose of managing user session on the website. The cookie is a session cookies and is deleted when all the browser windows are closed. |
| viewed_cookie_policy | 11 months | The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data. |
| Cookie | Duration | Description |
|---|---|---|
| CONSENT | 2 years | YouTube sets this cookie via embedded youtube-videos and registers anonymous statistical data. |
| _ga | 2 years | The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors. |
| _gat_UA-48954022-1 | 1 minute | A variation of the _gat cookie set by Google Analytics and Google Tag Manager to allow website owners to track visitor behaviour and measure site performance. The pattern element in the name contains the unique identity number of the account or website it relates to. |
| _gid | 1 day | Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously. |
| Cookie | Duration | Description |
|---|---|---|
| VISITOR_INFO1_LIVE | 5 months 27 days | A cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface. |
| YSC | session | YSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages. |
| yt-remote-connected-devices | never | YouTube sets this cookie to store the video preferences of the user using embedded YouTube video. |
| yt-remote-device-id | never | YouTube sets this cookie to store the video preferences of the user using embedded YouTube video. |
