Benford Technologies Limited (company no. 17325156), 5 Southampton Place, London WC1A 2DA. Effective 21 September 2026. Covers benford.tech, including benford.tech/no and benford.tech/uk, and their sub-pages.
Benford Technologies Limited ("we") is the data controller for the websites. The audit services described on them are provided by the Benford audit firms, each under its own privacy notice. As a UK company serving people in the EEA, we have appointed Benford Teknologi AS (org. no. 937 951 612, Oslo) as our EEA representative under Article 27 GDPR; you or your supervisory authority may contact it on anything in this notice.
| When | Data | Basis |
|---|---|---|
| You visit | Device and browser data, pages viewed, approximate location, referring page | Running and securing the sites: legitimate interests, Article 6(1)(f). Statistics: your consent through the cookie banner, Article 6(1)(a) |
| You contact us or apply for a job | Name, e-mail, organisation, your message or application | Answering you or recruiting: Article 6(1)(b) and (f). For a job application the controller is the Benford company named as employer in the advert |
| You press "Start your audit" on the Norwegian site | Everything you enter on the onboarding form | From that moment Benford Revisjon AS, named on the form, is the controller and its privacy notice applies. We operate the platform and the enquiry records for it as its processor, and remain controller only of your platform account (login, settings, usage statistics), as set out in section 4 |
| You register interest for the UK, through the form at portal.benford.co.uk | Name, company, e-mail | We keep a waiting list: legitimate interests, Article 6(1)(f). Benford Audit Ltd is preparing its application to ICAEW for audit registration and will begin UK audit work once registered; until then nothing further is collected and no engagement is started. On registration we pass the list to Benford Audit Ltd, which then becomes controller under its own privacy notice |
No automated decisions with legal or similarly significant effects are made.
Necessary cookies are set without consent. Statistics cookies are set only if you accept them in the banner; change your choice any time through the "Cookies" link in the footer. We record your choice and its time.
| Name | Set by | Where | Purpose | Type | Lifetime |
|---|---|---|---|---|---|
| session | Benford | Platform | Keeps you logged in | Necessary | 90 days, or 30 days idle |
| Theme, language, last opened audit (local storage) | Benford | Platform | Your settings | Necessary | Until cleared |
| bf_consent | Benford | Sites and platform | Your cookie choice | Necessary | 1 year |
| ph_ prefix (cookie, local and session storage) | PostHog, EU cloud | Sites and platform | Usage statistics, error tracking, session replay with all text and inputs masked | Statistics, consent | 1 year |
_ga and _ga_ prefix |
Google Ireland Ltd | Sites | Aggregate visitor statistics | Statistics, consent | Up to 2 years |
We run no advertising cookies or pixels. If that changes we will update this table and ask for consent first.
Our processors are Framer (hosting, Netherlands), PostHog (EU cloud), Google Ireland Ltd (Google Analytics; may transfer to Google LLC in the United States under the EU-US Data Privacy Framework and its UK extension), Attio (enquiry records, Google Cloud, Dublin) and Amazon Web Services (platform hosting, Stockholm), as listed in our Sub-Processors notice; all are bound by data processing agreements. Visitor data is processed in the EEA and may be accessed from the United Kingdom under the EU adequacy decision for the UK. We disclose to authorities only where legally required and never sell personal data. Analytics data is kept fourteen months; messages and job applications twelve months after last contact; platform account data for the life of the account plus ninety days, and platform logs twelve months; your cookie choice one year.
You may ask for access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent at any time. Write to [email protected]; we answer within one month. You may complain to the Information Commissioner's Office (www.ico.org.uk) or, in the EEA, to your local authority such as Datatilsynet (www.datatilsynet.no). We update this notice when the sites, our providers or the law change; the current version is always on the sites.