The Financial Adviser Firm referred to in the Contact section of this Website understands it’s obligations in regards to your fundamental right to a private life and has implemented systems and controls to ensure your rights and freedoms are protected.
The Financial Adviser Firm undertakes to meet its obligations under the Data Protection Act (registered with the Information Commissioners Office – Registration Number Z3018070), the Privacy and Electronic Communications Regulations and the EU General Data Protection Regulation (GDPR).
WHO WILL PROCESS YOUR PERSONAL INFORMATION?
Your personal information will be initially processed by The Financial Adviser Firm. Where applicable, your personal data will be further processed by staff members of The Financial Adviser and its Principle Firm who acts on our behalf for regulatory purposes. All parties will process your personal data in accordance with this privacy notice.
WHY IS YOUR PERSONAL INFORMATION REQUIRED?
Your personal information is required to enable us to take necessary steps at your request prior to entering into a contract and to perform such a contract. This may include reviewing assets and liabilities, bank account validation, identity and age verification checks, credit checks, preventing and detecting fraud, money laundering or other crimes and any other requirements in accordance with rules set by the Financial Conduct Authority (FCA) or other applicable legislation.
WHAT HAPPENS IF WE WANT TO PROCESS YOUR INFORMATION FOR OTHER REASONS?
Though there are some legal exceptions, if we wish to process your personal data for any other unrelated purpose than those we have informed you about we will notify you.
WHAT ARE THE CONSEQUENCES IF YOU DO NOT PROVIDE YOUR PERSONAL INFORMATION?
Your personal data is essential to enable us to take steps at your request prior to entering into a contract or to perform a contract to which you are a party. Without this information we will not be able to proceed to provide any financial service.
WHAT MAKES THE PROCESSING LAWFUL?
Because the processing is necessary:
- For the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract;
- for compliance with a legal obligation to which we are subject;
- for the performance of a task carried out in the public interest;
- for the purposes of the legitimate interests pursued by us.
KEEPING YOUR INFORMATION UP TO DATE
We will record your information exactly as you provide it. You may ask us to update it at any time and we will action your request promptly and where possible notify relevant third parties of any changes.
HOW WILL WE FURTHER USE YOUR PERSONAL INFORMATION (OUR LEGITIMATE INTERESTS)?
- To contact you to ensure that our records of your personal information are correct;
- To respond to questions or complaints you have about our services;
- To update you with changes in our terms;
- To pursue debts or unpaid fees;
- To evidence company practices;
- To evidence the standards and processes carried out conform to the company’s ethical standards and expectations;
- To protect the business from risks which might be introduced by an individual.
HOW SECURE WILL YOUR DATA BE?
We will ensure that your data is only accessible to authorised people in our firm and will remain confidential at all times.
Appropriate security measures will be in place to prevent unauthorised access, alteration, disclosure, loss, damage or destruction of your information.
If we have a contract with another organisation to provide us with services or a service on our behalf to process your personal information, we will make sure they give reassurances regarding appropriate security measures in place and only process your information in the way we have authorised them to.
These organisations won’t be entitled to use your personal information for their own purposes. If necessary, our security teams will check them to make sure they meet the security requirements we’ve set.
WILL WE SHARE YOUR INFORMATION WITH ANYONE ELSE?
We may share your information with:
- Appropriate staff such as those who carry out financial or compliance functions.
- Organisations that need your information because we are required to provide it by law (e.g. The FCA, ombudsman services, HMRC etc).
- Organisations that carry out credit references or identity checks. These organisations may keep a record of the information and may disclose the fact that a search of its records was made to its other customers for the purposes of assessing the risk of giving credit, to prevent fraud and to trace debtors.
- Sometimes other authorised firms with specialist advisers, such as pension specialists, who assist us in providing suitable financial advice and services. You will be provided with their details if this applies.
- Law enforcement agencies, courts or other public authorities if we have to, or are authorised to by law.
- Product providers we use to provide financial services (see below).
TRANSFERRING DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)
We do not usually transfer any of your personal data outside of the EEA, except when we need to perform pre-contractual measures (credit and identity checks) OR because the checks we request are necessary for important reasons of public interest OR unless you are applying for a mortgage secured against a property situated outside of the EEA OR the appropriate lender that can assist with the eventual borrowing is based outside of the EEA. Some third-party companies may transfer data outside of the EEA to countries which do not, in the view of the EU Commission, offer an adequate level of protection. In such cases, it is their responsibility to encrypt any data it sends to other agencies and only transfer information necessary to carry out checks.
(A list of countries used to perform checks include Germany, Netherland, Belgium, France, Sweden, Norway, Finland, Luxembourg, Switzerland, Liechtenstein, Spain, USA, Estonia, Latvia, Lithuania, Poland, Slovakia, Czech Republic, Hungary, Slovenia, Bosnia, Serbia, Montenegro, Croatia, Macedonia, Kosovo, Albania, Bulgaria, Romania, Ukraine, Austria, Denmark, Moldova, Portugal, Italy, Canada, Brazil, Greenland, China, India, Australia, Russia, South Korea, Taiwan, Mexico, South Africa, New Zealand, Hong Kong, UK.)
HOW LONG WILL WE KEEP YOUR INFORMATION FOR?
The Financial Conduct Authority lays down rules relating to how long information should be held for and we will keep your information to meet these requirements. We will not keep your information for longer than is necessary.
REQUESTING A COPY OF THE INFORMATION WE HOLD
You may at any time ask for a copy of the information we hold about you – it is your legal right. We will provide you with a copy of any non-exempt personal information within one month unless we ask you for an extension of time. To protect your personal data, we will ask you to verify your identity before we release any information. We may refuse your request if we are unable to confirm your identity.
You have the right, on grounds relating to your situation, at any time to object to processing which is carried out as part of our legitimate interests or in the performance of a task carried out in the public interest. We will no longer process your data unless we can demonstrate there are compelling legitimate grounds which override your rights and freedoms or unless processing is necessary for the establishment, exercise or defence of legal claims.
WHAT ARE YOUR OTHER LEGAL RIGHTS?
In addition to the rights above the additional following rights:
- Where you have given consent, you have the right to withdraw previous consent to processing your personal data at any time;
- You have the right to request from us access to and rectification or erasure of personal data or restriction of processing concerning your data;
- You have the right to receive data you have provided to us in a structured, commonly used and machine-readable format;
- You have the right to lodge a complaint with the regulator (see below).
To exercise any of these rights please contact us (details below).
HOW TO CONTACT OUR DATA PROTECTION OFFICER
You can contact our Data Protection Officer about any data protection via the contact details located in our contact area here.
HOW DO YOU MAKE A COMPLAINT TO THE REGULATOR?
By writing to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
By telephoning: 0303 123 1113
By emailing: [email protected]
By using their website: https://ico.org.uk/for-organisations/report-a-breach/