Privacy Policy

Last Updated: [Insert Date]

[Firm Name] (“we,” “us,” or “our”) is a UK-based investment firm. We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, [Firm Name] is the Data Controller of your personal data.

Registered Address: [Firm Address, United Kingdom]
Email: [privacy@firmname.com]

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Name, date of birth, identification documents
• Contact Data: Email address, telephone number, postal address
• Financial Data: Investment information, transaction records, account details
• Technical Data: IP address, browser type, device information, website usage data
• Compliance Data: Information required for KYC, AML, and regulatory obligations

3. How We Use Your Personal Data

We use your personal data for the following purposes:

• Providing and managing investment and advisory services
• Automating portfolio management, reporting, and operational processes
• Meeting regulatory, legal, and compliance requirements
• Communicating with you about our services and your account
• Improving our website, systems, and client experience

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Performance of a contract
• Compliance with legal and regulatory obligations
• Legitimate interests in operating and improving our business
• Your consent, where required

5. Data Sharing

We do not sell your personal data. We may share it with:

• Regulated service providers, technology partners, and professional advisers
• Regulators, law enforcement, or authorities where legally required
• Third parties where you have provided explicit consent

6. International Data Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses.

7. Data Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and reporting requirements.

9. Your Data Protection Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure of your data (where applicable)
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):
Website: https://www.ico.org.uk

10. Cookies

Our website uses cookies to enhance functionality and analyse usage. Please refer to our Cookie Policy for further details.

11. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be published on this page with the revised date.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact:

[Firm Name]
Email: [privacy@firmname.com]
Address: [Firm Address, United Kingdom]