The privacy of your personal information is very important to us. We process all personal information in line with data protection laws applicable in the UK (the “DP Law”). For the purposes of the DP Law, for any data we collect about you on our website the data controller is Tilney Investment Management Services Ltd. To the extent we provide products or services to you, the data controller is the Tilney group entity which provides these products or services to you under the applicable Terms of Business, unless we inform you otherwise. Except as stated below, we conﬁrm we will not disclose or transfer your personal information to any third party for any purpose.
What information do we collect from you?
The information we collect, hold and process about you comes from the way you engage with us, such as:
- By ﬁlling in forms, in applications, when you request any products or services,
- Through your interactions with us, including if you contact us by post, email, telephone, in person or by any other means, and
- From the way you use the ﬁnancial products you hold or take out with us.
We may also receive information about you from other Tilney group companies, third parties who provide services to you or us, and research, credit reference and fraud prevention agencies.
The information we collect from you or receive from any of the third parties listed above may include:
- Your name, address, email address, phone number and other contact information
- Financial information about your assets, credit position and the products you have invested in
- Details of any payments you make or receive
- Information about your health
The DP Law sets apart certain personal information as special categories, e.g. racial or ethnic origin, religious beliefs, physical or mental health, sexual life.
We will process these special categories of your personal information only with your explicit consent or where we have other legal grounds to do so when it will help us fulﬁl our obligations to you. If at any time you wish us to stop processing these special categories of your personal information, please contact us using the contact details below.
How will we use the information we collect about you?
We use the personal information you provide us in a number of ways, including:
- To provide you with products and services and service your account
- To develop new products and services
- To offer new investment products
- To inform you of other products and services by email, telephone, letter and other digital methods unless you ask us not to - you can determine the extent of our communication to you through the links in any email we send you or by contacting us using the details below
- For security, identity veriﬁcation and training purposes
- To communicate with you
- To comply with the law and regulations
- To prepare research and anonymised statistical reports
In particular we and other Tilney group companies may use your information to monitor or record telephone conversations or other communications between you and us. We use these recordings (or transcripts of them):
- To check your instructions to us
- To analyse, assess and improve our services to customers
- For training and quality purposes
- To help us investigate any complaint you may make
- As evidence in any dispute or anticipated dispute between you and us
Recordings of telephone conversations may take place without the use of a warning tone.
If you change your mind about how you wish us to contact you or no longer wish to receive this information or our marketing communications, you can let us know by using the contact details below.
We would, from time to time, like to send you information about products and services of ours and other companies in our group which may be of interest to you. You may decline to receive these at the point when we collect your personal information. If you have previously consented to receiving such communications, you may opt out of receiving this information at any point by contacting us using the details below, or by opting to unsubscribe from email and SMS communications by using the method contained in any marketing email or SMS we send to you.
Who might we share this information with?
We will keep your personal information conﬁdential, but we may share it with:
- Tilney group companies;
- Our service providers and agents (including their sub-contractors);
- Third parties providing services to you;
- The representatives of a potential buyer, transferee, merger partner or seller if we wish to buy, sell, transfer or merge part or all of our business or assets;
- Your advisers or anyone you have confirmed has your permission to deal with your accounts;
- Owners of other linked accounts;
- Law enforcement agencies and other authorities to comply with legal obligations.
Your personal information may be transferred to or accessed from other countries (including those outside the European Economic Area) and processed for us in those countries on the basis that anyone we pass it to will provide a level of protection equivalent to the DP Law. Such information may be accessed by local law enforcement agencies and other authorities to prevent and detect crime and comply with legal obligations. For further details as to where your personal information may be transferred, please contact us using the details at the end of this policy.
We will take appropriate steps to both store and send the information you provide us with securely and employees are trained on and are aware of their responsibility to maintain your privacy. We will ensure that all third parties we use to help us provide services to you are also compliant with DP Law.
How long do we keep hold of your information?
We only hold your personal information for as long as we require it to provide you with the services you have asked for or for as long as we are legally required under various business and financial laws. Our retention and deletion policy details these timeframes. Further information can be provided to you by getting in touch with us using the contact details below. Once we no longer need your personal information, we will securely destroy it.
What are your rights in relation to the personal information we hold about you?
This section explains the rights you have under DP Law with respect to how your personal information is held and used by us. If you wish to request to exercise any of these rights or if you would like further information about them, you can contact us using the details set out in the ‘How to Contact Us’ section below. We will grant your request only to the extent that it follows from our assessment of your request that we are allowed and required to do so under DP Law.
You have the right to withdraw your consent to us processing special categories of your personal information at any time. This will not affect the lawfulness of any processing of these special categories of your personal information that we carried out before your withdrawal. If you choose to withdraw your consent to us processing these special categories of your personal information, we may not be able to provide you with certain products and services.
You have the right to ask for a copy of the personal information we hold about you in a written format, free of charge.
You also have the right, at no cost, to require us, and any third parties who we have shared your personal information with, to correct any inaccuracies in your personal information. In order for us to do so, you must inform us of any changes to your personal information so that we can keep it up to date.
In some cases, you have the right to restrict or suppress further use of your personal information. When you have exercised this right, we can still store your personal information but may not use it further unless you provide your consent for us to do so or as otherwise permitted by law.
You have the right to have the personal information we hold about you erased in certain circumstances unless it prevents us from carrying out the services you have requested or prevents us from meeting our legal obligations. We may not be able to provide our products and services to you if you ask us to erase your personal information.
You have certain rights to obtain and reuse your personal information for your own purposes across different organisations for example, if you wish to move to a new financial services provider. This enables you to move, copy or transfer your personal information easily between our IT systems and another provider’s safely and securely, without affecting its usability.
Finally you have the right to lodge a complaint about how we collect, process and store your personal data, with us in writing to this address:
The Data Protection Officer, Tilney, The Observatory, Western Road, Bracknell, Berkshire, RG12 1TL
as well as with the supervisory authority:
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Changes to our Data Privacy Notice
We keep our Data Privacy Notice under regular review and we will update this document from time to time. This Data Privacy Notice was last updated April 2018.
How to contact us
To discuss anything in this notice please write to: The Data Protection Officer, Tilney, The Observatory, Western Road, Bracknell, Berkshire RG12 1TL. Alternatively you may contact us by email: firstname.lastname@example.org.