5. STORAGE OF YOUR PERSONAL DATA
We will only keep your personal data for as long as we need to in order to fulfil the relevant purpose(s) it was collected for, as set out above in this Policy, and thereafter for as long as we need to keep it for legal purposes.
Generally we will delete your records six years after our relationship with you comes to an end. However, we are obliged to retain some data for longer, for regulatory purposes. For more information about how long we will keep your personal data, please contact us at the details shown above.
We take the security and confidentiality of your personal data very seriously. We will use strict procedures and security features to aim at preventing unauthorised access, disclosure, alteration or deletion of your data. This includes restrictions on who can access data, using encryption to protect data when it is being transferred or stored, and maintaining corporate firewalls to safeguard against unauthorised access. For full details of the security measures we have in place, please contact us using the details shown above.
6. YOUR RIGHTS
Data protection laws provide you with the following rights to:
be informed: at the time your information is collected, you should be given, or can ask for information about how your information is collected and used;
request access to your personal data (commonly known as a ‘data subject access request’). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it;
request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected in certain circumstances;
request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. A reason we may not be able to comply is where we have a legal obligation to retain your data; an example of this is where we give pension transfer advice and the Financial Conduct Authority requires us to keep these records indefinitely. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below);
request the restriction of processing of your personal data, for example if you want to establish its accuracy or the reason for processing it; and
request the transfer of your personal data to another party.
You also have the right to object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights above). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive, for example if you keep requesting copies of the same data. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. They can be contacted at:
The Information Commissioners Office
Telephone: 0303 123 1113 or 01625 545745
Fax: 01625 524510
Any changes we make to our Policy in the future will be posted on this page and, where appropriate, notified to you. Alternatively please check back frequently to see any updates or changes to our Policy.
8. CONTACTING US
If you have any queries, comments or requests regarding this Policy or you would like to exercise any of your rights set out above, you can contact us in the following ways:
- by email at email@example.com
- by telephone on 0203 327 5470; or
- by post at Punter Southall Aspire, 80 Leadenhall Street, London, EC3A 3DH.