Privacy Notice
JM Wealth is an FCA-regulated firm and this privacy notice explains how we use any personal information we collect about you. JM Wealth takes the privacy and protection of personal data seriously. We ask you to read the following important information, which explains how we collect, store and use your personal data.
Who are we?
Under the General Data Protection Regulation (Regulation (EU) 2016/679) (the "GDPR") and the Data Protection Act 2018, we are required to give you certain information about the way your personal information is used. This notice (together with our Statutory disclosures and any other documents referred to in it) sets out the basis on which any personal information we collect from you, or that you provide to us, will be processed by us.
What do we mean by Personal Data?
By personal data (or personal information), we mean information that relates to you and is used to identify you, either directly or in conjunction with other material we may hold.
Some personal data may identify you directly, for example your name, address, date of birth, or national insurance number. Other personal data may also identify you indirectly, for example your employment situation, your physical and mental health history, or any other information that could be associated with your cultural or social identity.
In the context of JM Wealth providing you with advice and guidance, your personal data may include:
- Name, date of birth, gender, nationality, civil/marital status, contact details, addresses and any documents needed to verify your identity
- Employment and remuneration information
- Bank account details, tax information, commitments for liabilities such as loans and credit cards, personal credit history, sources of income and expenditure
- If you have parental responsibility for children under the age of 13, it is likely that we will record information on our systems that relates to those children and potentially to their Special Category Data
When you visit our site or use our services, we may also automatically collect technical information, including data obtained via cookies, the IP address used to connect your computer to the internet, your login information, geographic location, browser type and version, browser plug-in types and versions, and operating system.
We may also receive personal information from third parties we work with, including:
- Companies that introduce you to us
- Financial advisers
- Insurers
- Comparison websites
- Fraud prevention and/or credit reference agencies
- Payroll service providers (in relation to auto-enrolment pension products)
- Public information sources such as Companies House
- Agents working on our behalf
- Market researchers
- Regulatory bodies
- Government and law enforcement agencies
What is Special Category Data?
Certain types of personal data are considered more sensitive and are subject to additional levels of protection under data protection legislation. These are known as special categories of data, such as:
- Racial or ethnic origin
- Political opinions
- Religious or philosophical beliefs
- Trade union membership
- Genetic data
- Biometric data
- Health
- A person's sex life
- Sexual orientation
There are further protections in relation to criminal offence data, details of which can be found at https://ico.org.uk. The arrangement of certain types of insurance may involve disclosure by you of information relating to historic or current criminal convictions or offences. This relates to insurance-related activities such as underwriting, claims and fraud management. We will use Special Category Data and any criminal disclosures in the same way as your personal data generally, as set out in this Privacy Notice. In order to process your Special Category Data, we do require explicit consent.
Why do we collect information from you?
In order to undertake our services for you, we have the right to use your personal data provided it is in our legitimate business interest. We may be required to share this data with third parties such as providers, insurance companies, and regulatory and legal bodies. We use your personal information to enable us to:
a) Provide services and advice, or to provide you with the information, products and services you have requested from us, under Legitimate Interest.
b) Retain records of any services or advice we provide to you, in order to defend potential legal claims or complaints and to comply with our legal and regulatory obligations.
c) Provide you with details of products and services we may feel are of interest to you, in accordance with your preferences.
How do we collect information?
Most information we obtain will be directly from you during our meetings and discussions, or in writing, including via email. We may also need to obtain information from third parties in relation to verifying your identity. With regards to electronic ID checks, we would not require your consent but will inform you of how such software operates and the purpose for which it is used.
How do we protect your personal information?
We have strict safeguarding processes to ensure that we meet our obligations under the Data Protection Regulations 2018. Your privacy is important to us and we will keep your personal data secure in accordance with our legal responsibilities. We will take reasonable steps to safeguard your personal data against it being accessed unlawfully or maliciously by a third party.
We will:
- Record and store your personal data in our paper files and electronic files on our computer systems, which can only be accessed by our staff when it is necessary to provide our service to you
- Submit your personal data to providers, both electronically or via paper-based forms, to allow us to advise you or process your application for a product
- Use your personal data to respond to any queries you have on your policies
Your personal data will be retained by us either electronically or in paper format for a minimum of six years, or in instances where we have a regulatory or legal obligation to hold such information indefinitely.
What are your rights surrounding your personal information?
Your enhanced rights under the GDPR include:
- The right of access: we will provide a copy of your personal data within 30 days of a request. Requests can be made in writing, by phone or by email. We will not charge a fee for this unless we think your request is unfounded, excessive or repetitive.
- The right to rectification: you may ask us to rectify any personal data which you believe is inaccurate or incomplete. We will respond within one month (this can be extended by two months where the request is complex).
- The right to erasure: you have the right to request that we delete all records of your personal data. We will comply with your request, unless we have a legal obligation to continue to hold your personal data.
- The right to request a transfer of personal data: you can ask us to provide your personal data to another data controller in a recognised format.
Who do we share your personal information with?
We will only share your personal data with third parties when it is necessary for the service you have asked us to provide, or if we are required to do so as a legal or regulatory obligation. We have contracts and safeguards in place to ensure that they comply with the GDPR and treat the privacy of your personal data with the same importance as we do. Your data may be transferred outside of the EEA as part of the normal processing of data, but this will only be where necessary and where there are sufficient safeguards in place.
Contact us about your personal data
If you have any questions or comments about this notice, or wish to exercise any of your rights, please contact us at 01639 203 203, or by emailing admin@jm-wealth.com. If you have any concerns or complaints about how we have handled your personal data, you may lodge a complaint with the UK's data protection regulator, the ICO, at https://ico.org.uk or by writing to: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.