Minshall Financial Services Limited understands its obligations in regards to your fundamental right to a private life and has implemented systems and controls to ensure your rights and freedoms are protected.
Minshall Financial Services Limited undertakes to meet its obligations under the Data Protection Act, the Privacy and Electronic Communications Regulations and the EU General Data Protection Regulation (GDPR).
Minshall Financial Services Limited will support customer understanding by ensuring any communication meets the information needs of customers and any person with a vulnerability is not disadvantaged with the use of format, layout, fonts and language used. Text should be easy to read and without jargon.
Minshall Financial Services Limited will collect the following data, dependent upon the financial service required:
Name, address, contact telephone numbers, email address, bank statements, passport, council tax and utility bills, driving licence, benefit statements, shotgun licence, payslips, criminal record information, existing pension information, life cover information, investment information, details of assets and liabilities, health information – life policies and long-term care information – annual expenditure and any other existing relevant policy.
Different variations of data are required for each product so we may not be required to collect all of the data listed above for all products.
You directly provide Minshall Financial Services Limited with the personal data we collect by the following methods:
Original physical copy, scanned certified email copy, scanned certified postal copy.
Access to your personal data is permitted only for those employees who require it to fulfil their responsibilities on your behalf. Your personal data will be initially processed by Minshall Financial Services Limited. Your personal data will be further processed by On-Line Partnership Group Limited on behalf of its subsidiary company The On-Line Partnership Limited who acts as our Principal for regulatory purposes. In the event of incapacity of your adviser, your data will be shared with an authorised On-Line Partnership Group Limited locum adviser in order to carry out the responsibilities within your service agreement. All parties will process your personal data in accordance with this Privacy Notice. All parties are subject to information security training to enforce and communicate best practice when handling information.
Though there are some legal exceptions, if we wish to process your personal data for any other unrelated purpose than those we have informed you about we will notify you.
Your personal data is essential to enable us to take steps at your request prior to entering into a contract or to perform a contract to which you are a party. Without this information we will not be able to proceed to provide any financial service. Processing will only occur whereby it is necessary to protect the vital interests of our client.
The lawful basis for the processing of your personal data as per Article 6(1) of the GDPR is:
We will record your information exactly as you provide it. You may ask us to update it at any time and we will action your request promptly and notify relevant third parties of any changes.
We will only process sensitive personal data, such as data concerning health, with your explicit and informed consent for specific processing activities. In such cases you will be asked to sign a separate consent form to evidence this and that you understand the purpose(s) of the processing of such data. Your consent may be withdrawn at any time. The processing is in order to:
You have the right to object to processing for these purposes and we shall cease unless we can show we have compelling legitimate grounds to continue.
We will use your personal data to protect members of the public against dishonesty, money laundering or fraudulent activities. This must necessarily be carried out without your explicit consent to ensure this function is not prejudiced. Part of this processing involves verifying your identity using third parties such as GB Group Plc or Creditsafe Business Solutions Ltd.
We only collect data that is necessary to carry out the purposes listed above. This includes data you supply and data we receive from reference agencies. Where practical and lawful we will inform you about any of your personal data we receive from third parties that you may be unaware of.
We will ensure that your data is only accessible to authorised people in our firm and will remain confidential at all times. Appropriate security measures are in place to prevent unauthorised access, alteration, disclosure, loss, damage or destruction of your information. If we have a contract with another organisation to provide us with services or a service on our behalf to process your personal information, we’ll make sure they give reassurances regarding appropriate security measures in place and only process your data in the way we’ve authorised them to. These organisations won’t be entitled to use your personal data for their own purposes. If necessary, our security teams will check them to make sure they meet the security requirements we’ve set. Please contact our Data Protection Representative below if you would like further information.
We may share your data with:
We do not usually transfer any of your personal data outside of the UK or EU except when we need to perform pre-contractual measures (credit and identity checks) or because the checks we request are necessary for important reasons of public interest. Some companies, like Creditsafe Business Solutions Ltd, may transfer data outside of the EU to countries which do not, in the view of the EU Commission, offer an adequate level of protection. In such cases Creditsafe encrypts any data it sends to other agencies and only transfers information necessary to carry out checks. (A list of countries used to perform checks include Germany, Netherland, Belgium, France, Sweden, Norway, Finland, Luxembourg, Switzerland, Liechtenstein, Spain, USA, Estonia, Latvia, Lithuania, Poland, Slovakia, Czech Republic, Hungary, Slovenia, Bosnia, Serbia, Montenegro, Croatia, Macedonia, Kosovo, Albania, Bulgaria, Romania, Ukraine, Austria, Denmark, Moldova, Portugal, Italy, Canada, Brazil, Greenland, China, India, Australia, Russia, South Korea, Taiwan, Mexico, South Africa, New Zealand, Hong Kong, UK.)
Furthermore, we will occasionally use third parties for the processing of personal data in third countries. However, we shall put in place appropriate safeguards to ensure your data is safe before such transfers.
We will use your personal data now and in the future to carry out direct marketing activities as these are legitimate interests pursued by us. Sometimes this includes, with your consent, sharing data with product providers for their marketing activities. You can choose which method you’d prefer us to use to contact you (by email, telephone, SMS or post) and you have the right to object at any time to the use of your personal data for this purpose and we will cease marketing activity. Just let the person who gave you this form know about your preferences.
In line with The Telecommunications (Lawful Business Practice) (Interception of Communications) Regulations 2000 we may record incoming or outgoing telephone conversations for the following purposes:
The Financial Conduct Authority lays down rules relating to how long your personal data should be held for and we will keep your data to meet these requirements. We will not keep your personal data for longer than is necessary.
You may at any time ask for a copy of the personal data we hold about you – it is your legal right. We will provide you with a copy of any non-exempt personal data within one month unless we ask you for an extension of time. To protect your personal data, we will ask you to verify your identity before we release any data. We may refuse your request if we are unable to confirm your identity. Information will be provided to you in a concise, transparent, intelligible, and easily accessible form, using clear and plain language, in particular for any information addressed specifically to a child.
You have the right, on grounds relating to your situation, at any time to object to processing which is carried out as part of our legitimate interests or in the performance of a task carried out in the public interest. We will no longer process your personal data unless we can demonstrate there are compelling legitimate grounds which override your rights and freedoms or unless processing is necessary for the establishment, exercise or defence of legal claims.
You have the right to object at any time to processing your personal data for marketing activities. In such a case we must stop processing for this purpose.
In addition to the rights above the additional following rights:
To exercise any of these rights please contact our Data Protection Representative.
Your trust is important to us. That is why you can contact our Data Protection Representative about any data protection or marketing issues by:
The Data Protection Representative, Minshall Financial Services Limited, Unit 11, Poplars Court, Lenton Lane, Nottingham, NG7 2RR.