Under Article 30 of the GDPR, businesses are required to hold details of specific information. We are pleased to be able to inform you of the information that is relevant and appropriate for you to know.
Name of firm: InvestEngine (UK) Limited
Address: Office 327, The Metal Box Factory, 30 Great Guildford street, London, SE1 0HS.
Main line telephone: 0800 808 5771 or +44 (0) 208 051 9 501
Data Protection Officer: Ian Herridge (Mr Herridge is also the Compliance Director and Money Laundering Reporting Officer)
Client data – is retained regarding any client who has transacted business with the firm.
All data is held securely.
Only personal data is held for clients. Sensitive data is not retained.
All data held, is only requested and retained on a necessary basis. Data held enables the contractual and/or the function to continue, given the knowledge gained and retained.
Persons who are permitted access to data and/or the ability to process it, will be informed of the access permissions.
Those persons whom access has not been granted to any data held, will be made aware of the penalties to be applied* should access be attained via inappropriate means. (*Disciplinary measures).
Those who have access to data will be informed of the importance of confidentiality and security of the data.
Data for the purposes of trading (dealing) will be transferred to Ramsey Crookall on the Isle of Man.
All data will be transferred online via a secure link which will be monitored closely.
Ramsey Crookall is a major shareholder of IEUK.
All data will be retained for the entire time that the data subject (client, staff member or third party) engages with the firm.
Once the data subject terminates any engagement with the firm, the data will be held for an extended time permitted under both the Statute of Limitations requirements and, the record retention rules of the FCA. (Please ask if you require any further details in this regard)
Right to be informed.
Right of access to data.
Right to correct or erase data.
Right to restrict or object to processing.
Right to data portability.