Portafina* privacy notice
On this page you can find out everything you need to know about the personal data we keep, how it complies with current legislation and your rights when it comes to opting out.
We have split our privacy notice into separate sections, to make it easier for you to find the information you are looking for:
Who to contact about the data we hold
If you have any comments, queries or complaints about this notice, or about how we use your data, please contact our Data Protection Officer:
Medway City Estate
You can also contact the UK information commissioner about anything relating to your personal data. Visit ico.org.uk to find out how to report a concern. Or, you can write to:
Information Commissioner’s Office
What information we collect about you and when
People come to us for help and information, or we communicate directly with people for all sorts of reasons and in many different ways. And there are different stages to someone’s journey with us, from simply requesting information, to having authorised us to manage their pension for them.
Depending on where you are at in the Portafina journey, we will collect the following data:
We only keep your personal data for as long as we need to provide the products and services you have requested, or to fulfil our legal and regulatory obligations.
How we use your information
Data protection rules are very clear. We can only use and share your personal data if we have one or more legally-defined reasons to do so. The four legally-defined reasons are:
Who we share your data with
We may transfer your data to third parties acting on our behalf for further processing in line with the purpose for which the data was originally collected. This covers areas such as service delivery, marketing, data management and technical support.
Our contracted third parties can and will only use personal data for the agreed purpose and will not:
Sometimes we need to transfer personal data to third parties outside of the UK. For example: processing email communications through international servers so that we can deliver useful communications to clients.
Your personal data is just that: your personal data. As such, from a legal perspective you have some fundamental rights and these are called your Data Subject Rights. In this section we will cover some of those rights in detail, and summarise the rest.
Your right of access
At any time, you can ask us for details of the personal data we hold about you. You can request this via email or in writing:
Data Protection Officer
Medway City Estate
Once we receive your written request and proof of identity, we will provide you with details of the personal data we hold about you within one month (which can be extended is certain circumstances).
You also have the right to challenge the data we hold about you and, where appropriate, have it erased, rectified, restricted or objected.
Important note: At certain stages of our interactions with clients we are required by the Financial Conduct Authority (FCA) to keep personal data for a specific period.
We will only keep your data for as long as is necessary to provide our products and services to you and/or to fulfil our legal and regulatory obligations.
Your right to opt out
As detailed in this privacy notice, we communicate with people in many ways and for specific reasons. At any point, you have the right to opt out of these communications in the following way:
You can request to be opted out of emails by replying to them, phoning or writing to us. Plus, there is an option to opt out included in all our marketing emails.
There is an option to opt out of texts within the SMS message. Plus, you can request to be opted out by phoning, emailing or writing to us.
You can request to be opted out of receiving telephone calls by phoning, emailing or writing to us.
You can request to be opted out of receiving letters by phoning, emailing or writing to us.
Your Data Subject Rights also include:
For more information on your Data Subject Rights please visit ico.org.uk
At a glance: key facts
What our privacy notice covers
This notice covers the privacy of visitors to our website, as well as data capture networks and personal data collected by Portafina (as a data controllers) under the General Data Risk Regulation and the General Data Protection Rules (GDPR).
Our general commitment and legal obligation
At Portafina, we are all committed to safeguarding your personal information, and we ensure that it is treated securely. And we are legally obliged to use your personal data in line with all laws concerning the protection of personal information, including the General Data Protection Rules (GDPR). This notice is compliant with GDPR.
Our Data Protection Policy sets out the Company’s obligations regarding the collection, processing, transfer, storage, and disposal of personal data.
Our GDPR Statement of Compliance sets out our commitment to processing and protecting personal data in compliance with the GDPR.
Our registration information
We are registered as a data controller with the UK Information Commissioner’s Office. Our data protection registration number is: Z176088.
This privacy notice was last updated on:
25th May 2018
Changes to the privacy notice
We may change the privacy notice from time to time. This may be necessary, for example. If the law changes, or if we change our business in a way that affects personal data protection.
Cookies play a vital role when it comes to making sure our website is as quick and easy as possible for people to use.
*Portafina is a business associated brand name of Portafina Investment Management Ltd and Portafina LLP