A trading name of the Investment Association
Registered Office: Camomile Court, 23 Camomile Street, London EC3A 7LL
Registered: in England and Wales
Registration Number: 04343737
Investment20/20 ("we", "us", "our") are committed to protecting and respecting your privacy.
For the purpose of the Data Protection Act 1998 (the "Act") and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the "General Data Protection Regulation" or "GDPR", the data processer and controller is Investment20/20 of Camomile Court, 23 Camomile Street, London EC3A 7LL.
As used in this policy, the term "Regulations" shall include, together, the Act and the General Data Protection Regulation, each of them, as from time to time applicable, amended, restated or supplemented.
1. INFORMATION WE MAY COLLECT FROM YOU
We may collect and process the following data about you (including without limitation):
1.1 Information that you give us
You may give us information about you by filling in forms on our site or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you register to use our site, where a firm takes on services from us, post material, participate in discussion boards or other social media functions on our site, request further services, and when you report a problem with our site. If you contact us, we may keep a record of that correspondence. We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them. The information you give us may include, without limitation and as set out in further detail below, your name, address, e-mail address and phone number, and financial information.
1.2 Information we collect about you
With regard to each of your visits to our site we may automatically collect the following information:
i. technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and
ii. information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); services you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.
1.3 Information we receive from other sources
We may receive further information of the categories set out above about you if you use any of the other websites we operate or the other services we provide. In this case, any data collected may be shared internally and combined with data collected on this site. We may also work closely with third parties (including, for example, business partners, sub-contractors, analytics providers, search information providers) and may receive information about you from them.
Investment20/20 collects some information on its web sites through the use of 'cookies'. To find out how we use them, see our cookie notice here.
3. USES MADE AND PROCESSING OF THE INFORMATION
We may use information held about you (information that you give to us, information we collect about you and information we receive from other sources) in the following ways:
3.1 Information you give to us
We may process information that you give to us:
i. to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us;
ii. to notify you about changes to our service;
iii. to ensure the security of our website and services, maintaining back-ups of our databases and communicating with you and record-keeping;
iv. for the purposes of offering, marketing and selling relevant products and/or services to you;
v. for the purposes of supplying goods and/or services that we may from time to time advertise and sell through our website, and keeping proper records of those transactions;
vi. to analyse the use of the website and services;
vii. to ensure that content from our site is presented in the most effective manner for you and for your computer; and
viii. in general, we may process any of your personal data with the purpose to comply with any legal obligation to which we are subject.
Information you give us may comprise:
i. information in your website profile, which may include your name, address, telephone number, email address, profile pictures, gender, date of birth, relationship status, interests and hobbies, educational details and employment details;
ii. information relating to transactions, including card and/or bank details; and
iii. information contained in or relating to any communication that you send to us, including any metadata associated with the communication, where applicable.
3.2 Information we collect about you
We may process information that we collect about you:
i. to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
ii. to improve our site to ensure that content is presented in the most effective manner for you and for your computer;
iii. to allow you to participate in interactive features of our service, when you choose to do so;
iv. as part of our efforts to keep our site safe and/or secure;
v. to make suggestions and recommendations to you and other users of our site about services that may interest you or them;
vi. to collect broad demographic information for aggregate use; and
vii. in co-operation with your internet provider, to identify you if we feel it is necessary to enforce compliance with our terms or use or to protect our service, site, users or others.
The legal basis for this processing is our legitimate interests and business and, where applicable, the proper performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and the proper administration of our website and business.
3.3 Information we receive from other sources
We may combine information that we receive about you from other sources with information you give to us and information we collect about you. We may use this information and the combined information for the purposes set out above (depending on the types of information we receive).
4. WHERE WE STORE YOUR PERSONAL DATA
The data that we collect from you is hosted and stored in the United Kingdom.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
You acknowledge that any personal data that you submit for publication through our website or services may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal data by others.
5. DISCLOSURE OF YOUR INFORMATION
5.1 Group members
We may share your information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006 for the purposes set out in this policy.
5.2 Selected third parties
We may also share your information with selected third parties for the purposes set out in this policy. These selected third parties may include:
i. business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you, including payment services providers;
ii. analytics and search engine providers that assist us in the improvement and optimisation of our site; and
iii. insurers and/or professional advisors for the purposes of maintaining appropriate insurance levels, managing risks, obtaining legal advice and managing disputes.
We may disclose your information to third parties:
i. in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
ii. if Investment20/20 or substantially all of its assets are acquired by a third party, in which case personal data held by it about its members will be one of the transferred assets;
iv. to protect the rights, property, or safety of Investment20/20 and our members or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
6. RETENTION AND DELETION OF PERSONAL DATA
We will not retain and store any personal data for longer than it is necessary for the purposes of compliance with our legal obligations under the Regulations.
We will retain your personal data for a minimum period of two (2) years, or as any other longer period that may be imposed to us by law or by the Regulations (the "Data Retention Period").
Upon elapsing of the Data Retention Period, all your personal data stored and retained by Investment20/20 will be deleted from its files and records.
7. YOUR RIGHTS
Your rights under the Regulations are:
You have the right to be informed of your rights and how your personal data will be stored, treated, deleted and controlled, as all is set out in this policy.
7.2 Access to information
You have the right to access your personal data, so that you are aware of and can verify the lawfulness of the processing. The Regulations give you the right to access information held about you. Your right of access can be exercised in accordance therewith. Any access request is free of charge.
Please note that we reserve the right to charge a reasonable fee taking into account the administrative costs of providing the information and/or refuse to respond to any access request, should any such requests are manifestly unfounded or excessive, if in particular, these requests are repetitive.
If any such requests are denied, you would have the right to complain to the supervisory authority (the Information Commissioner’s Office).
You have the right to rectification of any data that is incorrect and, taking into account the purposes of the processing, you have the right to request that any incomplete information is completed.
You can request that any data is erased:
i. where the personal data is no longer necessary in relation to the purpose for which it was originally collected/processed;
ii. when you wish to withdraw consent;
iii. when you object to the processing and there is no overriding legitimate interest for continuing the processing;
iv. when your personal data has been unlawfully processed in breach of the Regulations;
v. when your personal data has to be erased in order to comply with a legal obligation; and
vi. when your personal data is processed in relation to the offer of information society services to a child.
Processing of your personal data will be restricted in any of the following circumstances:
i. where there is a contest regarding the accuracy of your personal data, Investment20/20 will restrict any processing until the data has been verified;
ii. where you object to the processing and Investment20/20 needs to consider whether your organisation’s legitimate grounds override those of the individual;
iii. when processing is unlawful and you oppose erasure and request restriction instead; and
iv. if Investment20/20 does no longer need your personal data but you require the data to establish, exercise or defend a legal claim.
7.6 Data Access Portability
You may also, free of charge, request to view, access and use your personal and transaction data in a way that is generally portable.
You may express an objection on grounds relating to your particular situation to:
i. processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling);
ii. direct marketing (including profiling); and
iii. processing for purposes of scientific/historical research and statistics.
7.8 Rights in relation to automated decision making and profiling
You may object to be subject to any automated data processing decisions, unless such automatic processing is necessary for entering into or performance of a contract between you and Investment20/20, is lawfully authorised and/or based on your explicit consent.
8. LINKS TO THIRD PARTY WEBSITES
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
9. DATA ACCURACY
Whilst we accept responsibility for maintaining the personal information entrusted to us on our site, we are not responsible for its accuracy over time or at the point of entry. If you identify any inaccuracy in your personal information, as a registered user you can make any necessary changes as required and as provided in this policy.
11. COMMUNICATIONS WITH REGISTERED USERS
Investment20/20 may contact its registered users by e-mail, post or telephone call or messaging, as these have been provided by its registered users to it.
a) by e-mail at the following e-mail address: and should be addressed to firstname.lastname@example.org;
b) by post, at our registered office address set out above; and
c) by telephone, using the contact number published on our site from time to time.
13. FILING OF COMPLAINTS
If you have any complaints or concerns about the contents of this policy or your personal data stored, processed and/or controlled by Investment20/20, you can address these with the supervisory authority, the International Commissioner’s Officer.