This policy (together with any other documents referred to in it) explains how we collect, process and protect personal data about you. By visiting our website, you are accepting and consenting to the practices described in this policy.
From time to time, the website may contain links to and from other websites, including those of our advertisers and affiliates. If you follow a link from/to any of these websites, please note that they have their own privacy policies and we don’t accept any responsibility or liability for your data if you choose to use these websites. Please check these policies before you submit any personal data to these websites.
The Personal Information that we collect depends on the context of your interactions with The Pension Place. The information may include:
- Business contact information (such as your name, job title, organisation, location, phone number, email address, and country);
- Marketing information (such as your contact preferences);
- Troubleshooting and support data (which is data you provide or we otherwise collect in connection with support queries we receive from you. This may include contact or authentication data, the content of your chats and other communications with us, and the product or service you are using related to your help inquiry);
We’ll only collect, use and share your personal information where we’re satisfied that we have an appropriate legal basis to do so. This may be because:
- you’ve provided your consent to us using your personal information – for example, when you registered with us and agreed to our terms and conditions
- our use of your personal information is in our legitimate interest – so we can verify your identity or communicate with you. In these cases, we will always look after your information in a way that is proportionate and respects your privacy rights. You have a right to object to processing, as explained below
- our use of your personal information is necessary to perform a contract or take steps to enter into a contract with you.
- our use of your personal information is necessary to comply with a relevant legal obligation that we have.
Information you give us
You may give us information by filling in forms on the website or by corresponding with us by phone, email or otherwise. This includes information you provide when you search the website, enter a competition or promotion, take part in a survey, or when you interact with the website in any other way. This also includes any occasions when you report a problem with the website. The information you give us may include your name, address, email address, phone number, financial information and/or other relevant personal details.
By submitting such details, you confirm that you are entitled to disclose information about, or provided by, any third party.
Information we receive from other sources
We may also receive information about you if you use any of the other websites we operate, or the other services we provide. In such cases, when we collect the data, we’ll inform you that it may be shared internally and combined with data collected on this site. We also work closely with third parties (including, for example, business partners; external/third party service providers in technical, payment and delivery services; advertising networks; analytics providers and search information providers) and may receive information about you from them.
If you authorise a third party to contact us on your behalf which entitles them to provide us with, and receive, information about you, we’ll always verify their identity and right to access your information before any information about you is provided.
Disclosure of your information
We may share your personal information with any member of our group. This includes our subsidiaries and our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.
We share information amongst our subsidiaries to ensure that each business unit which provides platform and pension administration services has the information it needs to efficiently and effectively process transactions and other administrative duties on your behalf. It also means they comply with regulatory requirements and reporting obligations.
We may share your information with selected third parties, including:
- business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you
- analytics and search engine providers that help us to improve and optimise the website
We may disclose your personal information to third parties:
- in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of the business or assets
- if we’re required to disclose or share your personal data in order to comply with a legal obligation, or to enforce or apply our rights under this policy or terms and conditions and other agreements; or to protect the rights, property, or safety of any member of our group, our customers, or others.
All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology
Unfortunately, transmitting information via the internet can’t be completely secure. Although we will do our best to protect your personal data, we can’t guarantee the security of your data transmitted to the website; any transmission is at your own risk. Once we have received your information, we’ll use strict procedures and security features to try to prevent unauthorised access. We strongly suggest you purchase and keep up-to-date software to protect the security of your computer or device.
How long we will store your personal data for
Your data will be stored for the duration of your relationship with us. After the relationship ends, we will store your data only for as long as it’s appropriate and necessary to do so.
Your legal rights in relation to your personal data
You have the following rights when it comes to your data that we hold:
The right to access
You have a right to request that we provide you with a copy of the personal information on you that we hold. You also have the right to be informed of (a) the source of your personal information; (b) the purposes, legal basis and methods of processing; (c) the data controller’s identity; and (d) the entities or categories of entities your personal information may be transferred to.
The right to rectification
You have a right to request that we rectify inaccurate personal information. We may seek to verify the accuracy of the personal information before rectifying it.
The right to erasure
In limited circumstances, you can request that we erase your personal information if:
- it’s no longer needed for the purposes for which it was collected; or
- you have withdrawn your consent (where the data processing was based on consent); or
- following a successful right to object (see right to object); or
- it has been processed unlawfully; or
- We aren’t required to comply with your request to erase personal information if the processing of your personal information is necessary:
- for compliance with a legal obligation; or
- for the establishment, exercise or defence of legal claims
The right to object to processing
You can object to any processing of your personal information which has our legitimate interests as its legal basis – providing you believe your fundamental rights and freedoms outweigh our legitimate interests.
If you raise an objection, we’ll need to demonstrate that we have compelling legitimate interests which override your rights and freedoms in order to continue processing your data.
The right to portability
You have the right to ask us to provide you with an electronic file containing all personal information we hold about you. You can give this information to other organisations if you wish to.
Right to object to how we use your personal information for direct marketing purposes
You also have the right to ask us not to process your personal data for marketing purposes.
You can choose the communications we send you by using the manage preferences links in our emails. However, keep in mind you can’t opt-out of receiving regulatory or legal. We regularly review our records to ensure that we only retain your personal details for as long as is necessary for the purposes set out above.
Right to obtain a copy of personal information safeguards used for transfers outside your jurisdiction
You can ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside of the European Union.
Right to lodge a complaint with your local supervisory authority
If you have concerns about how we’re processing your personal information, you have a right to lodge a complaint with your local supervisory authority. We ask that you please attempt to resolve any issues with us first – although you have a right to contact your supervisory authority at any time.
Access to information
Before sending you a copy of the personal information you requested, we may ask you for additional information to confirm your identity and for security purposes. We reserve the right to charge a fee where permitted by law – for instance, if your request is manifestly unfounded or excessive, you can exercise your rights by contacting us. Subject to legal and other permissible considerations, we’ll make every reasonable effort to honour your request promptly or inform you if we require further information in order to fulfil your request.
We may not always be able to fully address your request, for example, if it goes against the duty of confidentiality we owe to others, or if we’re legally entitled to deal with the request in a different way.
Please email any questions or comments about this policy to Customer Services, firstname.lastname@example.org
For the purpose of the Data Protection Bill, the General Data Protection Regulation (GDPR) and other relevant legislation, our data officer is Devon Kenion.