How FinVentures UK Limited collects, uses, retains, discloses and protects personal information, and the rights available to individuals under the UK GDPR and the Data Protection Act 2018.
FinVentures UK Limited (“FinVentures”, “the Company”, “we”, “our” or “us”) recognises the importance of privacy, confidentiality and the responsible handling of personal information.
This Privacy Policy explains how personal data is collected, used, retained, disclosed and protected in connection with the Company’s website, corporate communications and business activities.
The Company is committed to handling personal information in accordance with applicable data protection legislation, including the United Kingdom General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
This Policy applies to individuals who visit the Company’s website, submit enquiries, communicate with the Company or otherwise interact with it in a professional or commercial capacity.
For the purposes of applicable data protection legislation, FinVentures UK Limited acts as a data controller where it determines the purposes and means of processing personal data.
Questions concerning this Privacy Policy or the processing of personal information may be directed to the Company using the contact details provided on its official website.
Depending on the nature of an individual’s interaction with the Company, personal information may include:
Names, professional titles, positions and other identifying particulars.
Business addresses, telephone numbers, email addresses and professional contact details.
Information relating to an individual’s employment, professional responsibilities, business affiliations and corporate relationships.
Correspondence, enquiries, meeting arrangements and information voluntarily provided during professional communications.
Technical information associated with website access, including IP addresses, browser characteristics, device information and website usage data.
Where relevant and lawfully required, information necessary for identity verification, corporate due diligence, legal compliance or the assessment of business relationships.
The categories of personal information collected depend on the purpose of the relevant interaction. The Company does not seek to collect personal information that is unnecessary for a legitimate and specified purpose.
Personal information may be obtained directly from individuals through correspondence, website enquiries, meetings or other professional communications.
Information may also be obtained from publicly available corporate records, professional directories, authorised representatives or third parties where a lawful basis for collection exists.
Where information is received from an external source, its subsequent use remains subject to applicable data protection requirements.
Personal information may be processed for the following purposes:
Responding to enquiries, maintaining professional correspondence and managing communications with individuals and organisations.
Establishing and administering lawful commercial relationships and maintaining appropriate business records.
Supporting internal administration, recordkeeping and the management of corporate responsibilities.
Meeting applicable legal requirements, responding to lawful requests and maintaining records required under relevant legislation.
Maintaining website functionality, assessing technical performance and protecting the integrity of the Company’s digital systems.
Facilitating meetings, reviewing relevant correspondence and responding to legitimate business proposals.
Personal information will not be processed for purposes incompatible with those for which it was originally collected unless permitted by applicable law.
The Company processes personal information only where an appropriate lawful basis applies. Depending on the circumstances, processing may be based on:
Where processing is reasonably necessary for legitimate corporate or commercial interests, provided those interests are not overridden by the rights and freedoms of the individual.
Where processing is necessary to enter into or perform a contract with the individual.
Where processing is required to comply with applicable law.
Where an individual has provided valid consent for a specific processing activity.
Consent may be withdrawn where processing relies upon that basis. Withdrawal does not affect the lawfulness of processing undertaken before consent was withdrawn.
The Company recognises the confidential nature of information received through professional and commercial communications.
Personal information should be accessible only to individuals who require it for an authorised business purpose. Information handling arrangements should reflect the nature and sensitivity of the relevant data.
Where third parties process personal information on behalf of the Company, appropriate contractual and organisational safeguards will be established where required by law.
Personal information may be disclosed where reasonably necessary and legally permitted. Potential recipients may include:
The Company will not disclose personal information to unrelated third parties without an appropriate lawful basis. Where external service providers process personal information on the Company’s behalf, their responsibilities will be governed by applicable data protection requirements.
The Company’s business communications may involve individuals or organisations located outside the United Kingdom.
Where personal information is transferred internationally, the Company will assess the applicable legal requirements. Transfers subject to the UK GDPR will be conducted using an appropriate legal mechanism, including applicable adequacy regulations or approved contractual safeguards where required.
Additional measures may be considered where necessary to provide an appropriate level of protection.
Personal information will be retained only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal, regulatory and contractual requirements. Retention periods may vary according to the nature of the information and the relevant business relationship.
In determining appropriate retention periods, consideration may be given to:
Personal information will be securely deleted, anonymised or otherwise disposed of when continued retention is no longer justified.
The Company recognises the importance of maintaining appropriate safeguards for personal information. Security arrangements should be proportionate to the nature of the information processed and the risks associated with its handling.
Measures may include appropriate access restrictions, secure communications, information-handling procedures and controls governing the use of external service providers.
No electronic transmission or storage system can be guaranteed to be entirely free from security risks. The Company will address personal data incidents in accordance with applicable legal obligations.
Subject to applicable legislation and relevant exemptions, individuals may have the following rights:
To request confirmation of whether their personal information is being processed and obtain access to that information.
To request correction of inaccurate personal information.
To request deletion of personal information in circumstances provided for by law.
To request restrictions on certain processing activities.
To receive eligible personal information in a structured, commonly used and machine-readable format.
To object to processing based on legitimate interests or undertaken for direct marketing purposes.
To receive applicable protections concerning certain decisions based solely on automated processing.
The exercise of these rights may be subject to statutory conditions and exemptions. Requests will be considered in accordance with the applicable legal requirements.
The Company’s website may use cookies and similar technologies to support website functionality, maintain security and assess website performance.
Where consent is required for the use of non-essential technologies, such technologies will be subject to the applicable consent requirements.
Further information concerning cookies, their purposes and available user controls is provided in the Company’s Cookie Policy, published alongside this notice.
The Company’s website may contain references or links to external websites and information sources. Such websites are operated independently and may be subject to separate privacy notices and information-handling practices.
The Company is not responsible for the privacy practices of third-party websites outside its control. Individuals should review the relevant privacy information before providing personal data to external organisations.
Individuals providing personal information concerning another person should ensure that they are lawfully entitled to disclose that information.
Where appropriate, the relevant individual should be informed of the disclosure and the purposes for which the information will be used. The Company may request additional information where necessary to establish an appropriate basis for processing.
This Privacy Policy may be amended to reflect changes in applicable legislation, corporate circumstances, website functionality or personal data processing activities.
The current version will be made available through the Company’s website. Material changes may be communicated through additional notices where required by law.
The effective date and most recent revision date will be identified at the beginning of this document.
Individuals who have concerns regarding the processing of their personal information may contact the Company using its published contact details. The Company will consider privacy-related enquiries and complaints in accordance with applicable data protection requirements.
Individuals also have the right to lodge a complaint with the United Kingdom’s data protection supervisory authority, the Information Commissioner’s Office (“ICO”). Further information is available through the ICO’s official website.
For enquiries relating to this Privacy Policy, personal information or the exercise of data protection rights, please use the Company’s designated privacy contact channel.
© FinVentures UK Limited. All rights reserved.