Privacy Policy
Your privacy is important to us
Last updated: January 2025
Version: 1.0
1. Introduction
Bespoke Financial Rural Ltd ("we", "our", "us") is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Company: Bespoke Financial Rural Limited
Registration Number: 14022216
Registered Office: Prospect House, Comb Hill, Haltwhistle, NE49 9NS
Data Protection Officer: Charles Halbert
2. Information We Collect
We may collect and process the following categories of personal data:
2.1 Information You Provide
- Contact Information: Name, email address, telephone number, postal address
- Financial Information: Income details, employment status, financial goals (only when relevant to services)
- Service Preferences: Types of financial products you're interested in
- Communication Data: Records of our correspondence and your enquiries
2.2 Information We Collect Automatically
- Technical Data: IP address, browser type, device information
- Usage Data: How you interact with our website
- Location Data: General location based on IP address
3. Legal Basis for Processing
We process your personal data under the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Responding to enquiries | Consent / Legitimate interests |
| Providing financial advice | Contract performance |
| Regulatory compliance | Legal obligation |
| Marketing communications | Consent |
4. How We Use Your Information
We use your personal data for the following purposes:
- To respond to your enquiries and provide requested information
- To assess your financial needs and provide appropriate advice
- To arrange financial products on your behalf
- To comply with legal and regulatory obligations
- To improve our services and website functionality
- To send service updates and marketing communications (with consent)
5. Data Sharing and Disclosure
We may share your personal data with:
5.1 Service Providers
- PRIMIS Mortgage Network: Our appointed representative network
- Insurance Providers: When arranging policies on your behalf
- Professional Advisers: Legal, accounting, and compliance professionals
5.2 Legal Requirements
We may disclose your information to comply with legal obligations, including to:
- The Financial Conduct Authority (FCA)
- HM Revenue & Customs
- Law enforcement agencies
- Courts and tribunals
Important: We will never sell, rent, or trade your personal information to third parties for marketing purposes.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including:
| Type of Data | Retention Period |
|---|---|
| Client records | 6 years from last service |
| Financial advice records | Indefinitely (FCA requirement) |
| Marketing preferences | Until consent withdrawn |
| Website enquiries | 3 years |
7. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you
Right to Rectification
Request correction of inaccurate or incomplete data
Right to Erasure
Request deletion of your data in certain circumstances
Right to Restrict Processing
Request limitation of how we use your data
Right to Data Portability
Receive your data in a machine-readable format
Right to Object
Object to processing based on legitimate interests
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent
Right to Complain
Lodge a complaint with the Information Commissioner's Office
To exercise any of these rights, please contact us using the details in Section 11.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Staff training on data protection
- Incident response procedures
- Regular backups and disaster recovery plans
9. International Transfers
We do not routinely transfer personal data outside the UK. If such transfers become necessary, we will ensure appropriate safeguards are in place, including:
- UK-approved standard contractual clauses
- Adequacy decisions by the UK government
- Your explicit consent where required
10. Cookies and Tracking
Our website uses cookies to improve your browsing experience. We use:
- Essential Cookies: Required for website functionality
- Analytics Cookies: To understand how visitors use our site
- Preference Cookies: To remember your choices
You can control cookies through your browser settings. For more information, see our Cookie Policy.
11. Contact Us
For any questions about this privacy policy or to exercise your rights, please contact our Data Protection Officer:
Data Protection Officer: Charles Halbert
Email: [email protected]
Phone: 07793 025856
Post: Prospect House, Comb Hill, Haltwhistle, NE49 9NS
We aim to respond to all data protection enquiries within 30 days.
12. Complaints
If you're not satisfied with how we handle your personal data, you have the right to lodge a complaint with:
Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113
Post: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
13. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes by:
- Posting the new policy on this page
- Updating the "last updated" date
- Emailing registered users where appropriate
We encourage you to review this policy periodically.