UK GDPR Compliance Statement

Company Name: Rathbones Limited Plc
Website: www.Rathbonesshares.com
Effective Date: [Insert Date]

1. Our Commitment to Data Protection

At Rathbones Limited Plc, we are fully committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we collect, use, store, and protect your personal data as part of our investment services.

2. Data Controller Information

Rathbones Limited Plc is the data controller responsible for determining the purpose and manner in which your personal data is processed.
Registered Address: [Insert Registered Business Address]
Email: support@Rathbonesshares.com

3. Lawful Basis for Processing Your Data

We only process your personal data when we have a legal basis to do so. This includes:

• Contractual necessity: To provide you with our investment services

• Legal obligation: To comply with financial, tax, and anti-fraud regulations

• Consent: When you explicitly agree (e.g., to receive marketing emails)

• Legitimate interest: To improve services, ensure security, and manage relationships

4. What Personal Data We Collect

We may collect and process the following types of personal data:

• Full name and contact information

• Login details (username, password)

• Financial information (account numbers, transaction history)

• Nationality and identification documents (for KYC/AML purposes)

• IP address, device type, browser type

• Cookies and usage data (see Cookie Policy)

  5. How We Use Your Data

  We use your personal data to:

  • Create and manage your investor account

  • Verify your identity (KYC)

  • Process deposits, withdrawals, and transactions

  • Communicate important account and service updates

  • Provide customer support

  • Detect and prevent fraud or unauthorised activity

  • Comply with legal and regulatory obligations

  6. Data Sharing and Third Parties

  We do not sell or rent your personal data. We may share it with:

  • Financial and payment service providers

  • Regulatory and legal authorities (when required by law)

  • IT and analytics service providers under strict confidentiality agreements

  All third-party providers are required to comply with applicable data protection laws.

  7. Data Retention

  We retain your data only as long as necessary for the purposes stated above, or as required by law (e.g. HMRC regulations). After this period, data is securely deleted or anonymized.

  8. Your Rights Under UK GDPR

  You have the right to:

  • Access your personal data

  • Correct inaccurate or incomplete data

  • Request deletion (where applicable)

  • Restrict or object to certain types of processing

  • Withdraw consent at any time (for marketing or non-essential data uses)

  • Data portability (in certain cases)

  • Lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk

  To exercise any of these rights, please email us at support@Rathbonesshares.com.

  9. Data Security Measures

  We take the protection of your data seriously. Our website and internal systems use:

  • End-to-end SSL encryption

  • Secure user authentication

  • Firewall protection and malware scanning

  • Restricted access to sensitive data

  • Regular security audits and staff training

  10. International Data Transfers

  We primarily store and process data within the United Kingdom. If any data is transferred outside the UK or EEA, we ensure it is protected under legally recognised safeguards, such as Standard Contractual Clauses (SCCs).

  11. Updates to This Policy

  We may update this UK GDPR page as laws or business operations change. All updates will be posted here with an updated effective date. We encourage users to review this page regularly.

• 12. Contact Us

  For any GDPR-related inquiries, data requests, or concerns, please contact:

  Data Protection Officer (DPO)
  Rathbones Limited Plc
  Email: support@Rathbonesshares.com
  Phone: [Insert Phone Number]