On 25th May 2018 the European Data Protection regulations are changing. Martin Redston Associates have identified below how we will comply with the new General Data Protection Regulations (GDPR).
How we use your information
We will only use information you provide us as necessary for the purposes of the services we provide to you and to keep our own records up to date. We treat all personal information we hold about our clients or prospective clients as private and confidential.
We do not send mailouts to clients and we will never pass client personal details onto third parties nor reveal details concerning your accounts with us to anyone not connected with Martin Redston Associates Ltd unless;
- You ask us to reveal the information, or we have your permission to do so or
- We are required or permitted to do so by law and where the appropriate court order or warrant has been provided or
- It is required by law enforcement, fraud prevention or similar agencies who have provided the appropriate court order or warrant or
- There is a duty to the public to reveal the information, eg to government bodies, tax authorities or regulatory bodies
If you give us information about another person, you need to confirm that you have been appointed to act on behalf of that other person. This includes providing consent to process that other person’s data.
We are unlikely to send your data outside the European Economic Area. However, we will ensure it is processed and handled in line with relevant Data Protection legislation should the need to do this arise.
Card payments are processed using the Worldpay online portal. Credit and/or Debit card details are not written down and any details that are taken will be immediately destroyed once processed. We do not hold financial details for longer than necessary.
We will only hold personal data which is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed. We will only collect, hold and process personal data that is relevant and limited to what is needed to provide provide our services to you. Any personal data which is no longer needed will be archived in secure storage or deleted in accordance with company guidelines.
Our company guidelines will include policies and procedures to ensure personal data is kept confidential, archived securely and deleted after a reasonable time from completion of the purposes for which it was being held, unless the law requires such data to be kept for a minimum time.