Privacy Policy

Effective date: 15th April 2025

Introduction

Highclere Financial Services Ltd. (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website, use our services, or otherwise interact with us.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant data protection laws.

Information We Collect

Personal Information:

• Contact details — name, email address, phone number, postal address
• Account information — usernames, passwords, and other registration data
• Payment information — credit card or other payment details and billing information
• Communication data — information you provide when contacting us with enquiries, feedback, or support requests.

Non-Personal Information:

• Usage data — how you interact with our website or services
• Technical data — IP address, browser type, operating system, and device information
• Cookies and tracking technologies — data collected through cookies, web beacons, and similar technologies

How We Use Your Information

• Providing services — to process transactions, manage your account, and deliver customer support
• Communication — to respond to your enquiries and send you updates, newsletters, and marketing materials (you may opt out at any time)
• Improvement and development — to analyse usage and improve our services, website, and performance
• Security — to protect our systems, services, and users from fraud and other malicious activities
• Legal compliance — to comply with our legal obligations and enforce our terms and conditions

Legal Basis for Processing

We only process your personal data where we have a valid legal basis. These

may include:

• Consent — where you have given us clear permission to process your data
• Contractual necessity — to fulfil a contract or take steps at your request prior to entering into a contract
• Legal obligation — to comply with legal or regulatory requirements
• Legitimate interests — where necessary for our legitimate interests, such as improving our services, provided your rights do not override these interests

Sharing Your Information

We do not sell or rent your personal data to third parties. We may share your information in the following situations:

• Service providers — trusted third parties who assist in operating our business (e.g. IT services, payment processors, marketing tools), under strict confidentiality terms
• Legal and regulatory compliance — if required by law or to respond to legal requests and regulatory authorities
• Business transfers — in connection with a merger, sale, or acquisition of all or part of our business

International Data Transfers

Some of our third-party service providers may process or store your personal data outside the UK. In such cases, we ensure appropriate safeguards are in place, such as the use of Standard Contractual Clauses or UK-specific adequacy arrangements, to maintain your rights and protect your information.

Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy, inc luding legal, accounting, or reporting requirements.

Retention periods are determined based on the type of data, the nature of our relationship with you, and our regulatory obligations.

Your Rights

You have the following rights under UK data protection law:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to have inaccurate or incomplete data corrected
• Right to erasure — to request deletion of your data in certain circumstances
• Right to restrict processing — to limit the way we use your data in certain scenarios
• Right to data portability — to obtain your data in a commonly used format and transfer it elsewhere
• Right to object — to object to the processing of your data for direct marketing or other legitimate interests
• Right to withdraw consent — where processing is based on your consent, you can withdraw it at any time

Children’s Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect or process personal data from children.

Data Security

We implement appropriate technical and organisational measures to protect your data from unauthorised access, alteration, or destruction. However, no system is entirely secure, and we cannot guarantee the absolute security of your information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on our website and revise the ”Effective Date” below. We encourage you to review this pape periodically. Continued use of our services constitutes acceptance of any updates.

Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us:

Email: lyndon.lakey@highclerefinancial.com

Phone: 01442 870512

Address: 271 High Street, Berkhamsted, Hertfordshire, HP4 1AA