Privacy Policy

Introduction

Quai Wealth (operated by Quai Investment Services Limited, trading as Quai Wealth) is committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Quai Investment Services Limited is authorised and regulated by the Financial Conduct Authority. Reference: XXXXXX. Registered office: London, United Kingdom. Registered in England No: XXXXXXXX.

Information We Collect

We may collect and process the following types of personal information:

Identity Information

• Full name, title, and date of birth
• National Insurance number
• Passport or driving licence details (for verification purposes)

Contact Information

• Email address and telephone numbers
• Postal address

Financial Information

• Bank account details
• Investment history and preferences
• Income and employment details
• Tax residency information

Technical Information

• IP address and browser type
• Device information
• Usage data from our website and platform

How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To provide investment management services and manage your accounts
• Legal Compliance: To comply with our regulatory obligations, including Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements
• Communication: To send you important information about your investments, account changes, and regulatory updates
• Marketing: With your consent, to send you newsletters and information about our services
• Improvement: To improve our services and develop new features
• Security: To protect against fraud and ensure the security of our systems

Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: Processing necessary for the performance of our contract with you
• Legal Obligation: Processing necessary to comply with our legal and regulatory obligations
• Legitimate Interests: Processing necessary for our legitimate business interests, provided these do not override your rights
• Consent: Where you have given specific consent for marketing communications

Data Sharing

We may share your personal information with:

• Platform Providers: Third-party investment platforms that administer your accounts
• Regulators: The Financial Conduct Authority and other regulatory bodies
• Service Providers: Companies that provide services on our behalf, such as IT support and custodian services
• Professional Advisers: Auditors, lawyers, and other professional advisers
• Legal Requirements: Where required by law, court order, or regulatory requirement

We do not sell your personal information to third parties. All third parties with whom we share data are required to maintain appropriate security measures and process data in accordance with our instructions.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements. For investment clients, we are required to retain records for a minimum of 6 years after our relationship ends, and longer in some circumstances.

Your Rights

Under UK data protection law, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Restriction: Request restriction of processing in certain circumstances
• Portability: Request transfer of your data to another provider
• Objection: Object to processing based on legitimate interests or for marketing
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details below.

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption, secure servers, access controls, and regular security assessments.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you are concerned about how we handle your personal data: www.ico.org.uk