Global Privacy Notice


  1. Important information and who we are


  2. Data protection principles


  3. The kind of personal information we collect and use about you


  4. How is your personal information collected


  5. How do we use your personal information


  6. Disclosures of personal information


  7. International Transfers


  8. Security


  9. How long we keep your personal information


  10. Examples of the types of personal information we collect about you


  11. Country-Specific Notices


  12. How to Contact Us


  13. Changes to our Privacy Policy



  1. Important information and who we are


    As a global company, Equiti and its Affiliates1 (the “Equiti Group”) collect, use and share personal information when you use any service that it offers. This global privacy notice has been created to cover how the Equiti Group ("We", "us", "our") collect, use and disclose personal information and is relevant to Equiti Group website visitors and users of Equiti Group's services. The notice describes the types of personal information we collect, the purposes for processing that personal information, the third parties we share your personal information with and the security measures we have implemented to keep your personal data secure. It also sets out the rights and choices of individuals and how to contact us about the information contained in this global privacy notice, wherever you are in the world.

    Where any entity within the Equiti Group acts a controller, the controller will be deemed to be the Equiti Group entity listed on the terms and conditions that you enter into when using an Equiti Group service.

    This global privacy notice sets out some core content and, where applicable, can be read in conjunction with any supplemental privacy notices as required by country specific law. This is


    1 Equiti and its Affiliates are companies that are directly or indirectly owned or controlled by Equiti Group Ltd.

    where certain country specific information, such as individuals' rights can be found. In the absence of any country specific information, this privacy notice will apply.

    Our global privacy notice, and any associated country-specific privacy notices will be reviewed from time to time to take account of new obligations and technology, changes to our operations and practices and to make sure it remains appropriate to the changing global environment.

  2. Data protection principles


    The Equiti Group seek to comply with all data protection laws that are applicable around the world. Where possible, we have adopted the core principles set out in the GDPR to inform how we collect and use your personal information. The principles are as follows:

  3. The kind of personal information we collect and use about you


    Personal information or personal data means any information about a living individual from which that person can be identified, even without any linkage to their name. It does not include data where the identity of the individual has been completely and permanently removed (which is called anonymous or anonymised data). The types of personal information we collect include the following categories:

  4. How is your personal information collected


    We collect information from you where you fill in forms on our website or by corresponding with us by phone, email or otherwise. It includes information you provide when you register to use our website, when you report a problem with our site or when you contact us to discuss any aspect of your account with us. When you visit our website, access our services, engage with our emails and online ads, we may collect information by automated means. For more information on how we collect your data, please refer to the Cookies Policy on our website.

  5. How do we use your personal information


    We will only use your personal information when applicable data protection law permits us to, including by identifying any necessary lawful bases for processing (i.e. a legally permissible reason for processing your personal information). Please check the relevant country-specific notices below to ensure that there are no differences in your specific jurisdiction.

    The table below contains the purposes we plan to use your personal information, the types of data applicable to this purpose and the applicable lawful basis for our processing activities:


    Purpose

    Type of Data

    Lawful basis for processing including basis of legitimate interest

    To register you as a new client

    Performance of a contract with you

    To process your transaction including:

    To manage our relationship with you which will include:

    review or take a survey

    1. Identity and profile

    2. Contact

    1. Manage payments, fees and charges

    2. Collect and recover money owed to us

    1. Identity and profile

    2. Contact

    3. Financial

    4. Transaction

    5. Marketing and Communications

    1. Performance of a contract with you

    2. Necessary for our legitimate interests (to recover debts due to us)

    1. Notifying you about changes to our changes to our terms or privacy policy

    2. Asking you to leave a

    1. Identity and profile

    2. Contact

    3. Marketing and Communications

    1. Performance of a contract with you

    2. Necessary to comply with a legal obligation

    3. Necessary for our legitimate interests (to keep our records updated and to study




    how customers use our products/services)

    To enable you to partake in a prize draw, competition or complete a survey

    To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)

    To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you

    Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)

    To use data analytics to improve our website, products/services, marketing, customer relationships and experiences

    Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)

    To make suggestions and recommendations to you

    Necessary for our legitimate interests (to develop our

    1. Identity and profile

    2. Contact

    3. Usage

    4. Marketing and Communications

    1. Performance of a contract with you

    2. Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)

    1. Identity and profile

    2. Contact

    3. Technical

    1. Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restricting exercise)

    2. Necessary to comply with a legal obligation

    1. Identity and profile

    2. Contact

    3. Usage

    4. Marketing and Communications

    5. Technical

    1. Technical

    2. Usage

    1. Identity and profile

    2. Contact

    3. Technical


    about goods or services that may be of interest to you

    (d) Usage

    products/services and grow our business)

    If we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply our terms of use or other agreements, or to protect the rights, property, or safety of Equiti, our customers, or others.

    This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

    Necessary to comply with a legal obligation

    In the event that we engage in M&A activity, including any reorganisations, selling or buying any business or assets, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock.

    Necessary for our legitimate interests (where it is necessary for the sale of the business or shares to disclose the data to a potential buyer)

    1. Identity and profile

    2. Contact

    3. Financial

    4. Transaction

    5. Marketing and Communications

    1. Identity and profile

    2. Transaction


  6. Disclosures of personal information


    We share your personal information with our trusted third parties as part of the operation of our global business. Your personal data will be shared with the following categories of recipients:

  7. Security


    Protecting your personal information and your privacy is very important to us. At a global level, we have set high standards for data security. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed, altered or disclosed in an unauthorised manner. In addition, we limit access to your personal information to those employees and third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.

  8. International transfers


    The Equiti Group is an international business that has operations and service providers around the world.

    Where we transfer your personal information outside of the jurisdiction in which the relevant controller (pursuant to this privacy notice) is incorporated in (“Jurisdiction”), as well as to processors located outside of the Jurisdiction who are engaged on our behalf. Where we transfer your information outside of the Jurisdiction, we will ensure that the transfer is lawful and that there are appropriate security and contractual arrangements in place to safeguard such transfers.

    If we transfer your personal data to another country that doesn’t offer a standard of data protection equivalent to the Jurisdiction from which your personal data is transferred from, we will ensure that your personal data is sufficiently protrected through mechanisms such as (where applicable), (i) approved Standard Contractual Clauses; (ii) the UK Approved Addendum; (iii) Binding Corporate Rules; (iv) standard data protection clauses, certification or an approved code of conduct adopted by a supervisory authority within the Jurisdiction; or (v) a contractual framework deemed to provide an adequate level of protection for personal data.

    To the extent applicable, please see any country-specific notices for additional details in relation to our international transfers and our appropriate safeguards in place.

  9. How long we keep your personal information


    We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

    To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

    To receive additional details around our retention periods, please contact us using the details in section 12 below.

  10. Examples of the types of personal information we collect about you


    We may collect, use, store, transfer and otherwise process different kinds of personal information about you, which we have grouped together as follows:


    Type of personal information

    Definition

    Identity and Profile

    Identity Data includes name, username or similar identifier, online account profile information, marital status, title, date of birth and gender.

    Contact

    Contact Data includes billing address, delivery address, location, country, email address and telephone numbers.

    Financial

    Financial Data includes bank account and payment card details.

    Usage

    Usage Data includes information about how you use our websites, mobile applications, Wi-Fi and similar electronic services.

    Transaction

    Transaction Data includes details about payments to and from you and other payment details of products/services you have purchased from us.

    Marketing and Communications

    Marketing and Communications Data includes your marketing and communication preferences.

    Technical

    Technical Data includes information collected when you access our websites or mobile applications, your internet protocol (IP) address, your login data, browser

    type and version, time zone setting and location and



    country, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our websites or mobile applications.


  11. Your rights


    Under certain circumstances, you have rights under data protection laws in relation to your personal data. These may include:


You can exercise your rights by contacting us using the details set out in section 12 below.


If you have concerns in relation with how we deal with your data, you have a right to complain to your local data protection authority, or to the data protection regulator in the country where you live or work.

13. Changes to our privacy notices


Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.