Privacy Policy

Who We Are

PF Financial Limited is the data controller responsible for the personal data collected through this website.

Contact details:
Email: info@pffinancial.co.uk
Address: 1A High Street, Bovingdon, Hertfordshire HP3 0HG

We have appointed a Data Protection Officer (DPO). You can contact our DPO using the details below:
Name: Jed Elverson
Email: jed@pffinancial.co.uk

What Data We Collect

We collect personal data that you choose to provide when you contact us through our website, by email, or by telephone. This may include:

Contact and enquiry details, such as your name, email address, telephone number, and the content of your message.

Financial information you voluntarily provide through enquiry and contact forms to help us understand your needs before an initial conversation, such as approximate asset values, pension arrangements, income, and general financial circumstances.

We do not collect bank account details, card numbers, account passwords, or any other specific financial account information through this website. Any detailed financial information required for advice is gathered separately, off-site, as part of the regulated advice process.

We also collect certain data automatically when you use the website, such as:

Device and connection information, including your IP address, browser type, and similar technical information needed to deliver the website and help keep it secure.

Cookie consent preferences, which record the choices you make about cookies on this website.

If you choose to opt in, we also collect data through non-essential cookies and similar technologies for the following purposes:

Usage data via analytics, to understand how visitors use the website.

Advertising-related data, to support advertising and measure the effectiveness of advertising.

Sources of data:

Directly from you when you submit an enquiry, contact us by email or telephone, or sign up to receive marketing emails.

Automatically from your device and browser when you access the website (for example, technical logs and IP address).

From cookies and similar technologies where you have given consent for non-essential cookies.

Providing personal data is optional. However, if you do not provide the information needed to respond to your enquiry, we may not be able to answer your request. You can use the website without consenting to non-essential cookies, and you can withdraw consent at any time.

How We Use Your Data

We use your personal data for the purposes below. For each purpose, we rely on the legal basis stated.

Responding to your enquiries and communicating with you about our services (legal basis: contract).

Understanding your needs before an initial conversation, including considering the financial information you voluntarily provide in your enquiry (legal basis: contract).

Sending marketing emails where you have asked to receive them (legal basis: consent). You can unsubscribe at any time using the unsubscribe link in our emails or by contacting us.

Collecting analytics data to understand how visitors use our website (legal basis: consent). We do not place analytics cookies or collect analytics data through cookies or similar technologies unless you opt in.

Supporting advertising and measuring advertising effectiveness (legal basis: consent). We do not place advertising cookies or carry out advertising-related tracking unless you opt in.

Protecting the website and our business against security threats, misuse, and fraud, and maintaining the security of our systems (legal basis: legitimate interests). This may involve reviewing technical and security-related records.

Who We Share Your Data With

We share personal data only where necessary for the purposes described in this policy.

We use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.

We may use third-party service providers in the following categories, where enabled on our website and where you have provided consent where required: analytics services, advertising networks, and email service providers. Where we use such providers, they process personal data on our instructions and in accordance with their own privacy information.

We may also share personal data where required by law, or where necessary to establish, exercise, or defend legal claims.

International Data Transfers

We do not list any third-party providers detected from our website scan that would require us to describe specific international transfers in this policy.

Our consent management system (Trustwards) is based in Spain (EU), so consent data is not transferred internationally.

If we use third-party providers in the categories described above and they are located outside the UK, Switzerland, or the EU/EEA, we will ensure appropriate safeguards are in place for the transfer, such as Standard Contractual Clauses or another lawful transfer mechanism recognised under applicable data protection law.

How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying legal, accounting, or reporting requirements.

Customer information may be retained for up to 6 years following the end of a working relationship in order to comply with UK tax and legal obligations.

Enquiry form submissions and general correspondence may be retained for a shorter period where no business relationship is established.

Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).

Security logs and technical records: 12 months.

Analytics data: until consent is withdrawn or according to the analytics tool retention settings.

Advertising/marketing tracking data: until consent is withdrawn.

Marketing email data: until consent is withdrawn or user unsubscribes.

Your Rights

If you are in the EU/EEA, the UK, or Switzerland, you have the following rights in relation to your personal data:

The right to access your personal data.
The right to correct inaccurate data.
The right to delete your data (the “right to be forgotten”).
The right to restrict processing.
The right to data portability.
The right to object to processing.
The right to withdraw consent at any time (where we rely on consent).
The right not to be subject to automated decision-making.

To exercise your rights, contact us at info@pffinancial.co.uk. We may need to verify your identity before responding. We will respond within one month.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children’s Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Data Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Breach Notification

We maintain procedures to detect, report, and investigate security incidents. If a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and provide information about the nature of the breach, the likely consequences, and the measures taken or proposed to address it.

If you suspect a security issue involving your personal data, please contact us at info@pffinancial.co.uk.

How to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority in your jurisdiction. If you are in the UK, the competent supervisory authority is the UK Information Commissioner’s Office. We would appreciate the opportunity to address your concerns first, so please consider contacting us at info@pffinancial.co.uk.

Updates to This Policy

We review and update this policy periodically. The “Last updated” date at the top of this policy shows when it was last changed. If we make significant changes, we will provide a notice on our website and/or notify you by email where appropriate. Changes take effect from the date indicated at the top of this policy. Where processing is based on consent, we will request new consent when required.

Contact Us

Email: info@pffinancial.co.uk
Address: 1A High Street, Bovingdon, Hertfordshire HP3 0HG
Data Controller: PF Financial Limited