Who We Are

Core Independent Financial Planning Ltd is the data controller responsible for how your personal data is used.  We must follow the UK GDPR and the Data Protection Act 2018, as amended by the Data (Use & Access) Act 2025. This notice explains how we use your data and your rights under the law.

We are responsible for ensuring your information is handled lawfully, fairly and securely.  and are registered with the Information Commissioner’s Office (ICO). Our ICO registration number is ZA054780.

Why We Use Your Data

We use your information to:

  • provide financial planning and advice
  • recommend suitable investments, pensions, and protection
  • deliver ongoing advice
  • meet legal and regulatory requirements

Without this information, we would not be able to advise you properly or provide the services you have asked us to deliver.

What Data We Collect

This may include:

  • personal details, such as your name, address, date of birth and contact details
  • financial information, such as income, assets, liabilities, pensions and investments
  • information about your goals, priorities and personal circumstances

In some cases, we may also receive information from providers and other relevant third parties.

Where necessary to provide appropriate advice, we may also process sensitive personal data.

How We Use Your Data

We only use your data where we have a valid reason for doing so. This may include:

  • providing services you have asked for
  • meeting legal and regulatory obligations
  • supporting ongoing advice and service delivery

How We Use Technology

We use a range of systems and tools to support our advice process, including financial planning software, investment platforms, secure client management systems, and communication tools.

These systems help us provide accurate, consistent and efficient advice.

While technology supports our work, all recommendations and decisions are made by your adviser.

We do not use your data to make fully automated decisions about you without human involvement.

Lawful Basis for Processing

We process your personal data under the following lawful bases, depending on the circumstances:

  • contractual necessity, to provide the services you have requested
  • legal obligation, to comply with regulatory requirements
  • legitimate interests, to operate and improve our business
  • consent, where required, including for certain categories of sensitive data

Consent can be withdrawn at any time by writing to us, but may limit the services we can provide moving forward.

Who We Share It With

We may share your data with third parties where necessary to provide our services.

This includes:

  • product providers, to set up and manage your investments, pensions and protection policies
  • platforms and portfolio managers, to administer and manage your investments
  • compliance, regulatory and professional bodies where required
  • technology providers who support our systems, secure data storage and communication

We only share what is necessary, and all parties are expected to keep your data secure.

If we use AI-enabled tools or third-party service providers to support our services, your data may be processed and/or stored by those providers on our behalf. Where this involves transferring personal data outside the UK, we will ensure appropriate safeguards are in place, and we will provide details on request.

International Transfers

In some cases, your personal data may be transferred outside the United Kingdom.

Where this happens, we ensure that appropriate safeguards are in place to protect your data in line with UK data protection law.

How Long We Keep Your Data

We keep your personal information while you are a client and for at least seven years afterwards.

Some records may need to be retained for longer where required by law or regulation, or where this is appropriate in relation to the advice and services we have provided. When your information is no longer required, it will be securely deleted or anonymised.

Your Rights

You have the right to:

  • access your data
  • correct inaccurate data
  • request deletion, where appropriate
  • object to how your data is used
  • request a copy of your data in a portable format in some circumstances
  • restrict or challenge certain types of processing
  • claim compensation if you suffer harm because data protection law has been broken

To exercise these rights, please contact us.

Marketing

We will only contact you about additional services if you have agreed to this.

You can change your preferences at any time.

Data Security

We take appropriate technical and organisational steps to protect your data and restrict access to authorised individuals only.

Potential Business Transfers

In the event that our firm is involved in a merger, acquisition, sale of assets, or other business transaction, your personal data may be part of the assets transferred. Any such transfer will comply with applicable data protection laws, and the receiving party will continue to handle your personal data in accordance with this Privacy Notice, or an updated notice provided at the time of transfer. We will notify you in advance of any such transfer, providing details of the acquiring entity and any changes to how your data will be processed, if applicable.

Complaints

If you have concerns about how your data is used, please contact us first.

You also have the right to complain to the Information Commissioner’s Office (ICO):

www.ico.org.uk | 0303 123 1113

What This Means For You

In practice, this means your data is used only to provide advice, manage your arrangements, and meet our legal responsibilities.

We do not use your data in ways that are unexpected or unrelated to your financial planning.

Changes

We may update this notice from time to time to reflect changes in our services, legal requirements or the way we use personal data.

Last updated: July 2026