Privacy Policy

Why should you read this document?

Citygate Financial Planning Limited is the data controller for the purposes of UK data protection law.

Registered address: 80 Coleman St, City of London, London EC2R 5BJ

ICO registration number: 00019230081

Telephone: +44 203 576 3995

Email: plan@citygatefp.co.uk

Why we collect your personal data

As part of providing regulated financial advice and related services, we need to collect and process personal information about you. This includes information about your personal circumstances, financial position and objectives. In some cases, this may include information relating to your health or family health history where this is relevant to insurance or protection planning.

This information enables us to assess your needs, determine whether our services are appropriate for you, prepare recommendations, implement agreed solutions and provide ongoing servicing where applicable.

 We are also required to collect and verify identity and address documentation to comply with our legal and regulatory obligations, including anti-money laundering requirements, before carrying out work on your behalf.

How we use your personal data

We process your personal data for the following purposes:

  • To provide regulated financial advice and related services
  • To administer your relationship with us
  • To comply with legal and regulatory obligations
  • For legitimate business purposes, such as record keeping, system security, quality assurance and responding to enquiries

Our lawful bases for processing typically include:

  • Performance of a contract
  • Compliance with legal obligations
  • Legitimate interests
 

Where we process special category data (such as health information), this is done only where necessary for insurance or protection planning, and with appropriate additional safeguards in accordance with data protection law.

In the course of providing our services, we may:

  • Record and store your personal data securely on our systems and devices, including cloud-based services
  • Share relevant personal data with product providers, platform operators, insurers, compliance consultants and professional advisers where necessary to deliver our services or meet regulatory requirements
  • Use your personal data to respond to queries, administer your investments or policies, and keep you informed about matters relating to products or services you hold through us

We do not sell personal data to third parties.

Website usage data and cookies

When you visit our website, we may collect limited technical information such as your IP address, browser type, device information and pages visited. This information is used for website security, performance monitoring and analytics purposes.

Where cookies or similar technologies are used, further information is provided in our Cookie Policy and through our website cookie settings.


Data sharing


Your personal data may be shared with third parties only where necessary to provide our services or meet legal or regulatory requirements. This may include:

  • Product providers, platform operators and insurers
  • Compliance consultants, professional advisers and IT service providers
  • Regulatory bodies, auditors or other authorities where required by law

All third parties are required to protect your personal data appropriately and only use it for specified purposes.


Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, regulatory, tax and professional obligations. In many cases this will be at least six years after our relationship ends, although certain records may need to be retained for longer where required by law or regulation.

Your rights

You have rights under UK data protection law in respect of your personal data, including the right to:

  • Request access to your personal data
  • Ask for inaccurate or incomplete data to be corrected
  • Request deletion or restriction of processing in certain circumstances
  • Object to certain types of processing
  • Request portability of your data where applicable

Where we rely on consent for any processing activity (such as marketing communications), you may withdraw your consent at any time.


These rights are subject to legal limitations, which we will explain if relevant to your request.

International Transfers

Some of our systems or service providers may process personal data outside the UK. Where this occurs, appropriate safeguards are applied in accordance with data protection law to ensure your information remains protected.

Automated decision-making
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects for you without human involvement.

Queries or concerns

The person responsible for data protection within Citygate is Guy Skinner, contactable at guy.skinner@citygatefp.co.uk or on +44 203 576 3995. 
If you become aware of any unauthorised disclosure of your personal data, please notify us promptly so that we may investigate and fulfil our regulatory obligations. If you have concerns about how we handle your personal data, you may lodge a complaint with the Information Commissioner’s Office (ICO), who can be contacted through their website at https://ico.org.uk/global/contact-us/ or at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in legal requirements or how we operate. The latest version will always be available on our website.