Data Protection and Privacy Policy

At MFP Wealth Management, we are committed to protecting and respecting your privacy.

This Data Protection and Privacy Policy explains how and why we collect personal information, how we use it, who we may share it with, how long we keep it, and the rights you have regarding your personal information.

We may update this Policy from time to time. Please check this page periodically to ensure you are aware of any changes.

If you have any questions about this Notice or how we handle your personal information, please email us at info@mfpwealthmanagement.co.uk, call us on 01425 279212 or write to MFP Wealth Management, 10 Falcon Drive, Christchurch, BH23 4BA.

How do we collect information from you?

We obtain information about you when:

  • You visit our website;

  • You contact us for information;

  • You seek financial advice or other services from us;

  • You complete forms or provide information electronically, by email, by telephone or in person.

What information do we collect?

When you visit our website, we may collect name and contact details, email and IP address, information about how you use our website and device and browser information.

When you seek financial advice or other services from us, we may collect:

  • Personal details;

  • Contact information;

  • Financial circumstances;

  • Financial objectives;

  • Details of investments, pensions, insurance policies and mortgages;

  • Information relating to your attitude to risk and capacity for loss;

  • Information required to meet legal and regulatory obligations.

Where necessary and with appropriate authority, we may obtain information directly from product providers, pension providers, insurers or other authorised third parties.

If you choose not to provide information required for us to deliver our services, we may be unable to provide advice or continue acting on your behalf.

Special category data

In certain circumstances we may process special category personal data, including health-related information, where this is necessary to provide regulated financial planning, pension, mortgage, protection or insurance advice.

We will only process such information where we have an appropriate lawful basis under applicable data protection legislation.

How do we use your information?

We use your personal information to:

  • Provide financial advice and related services;

  • Assess the suitability of recommendations;

  • Arrange financial products and services;

  • Deliver ongoing review and servicing arrangements;

  • Meet our contractual obligations;

  • Comply with legal and regulatory requirements;

  • Prevent fraud and financial crime;

  • Protect our business, clients and staff;

  • Improve our services and website.

Lawful Bases for Processing

We process personal information under one or more of the following lawful bases:

Contract

Processing is necessary to provide the services you have requested or to take steps before entering into an agreement with you.

Legal and Regulatory Obligations

Processing is necessary to comply with laws, regulations and Financial Conduct Authority (FCA) requirements.

Consent

Where required, we will obtain your consent before processing your information and you may withdraw that consent at any time.

Legitimate Interests

We may process information where it is necessary for our legitimate business interests, provided your rights and interests do not override those interests.

Examples include:

  • Managing our business operations;

  • Improving our services;

  • Protecting our systems and data;

  • Preventing fraud and financial crime;

  • Communicating with existing clients about relevant services.

Recognised Legitimate Interests

Under the Data Use and Access Act 2025, certain processing activities are recognised in law as being in the public interest.

Where relevant, we may process personal information under a Recognised Legitimate Interest (RLI), including activities relating to:

  • Crime prevention and detection;

  • Safeguarding vulnerable individuals;

  • Public security;

  • National security and defence;

  • Emergency response situations.

Marketing Communications

We may contact you about services that may be relevant to your financial planning needs where:

  • You have provided consent; or

  • We are otherwise permitted to do so under applicable data protection and electronic marketing laws.

You may opt out of marketing communications at any time by contacting us at info@mfpwealthmanagement.co.uk or by using any unsubscribe facility included within our communications.

How long do we keep your information?

We review the personal data we hold regularly to ensure it remains accurate, relevant and secure.

Client records are retained for varying periods depending on:

  • The services provided;

  • Legal obligations;

  • FCA requirements;

  • Potential future complaints or claims.

Due to the long-term nature of financial advice, pension advice and ongoing suitability obligations, some records may be retained for extended periods or indefinitely where reasonably necessary to:

  • Comply with FCA requirements;

  • Respond to complaints or Financial Ombudsman Service investigations;

  • Defend legal claims;

  • Demonstrate the suitability of advice provided;

  • Maintain appropriate compliance and audit records.

Where records are retained long term, they are securely archived and access is restricted to authorised personnel.

Who has access to your information?

We take the security of personal information seriously and maintain appropriate technical and organisational measures to protect it.

Personal information may be shared with:

  • Product providers;

  • Pension providers;

  • Insurance companies;

  • Mortgage lenders;

  • Professional advisers;

  • Compliance consultants;

  • Regulatory authorities;

  • Technology and business support providers.

We only share information where necessary to provide our services, meet legal obligations or support our business operations.

We will never sell your personal information.

Contacting you

We will contact you as necessary to provide our services and fulfil our obligations to you.

Where you have agreed to an ongoing service, we will contact you at agreed review intervals.

We may also contact you where we reasonably believe you should be aware of relevant developments affecting your financial arrangements.

Your rights

Under UK data protection law, you have the right to:

Access – Request a copy of the personal information we hold about you.

Rectification – Ask us to correct inaccurate or incomplete information.

Erasure – Request deletion of your personal information in certain circumstances.

Restriction – Request that we limit how we use your information.

Data Portability – Request transfer of your information to another provider where applicable.

Object – Object to certain types of processing, including direct marketing.

Some rights are subject to legal and regulatory restrictions.

If you wish to exercise any of your rights, please contact us using the details provided above.

Children’s information

Our services are primarily intended for adults.

Where we provide online services that may be accessed by children, we will take their needs into account when deciding how their personal information is used and protected, in accordance with applicable data protection legislation and ICO guidance, including the Age Appropriate Design Code where relevant.

Security

We take appropriate measures to protect personal information from loss, misuse, unauthorised access, disclosure or alteration.

Access to personal information is restricted to authorised individuals who require it for legitimate business purposes.

While we take reasonable steps to protect information transmitted electronically, no method of transmission over the internet can be guaranteed to be completely secure.

Cookies

Our website uses cookies to improve user experience and website functionality.

Cookies help us understand how visitors use our website and allow us to improve our services.

Further information can be found in our Cookie Policy.

You can disable cookies through your browser settings, although this may affect website functionality.

Profiling

When you visit our website, we may use cookies and analytics technologies to monitor website usage and improve user experience.

This information is generally aggregated and does not involve automated decision-making that produces legal or similarly significant effects.

Links to other websites

Our website may contain links to third-party websites.

This Privacy Notice applies only to MFP Wealth Management's website. We encourage you to read the privacy notices of any external websites you visit.

International Transfers

Some of the organisations that provide services to us may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure appropriate safeguards are in place as required by UK data protection law.

These safeguards may include:

  • Transfers to countries recognised by the UK Government as providing adequate protection;

  • The UK-US Data Bridge where applicable;

  • Approved contractual safeguards;

  • Other legally recognised transfer mechanisms.

Complaints

If you have any concerns about how we collect, use or protect your personal information, please contact us first so that we can try to resolve the matter.

We aim to acknowledge and investigate privacy-related complaints promptly and will normally provide a substantive response within 30 days. Where further investigation is required, we will keep you informed without undue delay.

If you remain dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).

Information Commissioner's Office
Website: https://ico.org.uk/make-a-complaint
Telephone: 0303 123 1113

Review of this Policy

This Policy is reviewed regularly to ensure it remains accurate and reflects current legal and regulatory requirements. Last updated: June 2026.