Privacy policy

Privacy Policy

Your privacy is important to us. So, we have developed a Privacy Policy that covers how we collect, use, disclose, and store your personal information. Please take a moment to read this policy and let us know if you have any questions.

By visiting www.wealthify.com or using our App you confirm you have read this policy and by opening an account or by providing any personal data to us via our website or App, you acknowledge that your personal data will be used in accordance with this policy. 

If you do not agree with any part of this policy, you should not use our website, our App, or our services.

Wealthify Limited ("Wealthify", "we", "us" or "our") trading as Wealthify from Tec Marina, Terra Nova Way, Penarth, CF64 1SA is a data controller for the purpose of the UK Data Protection Act. If you have any questions regarding how we manage your data, please contact us at  [email protected] or you can call us on 0800 802 1800. Our Data Protection Officer is Greg Steel.

We reserve the right to change this policy at any time. Your continued use of our website, App, or services following the posting of any such changes will constitute your acceptance of the revised terms. 

 

What data we collect and why

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

Wealthify collects your personal data directly from you and from third parties. In all cases Wealthify must have a valid basis to process your personal information.

There are six ‘lawful bases’ under the data protection laws, of which four are relevant for your personal data and Wealthify. These are:

• Consent – you agree to allow us to control or use this data
• Contract – processing is necessary for the contract between you and Wealthify
• Legal obligation – processing is necessary to comply with the law
• Legitimate Interest - when we have a business or commercial reason to use your information. But even then, it must not unfairly go against what is right and best for you. If we rely on our legitimate interest, we will tell you what that is

We rely on a legitimate interest to send you marketing communications about investment updates, new features, or any of our offers or promotion. These may include, but are not limited to, email, in-app notification, online through social media adverts, or adverts we place on websites you visit. Where you have the right to object to receiving such communications you can do so by clicking ‘unsubscribe’ in any marketing email we may send. Alternatively, you can contact our customer service team via online chat, secure messaging, email at [email protected] or by calling 0800 802 1800 during our opening hours. You are also able to change or remove your preferences via your online dashboard within the profile section under ‘preferences’.  Opting out of marketing communications will not prevent us from continuing to communicate with you as necessary to manage your account including issuing service messages where we consider it suitable or appropriate to issue, or to make you aware of matters which may require your attention, and that you may otherwise have been unaware.

 

Information you give us

You may give us personal information about you by filling in forms on our website www.wealthify.com (our "Site"), via our App, or by corresponding with us by phone, e-mail, post, or instant chat. You may also provide personal information when you register to use our Site; subscribe to our services or contribute into a Junior ISA where you are not the registered contact; enter a competition promotion or survey; or when you report a problem with our Site.

The information you give us may include your name, address, date of birth, e-mail address and phone number, financial information, personal description, photograph, and other information which may be considered personal in that it may be used to identify you.  

By completing any of our forms on our Site you are signifying your explicit consent to Wealthify collecting such information.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.

 

Information we collect about you

When you visit our Site, we may automatically collect the following personal information:    

Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform.  We collect this personal data by using cookies, and other similar technologies.  Please see our Cookie Policy for further details.

Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our Site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.

We record all service calls for quality and training purposes, to enable us to deal effectively with queries or complaints. In addition, we may record the results of any communications between you and us including email, live chat, secure messaging, social media, or letter. This might include open rates and dates/times, whether it was forwarded, and your interaction with the communication. 

 

How we look after children’s data

We understand the importance of taking extra precautions to protect the privacy and safety of children. We will only collect necessary personal data of any child in relation to the application and administration of a Junior ISA, and only with express parental or guardian permission. Such data may include their name, date of birth and address.

The section “Your rights” within this Privacy Policy also apply to children and their personal data that we may hold.

 

Information we receive from other sources

We work closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, lead generation agencies) and may receive personal information about you from them.  We may also receive certain data about you from other entities within the Aviva Group, financial crime agencies, or fraud prevention agencies.

 

How we use your personal information

 

  

Groups of Personal Information

We use different kinds of personal information, and we group them like this:

Type of personal information	Description
Financial	Your financial situation including but not limited to details of income, debts, and savings.
Contact	Where you live and how to contact you.
Socio-Demographic	This includes details about your work or profession, nationality and where you fit into general social or income groupings.
Transactional	Details about payments to and from your accounts with us.
Contractual	Details about the products or services we provide to you.
Locational	Data we get about where you are, such as may come from your mobile phone or the address where you connect a computer to the internet.
Behavioural	Details about how you use our products and services.
Technical	Details on the devices and technology you use.
Communications	What we learn about you from letters, emails, and conversations between us.
Special Category Data	The law and other regulations treat some types of personal information as special. We will only collect and use these types of data if the law allows us to do so. Things like:   Racial or ethnic origin Genetic and bio-metric data Health data including gender Criminal convictions and offences Criminal records of convictions and offences Religious, political, or philosophical beliefs
Social Relationships	Such as your marital status.
Open Data and Public Records	Details about you that are in public records, such as the Electoral Register, and information about you that is openly available on the internet.
Usage Data	Other data about how you use our products and services.
Documentary Data	Details about you that are stored in documents in different formats, or copies of them. This could include things like your passport, driving licence or birth certificate.
Preferences	Any permissions, consents, or preferences that you give us. This includes things like how you want us to contact you.
National Identifier	A number or code given to you by a government to identify who you are, such as a National Insurance number.

Sometimes the data we collect may be special category data for the purposes of applicable data protection laws. Special category data includes information about physical and mental health, sexual orientation, racial or ethnic origin, political opinions, philosophical belief, trade union membership and biometric data. We take special care of this data in accordance with applicable data protection laws.

 

Who we share your personal information with

The personal information we have collected from you will be shared with fraud prevention agencies who will use it to prevent fraud and money-laundering and to verify your identity. If fraud is detected, you could be refused certain services, finance, or employment. Further details of how your information will be used by us and these fraud prevention agencies, and your data protection rights, can be found at www.cifas.org.uk/fpn.

To provide you with products and services we may disclose your data with the following third parties from time to time:

• Entities within the Aviva Group
• Banks and payment providers for processing payments to and from our account, including Clearbank Limited, whose Privacy Notice can be found here - Clearbank Limited Privacy Notice
• Third parties who perform the checks that we need to carry out on you, such as identification verification, account verification, and anti-money laundering checks.
• Third party service providers who assist to run, develop, or grow Wealthify when it is in our legitimate interest to do so
• Third parties we have integrated with, and you have given us permission to share data with
• Messaging service companies
• Companies you ask us to share your data with, for example to facilitate ISA transfers
• Business partners, suppliers, and sub-contractors for the performance of any contract we enter into with them or you
• Advertisers and advertising networks that require the data to select and serve relevant adverts to you and others
• Analytics and search engine providers that assist us in the improvement and optimisation of our Site such as Google Analytics
• In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets
• If Wealthify or its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets
• Law enforcement bodies or other regulatory entities in order to comply with any legal or regulatory obligation, or in order to enforce or apply our terms and conditions, and other agreements; or to protect the rights, property, or safety of Wealthify, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction

Our Site may, from time to time, contain links to and from the websites of our partner networks, advertisers, and affiliates.  If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.  Please check these policies before you submit any personal data to these websites.

If a registered contact of a Junior ISA has invited you to become a contributor, your personal information such as your identity may be shared with them.  Under no circumstances will we share any payment account information with any other person.

 

Automated Decision Making

Wealthify use systems to make automated decisions about you when signing up to Wealthify. This is to ensure we are operating in line with relevant regulations and laws on how we conduct our business including screening your details against fraud databases or validating your details to check your identity, and where we are unable to determine this automatically it will be reviewed by one of our agents. We also use automated decision-making in assessing your suitability to invest with Wealthify.

 

How long we keep your personal data

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By law, we have to keep basic information about our customers (including contact, identity, financial and transaction data) for six years after they cease being customers, and we may also use such data to enable us to respond to any future complaints, or to share information with the Financial Conduct Authority who regulate us.  Once we no longer need to retain your data in a form that identifies you, we will permanently delete or destroy it, archive and secure it so that it is beyond practical use; or anonymise it.

 

Your rights

Right of access

Commonly known as a "data subject access request". This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. Please send any requests to [email protected].

Right to rectification

You have the right to question any information we have about you that you think is wrong or incomplete. If you make a request to correct or complete your personal data, we may take reasonable steps to check its accuracy before correcting it.

Right to erasure

Commonly known as “the right to be forgotten”, you have the right to request deletion or removal of personal data where there is no compelling reason for its continued processing. There may be legal or other official reasons why we need to keep or use your data and we will notify you if any of these reasons are applicable in response to your request.

Right to portability

You have the right to obtain and reuse your personal data for your own purposes across different services. This allows you to move, copy, or transfer personal data in a safe and secure way from one IT environment to another.

Right to object

The right to object exists where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Right to restrict processing

This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Right to withdraw consent

This right exists where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. Please be aware that if you withdraw your consent, we may not be able to provide certain products or services to you. If this is the case, we will tell you.

You are also able to change or remove your preferences via your online dashboard within the profile section under ‘preferences’. Alternatively, you can contact our customer service team via online chat, secure messaging, email, or telephone.

 

Storing and protecting your personal data

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online. We may ask for proof of identity before we discuss or disclose any personal information about you or your accounts with us.

We have a security program designed and implemented through our policies and controls to protect your data from misuse. Our security program is designed to protect your data from misuse or accidental, unlawful, or unauthorised destruction, loss, alteration, disclosure, acquisition, or access. Our people can only access as little of your data as they absolutely must.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

 

International transfer of data

We will only send your data outside of the UK or European Economic Area (‘EEA’) to:

• Follow your instructions
• Comply with a legal duty
• Work with our suppliers who help us to run your accounts and services

If we do transfer your personal information outside the EEA to our suppliers, we will make sure that it is protected to the same extent as in the EEA. We will use one of these safeguards:

Where we transfer your data to other countries outside of the UK, we will do so on the basis of:

• Adequacy decisions, where a country has been deemed to provide adequate protections to individuals;
• Standard contractual clauses; or
• Other valid transfer mechanisms or derogations.

 

How to complain

Please let us know if you are unhappy with how we have used your personal information. You can contact us using by calling 0800 802 1800, through live chat, or via secure messaging. 

You also have the right to complain at any time to the Information Commissioner’s Office. Find out on their website how to report a concern https://ico.org.uk/. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

 

Last updated: 25 July 2024