We are Cavendish Family Office (London) Limited and its subsidiaries (the "Group") and to use your personal data we rely on third parties to develop our business under our directions. For this reason, your personal data will normally be directly processed by our service providers, and we will not access or otherwise process your data unless it is strictly necessary.
We process your personal data to deal with any enquiries or requests you raise, to onboard you as a client, and to share your data with third parties (lawyers, tax advisors, investment managers and the like) with your permission.
This notice explains what data we process, why, how it is legal, and your rights and it is important you read the whole notice because this section only summarises the relevant points.
This Privacy Notice is provided by Cavendish Family Office (London) Limited, and its subsidiaries as may be from time to time, (all of us together, the "Group" or "we" or "us") and to the extent we process your personal data directly or by a contractor doing it under our instructions, we are the data controller and responsible for processing your data.
We are based in the United Kingdom, and we comply with the data protection laws applicable in the United Kingdom and in any other country where we operate or otherwise process your data, including the European General Data Protection Regulation where applicable.
We take your privacy very seriously. We ask that you read this Privacy Notice carefully as it contains important information about our processing and your rights.
If you need to contact us about this Privacy Notice or would like this Privacy Notice in another format (for example: audio, large print, braille), please contact us using our contact details which can be accessed on our website.
The latest version of this Privacy Notice can always be found here at www.cavfo.com
We may change this Privacy Notice from time to time. Regularly reviewing this page ensures that you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties.
Please familiarise yourself with the following words and phrases (used in bold) as they have meanings in the Data Protection Laws and are used throughout this Privacy Notice:
Group, we, us
Means Cavendish Family Office (Limited) whose registered office is at: 1st Floor, 3 Sharrow Lane, Sheffield, S11 8AE and its subsidiaries.
controller
This means any person who determines the purposes for which, and the manner in which, any personal data is processed.
criminal offence data
This means any information relating to criminal convictions and offences committed or allegedly committed.
Data Protection Laws
This means the Data Protection Act 2018, as amended from time to time, and any other applicable national laws related to data protection, privacy and electronic communications, applicable in the territories we operate in or in relation to your personal data, including the General Data Protection Regulation 2016/679 which applies in the EEA and the UK version of the General Data Protection Regulation 2016/679 which applies in the UK by virtue of section 3 of the European Union (Withdrawal) Act 2018 , as amended from time to time.
data subject
The individual to whom the personal data relates.
Data Protection Supervisor
This means the UK Information Commissioner’s Office, or any other regulatory authority responsible for implementing, overseeing and enforcing the Data Protection Laws in the territories applicable to us.
individual
This means a living natural person.
personal data, data
This means any information from which an individual can be identified. This includes information such as telephone numbers, names, addresses, e-mail addresses, photographs, and voice recordings. It will also include expressions of opinion and indications of intentions about data subjects (and their own expressions of opinion/intentions). It will also cover information which on its own does not identify someone, but which would identify them if put together with other information which we have or are likely to have in the future.
processing
This covers virtually anything anyone can do with personal data, including:– obtaining, recording, retrieving, consulting or holding it;– organising, adapting or altering it;– disclosing, disseminating or otherwise making it available; and– aligning, blocking, erasing or destroying it.
processor
This means any contractor who processes your personal data under our specific instructions and on our behalf.
special categories of data or Sensitive Personal Information
This means any information relating to:
you
Current, former and prospective:
We, or our processors, collect your contact details such as name, email address, address, telephone number, bank account details, KYC (know your customer) documents such as your passport and credit history, personal identifiers, such as social security number and national insurance number, age, professional title, occupation, financial information, and tax status. We do not directly process most of the information you give to our service providers and other third parties, and when they collect your personal data, or any personal data you provide to them, they will inform you about the processing of this data for their own purposes or on our behalf if appropriate.
We use Plausible Analytics to track overall trends in the usage of our website. Plausible Analytics collects only aggregated information, which does not allow us to identify any visitor to our website. For more information, please visit the Plausible Analytics Data Policy.
Your personal data will be collected through interactions with us or our contractors in the course of our business, or as part of the services we deliver to you.
Your personal data may also be collected from a third-party adviser (such as an introducing agent), from publicly available sources (such as Companies House) or an identification verification database.
We do not envisage the use of your sensitive personal data as part of our business and will only request for it if it is strictly necessary in order to comply with a legal obligation or otherwise according to the law.
In case we request for this information we will inform you at the time this is requested for, if necessary, we will ask for your consent, and we will protect this information with greater care.
If you provide us with information about other individuals, you confirm that you are mandated by them and thus act under their instructions and have informed them about this Privacy Notice as appropriate.
We or our service providers use your personal data for the following purposes listed in this section. We are allowed to do so on certain legal bases (please see section 'How is processing your data lawful' for further detail):
Neither us nor any of our processors make decisions about you based on automated processing of your personal data.
We are allowed to process your personal data for the following reasons and on the following legal bases:
We have a legitimate interest in sharing data about you:
We do not share information about you with these third parties in a context other than where it is necessary to perform a contract or for us to run and manage our business efficiently as you expect us to do.
You can find more information related to third parties in this Privacy Notice (see "Who will have access to your personal data?"). You can object to processing that we carry out on the grounds of legitimate interests as long as it is not linked to another legal ground (for example if it is necessary to perform a contract we have in place with you). See the section headed 'Your Rights' to find out how.
It is necessary for our performance of the contract you have agreed to enter with us. If you do not provide your personal data to us, we will not be able to carry out our obligations under the terms of your contract.
We are subject to legal obligations to process your personal data for the purposes of complying with applicable regulatory, accounting, and financial rules, health and safety and to make mandatory disclosures to government bodies, tax administrators and law enforcement agencies.
Certain of our service providers will directly collect and process your personal data as our processors.
In addition, we share your personal data with the certain of our service providers who act as separate controllers of your personal data because although they are our contractors, they decide why and how to use your data when providing services for us.
Where we transfer your personal information outside the United Kingdom and/or the territories where we operate, we will ensure that it is protected and transferred in a manner consistent with legal requirements applicable to the information. This can be done in a number of different ways, for instance:
If you would like further information about the safeguards, we have in place to protect your personal information, please contact us at mark@cavfo.com
We strive to implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access and any other unlawful forms of processing. We aim to ensure that the level of security and the measures adopted to protect your personal data are appropriate for the risks presented by the nature and use of your personal data. We follow recognised industry practices for protecting our IT environment and physical facilities and we ensure that the companies processing your data on our behalf provide an adequate level of protection to secure both your personal data and other confidential information.
Our main rule is not to keep your data for longer than we need to in order to meet all the purposes we included in the section 'Why do we process your personal data?'
With this in mind, your personal data will generally be retained for the longest of the following periods:
For example, if you are a client, we will keep your data during the time you are in such position after which, we will keep your personal data if we need it to comply with a legal obligation or if we need it to meet other purposes, but if we do not need all the data you provided at first instance, we will delete the remaining data. For most of the purposes and legal obligations we have stated a retention period of six years although this might vary depending on the agreements we have in place with you, or other legal obligations. A detailed retention schedule is available upon request.
As a data subject, in certain circumstances, you have the following rights under the Data Protection Laws:
These rights are explained in more detail below. If you want to exercise any of your rights, please contact us (please see 'How to contact us'.
We will respond to any rights that you exercise within a month of receiving your request, unless the request is particularly complex, in which case we will respond within three months.
Please be aware that there are exceptions and exemptions that apply to some of the rights which we will apply in accordance with the Data Protection Laws.
You may object to us processing your personal data where we rely on a legitimate interest as our legal grounds for processing.
If you object to us processing your personal data, we must demonstrate compelling grounds for continuing to do so. We believe we have demonstrated compelling grounds in the section headed 'How is processing your personal data lawful'.
You may ask to see what personal data we hold about you and be provided with:
To help us find the information easily, please provide us as much information as possible about the type of information you would like to see.
You can require us to correct any mistakes in your information which we hold. If you would like to do this, please let us know what information is incorrect and what it should be replaced with.
You may request that we stop processing your personal data temporarily if:
You may ask for an electronic copy of your personal data which we hold electronically and which we process when we have entered into a contract with you. You can also ask us to provide this directly to another party.
You may withdraw any consent that you have given us to process your personal data at any time. This means that we will not be able to carry out any processing which required use of that personal data.
You can ask us to erase your personal data where:
You have the right to have any decision that has been made by automated means and which has a significant effect on you reviewed by a member of staff and we will consider any objections you have to the decision that was reached.
You may be entitled to compensation for damage caused by contravention of the Data Protection Laws.
It is important that you ensure you have read this Privacy Notice – and if you do not think that we have processed your data in accordance with this notice – you should let us know as soon as possible.
You may also complain to the Information Commissioner’s Office, which regulates and supervises the use of personal data in the UK, via their helpline on 0303 123 1113.