Privacy Notice

At GRM Investment Group we are committed to protecting your privacy and ensuring that your personal information is collected and used appropriately, lawfully and transparently.

What personal information we collect

We collect certain personal information about you, this includes your name, address, or phone number and other information. We collect this information about you when you:

• use our website and secure online services
• contact us about products and/or services
• apply for and receive services
• visit our adviser
• register to receive one of our newsletters.

The type of personal information we collect will depend on the purpose for which it is collected and will include:

• your contact details
• information to verify your identity
• family, lifestyle and health information
• financial and bank details
• employment information

We collect personal information directly from you. For example, we ask for personal information at the start of our relationship (eg: when you apply for a service) and in subsequent communications in order to check your identity. This is a legal requirement and is important to help safeguard you and us against potential crime.

Where we provide our services, we collect the personal information where we provide our services to companies we may collect personal information for Directors, Shareholders and Beneficial Owners of the company.

Where it is necessary we collect more sensitive information (such as criminal convictions or detailed health information). If this is the case we will explain what information we require and why it is needed.

We may also collect information about you from other sources such as:

• your adviser
• another agent (if you have one)
• external third parties (eg: to verify your identity)
• from Cookies (Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the website owners. To learn more about information collected through cookies.

We keep your personal information only as long as is necessary for the purpose for which it was collected, or for legal or regulatory reasons. Personal information will be securely disposed of when it is no longer required in accordance with our Personal Data Retention and Disposal Schedule.

How we use your personal information

We process your information for the following purposes.

To perform our contract with you and to support and maintain that relationship. This includes the following:

• assessing and processing an application for our services
• providing our products and/or services to you, including the management of our relationship with you and your adviser, or any other agent (if you have one)
• carrying out transactions you have requested
• monitoring or recording telephone calls with you to resolve any queries or issues
• assessing your application for life and protection policies (using automated decision making tools when necessary)
• record keeping to ensure our products and/or services operate within the law and relevant regulatory requirements
• providing other services (eg: enhanced due diligence, underwriting, reinsurance, data hosting, online services, and payments or reporting of any tax or levy)

To comply with legal and regulatory requirements. These requirements include the following:

• confirming your identity for regulatory purposes
• detecting and preventing fraud, money laundering, terrorist financing, bribery or other malpractice.

For specific business purposes to enable us to provide you with appropriate products and services and a secure experience. Our business purposes include the following:

• verifying your identity for security purposes
• enhancing, modifying and personalising our services for your benefit
• providing communications which we think will be of relevance to you
• customer satisfaction research or statistical analysis
• audit and record keeping purposes
• enhancing the security of our network and information systems
• maintaining effective management systems including internal reporting to our parent company and other members of our corporate group
• customer satisfaction research, statistical analysis and wider market research to capture the views and opinions of our customers

You have the right to object to us processing your personal data for the business purposes listed above.

Who we share your information with and why

We share your information with trusted third parties, who perform tasks for us and help us to provide our products and/or services to you, and with other agencies where required by law, court order or regulation. These include:

• other companies within the GRM Investment Group
• your financial adviser , third party data providers used by your adviser and any other party authorised by you
• third parties who perform tasks for us to help us provide our services to you (these third parties may be based in countries outside the EU)
• a third party to verify your identity, in line with money laundering or other requirements
• organisations, including the police and fraud prevention agencies, to prevent and detect fraud
• regulatory or governmental agencies such as the Financial Conduct Authority
• investment or product providers who ask for that information on your behalf or to continue to provide our services to you
• a prospective buyer (or its advisors), for due diligence purposes, if we are considering a sale of any of our business or assets
• a third party to conduct market research on our behalf, to help us improve and develop the products and services we provide to you and our other customers

How we keep your Information Secure

We are committed to ensuring the confidentiality of the personal information that we hold and we continue to review our security controls and related policies and procedures to ensure that your personal information remains secure.

When we contract with third parties, we require that they have appropriate security, privacy and confidentiality measures in place to ensure that personal information is kept secure.

If we work with third parties in countries outside the EU we ensure these are countries that the European Commission has confirmed have an adequate level of protection for personal information, or the third party receiving the personal data has provided adequate safeguards and agrees to treat your information with the same level of protection as we would.

Your rights

You have the right to ask us:

• for a copy of the personal information we hold about you
• to update or correct your personal information
• to delete your information
• to restrict processing of your personal information where appropriate.

In certain circumstances you also have the right to:

• object to the processing of your personal information
• object to automated decision making and profiling
• data portability

Information about your individual rights, including how to correct, restrict, delete, make changes to your personal information or if you wish to request a copy of the personal information we hold about you please contact us at the below address.Information