We collect and process some of your personal information to allow us to operate as a business, provide you with our services and to meet the legal obligations we have as a regulated financial services firm.
As a technology company we also use a number of third parties to carry out certain business functions which may require us to share your information with them.
This policy details the personal information we collect and use, how we look after it, and the circumstances in which we may share it with someone else. It also sets out your rights around how we handle your information and lets you know how to contact us if you have any concerns.
What information we collect
To provide you with our services we collect and use the following information about you at various points during your interactions with us.
When you use our mobile application (our “app”):
- Personal information you provide to us when signing up as our customer
- Documents we request in order to verify your identity and carry out anti-money laundering checks
- Details of the bank account you use to fund your account with us
- Transactional information relating to the securities you buy and sell using our app
- Personal ID numbers we are required to provide to regulators as part of our ongoing transaction reporting
- Technical information on your use our app, including your IP address, operating system and device ID
When you contact us:
- Information you give to us when you get in touch, through our app, via email or through social media platforms
- Information you provide to us when applying for a job or to provide us with your services
When you visit our website (ethical.capital) and its sub-domains:
- Technical information on how you use our website including your IP address, device type and approximate location
When a third party we use sends us information:
- Information we may receive about you from third parties we work with, for example an identity verification service
In the exceptional circumstance that we collect, or you provide us with any special category information (information about your physical and mental health, sexual orientation, racial or ethnic profile, political opinions, philosophical beliefs, trade union membership or biometric data) we will treat it with extra care, and only use and store it if we have a legitimate reason to do so.
How we use your informationWe use your information to:
- Provide you with our core services of stockbroking
- Comply with the law and regulations
- To resolve queries or issues
- Improve our product
- Prevent misuse and fraud
- Market new features or services
We take appropriate security measures to prevent unauthorised access, disclosure, modification or erasure of your personal information.
Our lawful bases for using your information
We only process your information where we have a lawful basis for doing so. We process your information if:
- We have a legitimate interest to do so in order to provide our business services to you and to operate and improve our product, for example storing your email address so you can sign into our app.
- There are obligations arising from any contracts between you and us, for example where you have asked us to buy or sell a share for you.
- We have a duty to comply with any legal or regulatory requirements, for example verifying your identity as part of our anti-money laundering controls or making transaction reports to regulators.
- You have provided us with consent to do so.
When we share your information
Your information is shared with employees of Ethical Capital who require it to run your account, resolve any issues or queries, improve our product and services or contact you about features you may be interested in where we have your consent to do so.
Some of your information is processed by third parties we use to provide elements of our service. We conduct due diligence on these third parties, to make sure your information is handled securely and only allow third parties to process your personal information where it is required for them to carry out their function.
Your personal data may be processed by third parties we use for the following services:Core service:
- Trade execution and settlement
- In-app customer support
- Handling payments
- Emailing users
- Usage analytics
- Customer feedback and surveys
- Anti money laundering checks
- Regulatory reporting
- Hosting and backend infrastructure
- Infrastructure monitoring
- Traffic optimization and distribution
As part of our onboarding checks we search your record at credit agencies. This leaves a ‘soft footprint’ on your file which is not visible to lenders and does not impact your credit rating.
We never sell any of your personal information.
Where we store your information
Your information is processed and stored at our operating offices as well as on servers managed by our hosting providers.
In some circumstances your information may be stored somewhere outside of the European Economic Area (EEA). In these situations we have contracts in place to ensure information is protected to the same standards as it is in the EEA. If your information is stored in the US we make sure the organisation is part of the Privacy Shield.
How long we keep your information
We store your information for the duration of time required by the purpose under which we collected the information. Information we collect:
- in relation to our legitimate interests of providing you with our services will be kept for as long as you continue to remain a user of our services.
- for the purposes of performing a contract between you and us is kept until the contract has been completed.
- in relation to our legal and regulatory obligations is retained for the duration set out in the legislation we are subject to, which in most cases is 5-7 years following the end of our business relationship with you.
You have rights under the law and this policy in relation to your information. If you would like to make any request in relation to these rights then please contact us by email. You have the right to:
- request to access the information we hold about you.
- ask us to update any of your information which is inaccurate or incorrect
- ask us to delete, stop processing or limit our use of your information that we hold - if we have a legal obligation to retain this information are unable to delete it until the required retention period has elapsed.
We may send you certain direct marketing communications if it is in our legitimate interests to do so for marketing and business development purposes, or you have provided us with your consent to do so.
You can withdraw this consent by contacting us in app or by email.
How to make a complaint
If you would like to make a complaint then please contact us via email and we will do our best to resolve the issue.
You also have the right to complain about our collection and use of your personal information to the Information Commissioner’s Office (ICO). More information can be found at https://ico.org.uk/make-a-complaint/
Where your data is stored
The data we collect from you may be transferred to and stored somewhere outside the European Economic Area (“EEA”) if we have specific agreements and/or due diligence in place.
In certain circumstances it may also be processed by staff outside the EEA who work for us or a select third party.
Changes to this policy
We continuously review our policies and procedures. We’ll post any changes we make to this policy on this page and let you know about any significant changes via email.