This Privacy Notice sets out how Channel Islands Wealth Management Association (“CIWMA”) will use your personal data: how it is collected, how it is held, and how it is processed. It also explains your rights under the Data Protection (Jersey) Law 2018 (the DP Law) relating to your personal data.
We respect and value the privacy of our members and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the DP Law.
CIWMA is registered under the DP Law as a data controller and data processor. Personal data is data which either by itself, or with other data available, can be used to identify a person.
Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.
CIWMA processes data for the purposes of Association membership & event attendance. This notice relates to the use of personal data provided to CIWMA by our members and related parties. The types of personal data CIWMA collects and uses
CIWMA uses personal data for the reasons set out below and in particular to provide services to our clients. The sources of personal data collected are noted in this Privacy Notice. The personal data CIWMA collects may include:
Under the DP Law, CIWMA must always have a lawful basis for using personal data. We will process personal data, as necessary:
Clients and related parties are free at any time to change their mind and withdraw consent.
We will not share your information without your prior consent.
We will not keep your personal data for any longer than is necessary considering the reason(s) for which it was first collected. Your personal data will therefore be kept for the following periods:
Members and related persons’ rights are as follows (noting that these rights do not apply in all circumstances):
If you want to know what personal data we have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a “Subject Access Request”.
All subject access requests should be made in writing and sent to the registered office address or email address as stated below. There is not normally any charge for a Subject Access Request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.
We will respond to a Subject Access Request as soon as possible and within 30 days of receiving it. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept informed of our progress.
Members and related persons have the right to complain to the Jersey Office of the Information Commissioner (JOIC) at www.jerseyoic.org respectively. JOIC have enforcement powers and can investigate compliance with the DP Law.
We can be contacted at 1st Floor, 9 Castle Street, St Helier, Jersey JE2 3BT or by email at firstname.lastname@example.org if a member or related party has any questions or requires further information.
We may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data held.