Beyond Wealth Financial Management (BWFM) Privacy notice
This privacy notice tells you what to expect us to do with your personal information.
Contact details
Post
Brookdale Centre, Manchester Road, Knutsford, Cheshire, WA16 0SR.
Telephone
01565 658840
This website is not intended for children, and we do not knowingly collect data relating to children.
Joint controllers
We have a joint controller relationship with Lyncombe Consultants Limited. We process your personal information with that joint controller for the following reason: The joint controller is our regulatory principal firm and carries the regulatory risk for advice given.
We also have a joint controller relationship with Adviser Services Holdings Limited. We process your personal information with that joint controller for the following reason: The joint controller is our parent company and has overall ownership of our systems.
Our data protection manager is responsible for overseeing questions in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights outlined below, please contact the data protection manager using the information set out above.
What information we collect, use, and reason for collecting the information
We collect or use the following information to provide and improve products and services for clients:
-
Names and contact details.
-
Addresses.
-
Gender.
-
Occupation.
-
Date of birth.
-
Marital status.
-
Identity verification document(s) (such as a copy of your passport).
-
Third party information (such as family members or other relevant parties). Where this happens, we will provide them with a privacy notice or ask you to pass it to them.
-
Payment details (including bank information for transfers and direct debits).
-
Financial data (including income and expenditure).
-
Transaction data (including details about payments to and from you and details of products and services you have purchased).
-
Employment details (including salary, role title and length of service).
-
Credit history and credit reference information.
-
Health information (such as medical records or health conditions).
-
Information relating to compliments or complaints.
-
Audio recordings when you call us or we call you.
-
Records of meetings and advice given.
-
Account access information.
-
Information on how you use our website.
-
Information you provide if you voluntarily complete a client survey or provide us with feedback.
-
Usage data, including information about how you interact with and use our website and services.
-
Technical data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website.
We also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals' Usage Data to calculate the percentage of users accessing a specific website feature to analyse general trends in how users are interacting with our website to help improve the website and our service offering.
We collect or use the following personal information for the operation of client or customer accounts:
-
Names and contact details.
-
Addresses.
-
Purchase or service history.
-
Account information, including registration details.
-
Marketing preferences.
We also collect or use the following information for the operation of client or customer accounts, so that we can provide you with accurate advice:
-
Health information.
We collect or use the following personal information for the prevention, detection, investigation or prosecution of crimes:
-
Names and contact information.
-
Client accounts and records.
-
Financial information e.g. for fraud prevention or detection.
We may collect or use the following personal information for information updates or marketing purposes:
-
Names and contact details.
-
Addresses.
-
Marketing preferences, including your preferences in receiving marketing from us and our third parties and your communication preferences
-
Advice history.
We collect or use the following personal information to comply with legal requirements:
-
Name.
-
Contact information.
-
Identification documents.
-
Client account information
-
Any other personal information required to comply with legal obligations.
We collect or use the following personal information for dealing with queries, complaints or claims:
-
Names and contact details.
-
Address.
-
Account information.
-
Advice history.
-
Call recordings.
-
Client accounts and records.
-
Financial transaction information.
-
Correspondence.
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK General Data Protection Regulation (GDPR). You can find out more about lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
-
Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.
-
Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here.
-
Your right to erasure - You have the right to ask us to delete your personal information. You can read more about this right here.
-
Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. You can read more about this right here.
-
Your right to object to processing - You have the right to object to the processing of your personal data. You can read more about this right here.
-
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.
-
Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here.
If you make a request, we must respond to you without undue delay and in any event within one month, although this time period can be extended in some situations.
To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.
No fee usually required
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
Information we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Our lawful bases for the collection and use of your data
Our lawful bases for collecting or using personal information to provide and improve products and services for clients are:
-
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All your data protection rights may apply except the right to object.
-
Legal obligation – we have to collect or use your information so we can comply with the law and/or regulatory requirements. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
-
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All your data protection rights may apply, except the right to portability. Our legitimate interests are:
-
To be able to provide you with comprehensive financial advice, which may include sending you details of financial products you have not previously enquired about.
-
Our lawful bases for collecting or using personal information for the operation of client or customer accounts are:
-
Consent - we have permission from you after we gave you all the relevant information. All your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
-
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
-
Legal obligation – we have to collect or use your information so we can comply with the law and/or regulatory obligations. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
-
Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All your data protection rights may apply, except the right to portability. Our legitimate interests are:
-
To be able to provide you with comprehensive financial advice, which may include sending you details of financial products you have not previously enquired about.
-
Our lawful bases for collecting or using personal information for the prevention, detection, investigation or prosecution of crimes are:
-
Legal obligation – we have to collect or use your information so we can comply with the law and/or regulatory obligations. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Our lawful bases for collecting or using personal information for information updates or marketing purposes are:
-
Consent - we have permission from you after we gave you all the relevant information. All your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
-
Legal obligation – we have to collect or use your information so we can comply with the law and/or regulatory obligations. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Our lawful bases for collecting or using personal information to comply with legal requirements:
-
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
-
Legal obligation – we have to collect or use your information so we can comply with the law and/or regulatory obligations. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:
-
Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
-
Legal obligation – we have to collect or use your information so we can comply with the law and/or regulatory obligations. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
Direct marketing
You will receive marketing communications from us if you have requested information from us or used services from us and you have not opted out of receiving the marketing.
We may also analyse your Identity, Contact, Technical, Usage and Profile Data to form a view which services and offers may be of interest to you so that we can then send you relevant marketing communications.
Third-party marketing
We will get your express consent before we share your personal data with any third party for their own direct marketing purposes.
Opting out of marketing
You can ask us to stop sending you marketing communications at any time through the website by checking or unchecking relevant boxes to adjust your marketing preferences.
If you opt out of receiving marketing communications, you will still receive BWFM service-related communications that are essential for administrative or client /adviser service purposes, for example relating to order confirmations for BWFM services, reminders, updates to our terms and conditions, checking that your contact details are correct.
Cookies
Automated technologies or interactions. As you interact with our website, we will automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please see our cookie policy for further details.
-
Technical Data is collected from analytics providers, such as Google, based outside the UK.
For more information about the cookies, we use and how to change your cookie preferences, please see our cookie policy here.
Where we get personal information from
-
Directly from you.
-
Suppliers and service providers, such as companies that provide electronic identification services.
How long we keep information
During our relationship with you, and after our relationship ends, we will retain personal data which is necessary to provide services to you. We will take all reasonable steps to keep your personal data up to date throughout our relationship.
We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally:
-
Five years for investment business.
-
Three years for mortgage business.
-
Indefinitely for pension transfers and opt-out business.
-
Three years for insurance business.
These are minimum periods, during which we have a legal obligation to retain your records.
We reserve the right to retain data for longer where we believe it's in our legitimate interests to do so and it is not damaging to you.
When determining the appropriate retention period, we consider the risks of the processing, our contractual, legal and regulatory obligations, internal retention policies and our legitimate business interests as described in this privacy notice.
Who we share information with
Data processors
To deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, product and platform providers that we use to arrange financial products for you, cloud storage providers, email service providers and the provider of our back-office client data system.
Where third parties are involved in processing your data, we have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they will only act in accordance with our written instructions.
Where it is necessary for your personal data to be forwarded to a third party, we will always use appropriate security measures to protect your personal data in transit and require the third party to be subject to stringent security arrangements to protect your personal data. This includes transfer of data by secure portals and password protected documents.
To fulfil our obligations in respect of prevention of money-laundering and other financial crime, we may send your details to third party agencies for identity verification purposes.
International transfers
For the provision of our services, we may need to utilise certain IT tools and resources, owned and managed by organisations based in other countries, to transfer Personal Data outside of the country we provide you with our services. We will always ensure that this is done in compliance with the relevant laws and regulations.
We will ensure that any transfer of Personal Data outside of any jurisdiction is undertaken using legally compliant transfer mechanisms and in accordance with relevant laws.
We will take reasonable steps to ensure all personal data is handled securely in accordance with this privacy notice and data protection laws and regulations.
We monitor and endeavour to protect against security breaches of personal data that we process. As such we adopt high standard of data protection procedures and utilize security features to prevent unauthorized access to personal data that we process.
Report to us immediately, using the contact details above, with information of incidents that you believe is a potential or actual security incident affecting the personal data that we process.
Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Others we share personal information with
-
Other financial or fraud investigation authorities
-
Professional or legal advisers
-
Regulatory authorities
-
External auditors
-
Organisations we’re legally obliged to share personal information with
-
Suppliers and service providers
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we have used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO Website: https://www.ico.org.uk/make-a-complaint
Data protection complaints may also be submitted to our company by email, post, or telephone using dataprivacy@adviserservices.co.uk, by telephone on 01565 658840, or by post at Brookdale Centre, Manchester Road, Knutsford, WA16 0SR.
We will aim to respond within 14 days of receipt and ensure we take appropriate steps to address the complaint, including making necessary enquiries, reviewing the relevant information, and keeping the complainant informed of our progress. The outcome will be communicated using the complainant’s preferred method of contact.
For any questions or further information, please contact us using the information above.
Changes to this Privacy Notice
We keep our privacy policy under regular review.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us, for example a new address or email address.
Third party web links
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
Last updated
03 March 2026

