Privacy Notice

Why should you read this document?

When we work with you, we will ask for some personal information so we can understand your situation and give advice that is suitable for you. This may include details about your finances and, where relevant, information about your health or your family’s health history.

Our Privacy Notice explains what personal information we collect, how we use it, how we keep it safe, when we may need to share it, and the rights you have over your personal data.

Who are we?

Her Invest is a trading style of Tarran & Co. Financial Planning Ltd and is authorised and regulated by the Financial Conduct Authority (FCA). FCA number is 767888. You can check this by going onto the FCA firm checker at https://www.fca.org.uk/consumers/fca-firm-checker.

Your rights 

You have rights over how we use your personal data. These include the right to object to how we use it, ask to see the information we hold, ask us to correct it, and, in some cases, ask us to delete it or limit how we use it. You can also raise a complaint with us or with the data protection regulator. Contact details are shown below:

• dpo@tarranandco.co.uk
• Write to us at the address shown above.
• Information Commissioner: ico.org.uk/global/contact-us 

If we are unable to deal with your request in the way you have asked, we will explain why at the time.

Please contact us as soon as possible if you become aware that your personal data has been shared or accessed without permission. This allows us to investigate and meet any regulatory obligations we may have.

If you have a complaint about how we have handled your personal data, please contact us using the details above. We will investigate your complaint and let you know the outcome.

If you are still unhappy after receiving our response, you can contact the UK’s data protection regulator, the Information Commissioner’s Office (ICO), through their website at https://ico.org.uk/global/contact-us/. You can also write to them at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

We explain your privacy rights in more detail on the following pages.

What do we mean by “Your Personal Data”?

Your personal data means any information that identifies you or relates to your personal circumstances. This may include:

• Your title, name, date of birth, gender, nationality, marital status, contact details, address, and identification documents required to verify your identity.  
• Details about your employment, including your role, income, bonuses, benefits, overtime, sick pay, and employment history. 
• Information about your finances, such as bank account details, tax information, loans, credit commitments, credit history, sources of income and expenditure, family circumstances, and any dependents. 
• Health and medical information where relevant, including details of your medical history, treatments, prognosis, and any medical reports. Further information about how we process this type of data is provided below. 
• Details of any existing investments, mortgages, financial arrangements, pensions, or insurance policies, together with the associated terms and conditions.

How our firm will deal with Your Personal Data

When we discuss your needs with you, this forms part of the service we provide. To deliver that service and arrange any products you choose to proceed with, we may need to use your personal data for the purposes explained below.

Alternatively, we may use your personal data during our discussions with you, or after our agreement has ended, where we have a legitimate business reason to do so and your rights are not affected. For example, we may respond to enquiries from mortgage lenders, insurance providers, or our Compliance Service Provider, or contact you for feedback on the service you received.

We may occasionally use your personal data for contractual responsibilities where necessary to meet our legal, regulatory, or compliance obligations, including requirements set by the Financial Conduct Authority (FCA). This helps us ensure we continue to provide our services in accordance with applicable laws and regulations.

How we will process certain parts of Your Personal Data

In some circumstances, such as when arranging insurance or ethical investments, we may need to collect sensitive personal information, including details about your health, medical history, or ethnic origin. This information helps us identify suitable products, make enquiries with providers on your behalf, and provide appropriate advice and guidance. If you have parental responsibility for children under the age of 13, we may also hold personal information relating to them, including certain sensitive information where necessary.

Certain insurance applications may require you to provide information about previous or current criminal convictions or offences (together “Criminal Disclosures”). This information may be relevant for underwriting, claims handling, and fraud prevention purposes.

We will always handle sensitive personal information and any criminal offence data with the same care and protection as all other personal information, in line with this Privacy Notice.

To ensure you can access appropriate insurance cover and protection, it may be necessary for this information to be shared between authorised insurance intermediaries, such as our firm, and insurance providers involved in arranging and managing your policy.

How we gather and use personal information

We collect and record your personal data so we can understand your needs and give you the right financial advice. Most of this information comes directly from you during meetings, phone calls, emails, or forms you complete.

We may obtain information about you from trusted third parties, such as credit reference agencies, your employer, or public records like the electoral register. Where appropriate, we may use technology to help verify information about you. We will only do so if we have consent from you, for us, or our nominated processor to access your information in this manner. For electronic ID checks we would not require your consent but will inform you of how such software operates and the purpose for which it is used.

We hold this information as data controllers under the Data Protection Act 2018 and the UK General Data Protection Regulation. We will only share your information in the ways explained in this Privacy Notice, or where a statutory, governmental, or regulatory body requires us to do so for legitimate purposes.

What happens to Your Personal Data when it is disclosed to us?

While handling Your Personal Data, we will:

• Securely store Your Personal Data in our records, including paper files, computer systems, email, and approved cloud-based services. Only authorised members of our team can access this information.
• Submit Your Personal Data to Product and Product providers, in paper form or online via a secure portal, when necessary to process applications, manage your arrangements, or deal with any queries relating to your plans.
• Use Your Personal Data to respond to any queries you may have in relation to any investment/insurance/finance product you may take out and keep you informed of any important updates.

AI is the development of computer systems that can perform tasks, typically requiring human intelligence, often by processing large amounts of data to achieve goals.  To help us work more efficiently and provide a better service to our clients. We may use AI to assist with:

• Recording and transcribing meetings (you can choose not to be recorded)
• Generating meeting notes and summaries
• Drafting correspondence and documentation
• Conducting checks for compliance with internal procedures

We are committed to protecting your privacy and ensuring your personal information is always handled securely. If you have any questions about how we use your information or AI technology, please get in touch and we’ll be happy to help.

Sharing and transferring personal information

From time to time, we may need to share your personal data with trusted third parties so we can provide our services to you.

• Investment providers, mortgage lenders, finance lenders and insurance providers.
• Third parties who we believe will be able to assist us with your enquiry or application, or support your needs as identified. These third parties will include but may not be limited to, our compliance advisers, product specialists, providers of legal services such as estate planners, conveyancing, surveyors and valuers (in each case where we believe this to be required due to your circumstances).

In each case, Your Personal Data will only be shared for the purposes set out in this Customer Privacy Notice, i.e. to progress your investment /finance and/or insurance enquiry and to provide you with our professional services.  

Please note that this sharing of Your Personal Data does not entitle such third parties to send you marketing or promotional messages, it is shared to ensure we can adequately fulfil our responsibilities to you, and as otherwise set out in this Customer Privacy Notice.

We do not envisage that the performance by us of our service will involve Your Personal Data being transferred outside of the United Kingdom.

Collection of data from a third party to support you 

Where we collect identifiable information from a third party, such as a family member or trusted friend, we will only use it to support the services described in this notice. We will not use it for any other reason.

Security and Retention of Your Personal Data

Your privacy is important to us. We will keep your personal data secure and handle it in line with our legal responsibilities. We take reasonable steps to protect your information from being accessed unlawfully or maliciously by anyone who is not authorised to see it.

You can also help protect your privacy when sending information to us. For example, please avoid sending confidential information by unprotected email where possible, use password protection or encryption for email attachments, and use secure postage if you need to send us original documents.

We will keep your personal data electronically or in paper form for at least six years after receiving the advice or service we provide. In some cases, we may need to keep it for longer to meet regulatory requirements.

Your rights in relation to Your Personal Data

You have the right to:

• Request copies of the personal data we hold or control.
• Ask us to explain in more detail how we use your personal data.
• Ask us to correct your personal data, delete it, restrict how we use it, or stop using it. We will explain what we can do when we respond to your request.
• Ask us to send an electronic copy of your personal data to another organisation, if you would like us to.
• Change the basis of any consent you may have provided to enable us to market to you in the future (including withdrawing any consent in its entirety).