Privacy Policy

1. Definitions and Interpretation

In this Notice, the following terms shall have the following meanings:

“Cookie” – a small text file placed on your computer or device by Our Site when you visit certain parts of Our Site and/or when you use certain features of Our Site. Details of the cookies used by Our Site are set out in Section 14.

“Cookie Law” – the Privacy and Electronic Communications Regulations 2003 (“PECR”), as amended, together with applicable UK GDPR requirements relating to cookies and similar technologies.

“Data subject” – an identified or identifiable natural person whose personal data we process.

“Personal data” – any information relating to an identifiable person who can be directly or indirectly identified from that data, as defined in the UK GDPR. This includes information you provide to us, information we collect automatically when you use Our Site, and information we receive from third parties in connection with our services.

“Data controller” – the person or organisation that determines the purposes and means of processing personal data. For the processing described in this Notice, the data controller is Saint Financial Group Limited.

“Data processor” – a person or organisation that processes personal data on behalf of the data controller.

“We/Us/Our” – Saint Financial Group Limited, a company registered in England under number 12280700, whose registered office is at St Osyth Grange, 677 St Johns Road, St Osyth, Essex, CO16 8BJ (“the Company”).

2. Information About Us

Saint Financial Group Limited is registered in England under number 12280700. Our registered office is at St Osyth Grange, 677 St Johns Road, St Osyth, Essex, CO16 8BJ (“the Company”).

VAT number: 342209234

Data protection contact: Dylan O’Rourke

Email address: hello@saintfinancialgroup.co.uk

Telephone number: 01255 474 005

Postal address: St Osyth Grange, 677 St Johns Road, St Osyth, Essex, CO16 8BJ.

3. What Does This Notice Cover?

This Privacy Notice explains how we collect, use, store, and share personal data when you visit Our Site, enquire about our services, become a client, or otherwise interact with us. It also explains your rights under UK data protection law.

Where we provide professional services to your business and process personal data about your staff or clients on your instructions, we may act as a data processor. In those cases, our processing is governed by our contract with you and this Notice applies to the extent we act as data controller for your own personal data.

4. What is Personal Data?

Personal data is defined by the UK GDPR as any information relating to an identifiable person who can be directly or indirectly identified, in particular by reference to an identifier such as a name, identification number, location data, or online identifier.

In practical terms, personal data includes obvious information such as your name and contact details, but it also includes less obvious information such as IP addresses, device identifiers, and online usage data where these can identify you.

The personal data we process is described in Section 6.

5. What Are My Rights?

Under the UK GDPR, you have the following rights, which we will always work to uphold:

The right to be informed about our collection and use of your personal data. This Privacy Notice should tell you everything you need to know, but you can always contact us to find out more or to ask any questions using the details in Section 13.

The right to access the personal data we hold about you. Section 11 will tell you how to do this.

The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete. Please contact us using the details in Section 13 to find out more.

The right to erasure (to be forgotten), i.e. the right to ask us to delete or otherwise dispose of any of your personal data that we hold, subject to legal and regulatory retention requirements.

The right to restrict (i.e. prevent) the processing of your personal data.

The right to object to us using your personal data for a particular purpose or purposes, including direct marketing.

The right to data portability. This means that you can ask us for a copy of your personal data held by us to re-use with another service or business in many cases.

The right to withdraw consent at any time where we rely on consent, without affecting the lawfulness of processing before withdrawal.

The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects concerning you.

Section 7 explains more about how we use your personal data. For more information about exercising your rights, please contact us using the details in Section 13.

Further information about your rights can also be obtained from the Information Commissioner's Office (ICO) or your local Citizens Advice Bureau.

If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with the ICO at ico.org.uk/make-a-complaint.

6. What Personal Data Do You Collect?

Your Personal Data

We may collect some or all of the following personal data (this may vary according to your relationship with us):

- Name
- Address
- Email address
- Telephone number
- Business name
- Job title
- Profession
- Information about your preferences and interests
- Size of your business in terms of number of staff, annual revenue (as a banding), and number of clients (as a banding)
- Business goals and challenges
- Messages and enquiries you submit via forms, live chat, or booking widgets
- Marketing and campaign attribution data (such as UTM parameters)
- We record telephone calls for training, quality assurance, and dispute resolution, where permitted by law and with appropriate notice.

Data collected automatically when you use Our Site

When you visit Our Site, we may automatically collect technical and usage information, including:

• IP address and approximate location derived from IP
• Browser type, version, and language settings
• Device type, operating system, and screen resolution
• Pages visited, time spent, and referral source (including UTM parameters)
• Cookie and consent preference identifiers
• Form submission metadata (e.g. which form was completed and when)

Non-essential tracking technologies and third-party tools on Our Site are blocked until you provide cookie consent. See Section 14 for details.

We process personal data for the following purposes:

To provide and manage our products and services.

To respond to enquiries submitted via Our Site, email, telephone, live chat, or booking widgets.

To fulfil our legal and regulatory obligations (for example, anti-money laundering requirements).

To comply with professional obligations applicable to our business.

To manage billing, payments, and fee disputes.

To investigate and defend complaints, disciplinary proceedings, or legal claims.

To send marketing communications where you have opted in, or where we may rely on another lawful basis permitted by law.

To improve Our Site, understand how it is used, and measure the effectiveness of our marketing.

Our lawful bases for processing include:

Consent – for example, non-essential cookies and marketing communications where required.

Contract – where processing is necessary to perform our contract with you or to take steps at your request before entering into a contract.

Legal obligation – where processing is necessary to comply with laws to which we are subject.

Legitimate interests – where processing is necessary for our legitimate business interests and your rights do not override those interests. This may include website security, fraud prevention, responding to enquiries, and limited business-to-business marketing to existing contacts. You may object to processing based on legitimate interests at any time (see Section 5).

Where you are a client, we may need certain personal data to provide our services. If you do not provide information we reasonably require, we may be unable to provide some or all of our services to you.

Our Site is intended for business users and is not directed at children under 18. We do not knowingly collect personal data from children.

7. How Do You Use My Personal Data?

Under the UK GDPR, we must always have a lawful basis for using personal data. Your personal data may be used for the following purposes:

Supplying our products and services to you, including managing your account and relationship with us.

Personalising and tailoring our products and services for you.

Communicating with you, including responding to enquiries and service-related messages.

Sending information by email, text message, or post where you have opted in. You may unsubscribe at any time using the link in our emails or by contacting us.

With your consent and/or where permitted by law, sending marketing about our products, services, events, webinars, and industry updates. We will not send unlawful spam and you may opt out at any time.

Improving Our Site, analysing usage, and measuring advertising performance (where you have consented to the relevant cookies or tools).

Recording telephone calls for training, quality assurance, and dispute resolution, where permitted by law and/or with appropriate notice.

Automated processing and profiling

We may use automated tools to help us understand engagement with our communications and website, for example to determine which content is most relevant or how often to contact you. These activities support our marketing and client communications and do not produce legal or similarly significant effects about you. You may contact us at any time to object, request human review, or ask questions about how this processing affects you (see Section 13).

8. How Long Will You Keep My Personal Data?

We keep personal data only for as long as necessary for the purpose for which it was collected, and in accordance with our legal and regulatory obligations.

Marketing contacts – if you are not a client, we retain marketing data until you unsubscribe, opt out, or have not engaged with our content for 6 months.

Active clients – we retain personal data for the duration of our relationship and for a reasonable period afterwards to manage queries, renewals, and legitimate business needs.

Former clients – after our relationship ends, we retain personal data only as long as needed for the purposes above, unless a longer period is required by law.

Legal, tax, and regulatory records – certain records (for example accounting, tax, and anti-money laundering records) may be retained for up to 6 years after the end of the relevant transaction or relationship, or longer where required by law or to establish, exercise, or defend legal claims.

Website and enquiry data – enquiry and form submission data is retained for as long as needed to respond, follow up, and manage prospective client relationships, then deleted or anonymised unless you become a client or we are required to retain it.

Cookie and consent records – stored for the periods shown in Section 14.

Call recordings – retained only for as long as necessary for the purposes described in Section 7, subject to any applicable legal or regulatory requirements.

9. How and Where Do You Store or Transfer My Personal Data?

We store the majority of personal data relating to our clients and business operations in the United Kingdom.

Some of our sub-processors (listed in Section 10) are located outside the UK, including in the United States and other countries that may not provide the same level of data protection as UK law. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, which may include:

- The UK International Data Transfer Agreement (IDTA)
- UK Addendum to the EU Standard Contractual Clauses (SCCs)
- EU Standard Contractual Clauses where applicable
- An adequacy regulation where the destination country is recognised as providing adequate protection
- Binding contractual commitments from the recipient to protect your personal data to UK GDPR standards

You may contact us using the details in Section 13 to request further information about the safeguards we use for international transfers.

10. Do You Share My Personal Data?

We may share your personal data with:

- Sub-processors and service providers who process data on our behalf, as listed below
- Payment providers used to process transactions, for example Stripe
- Third parties where you have a relationship with that third party and you have consented to us sharing information (for example social media platforms)
- Third parties for marketing purposes where you have opted in (for example partners whose products or services we believe may interest you)
- Any third party in the context of actual or threatened legal proceedings, where we are permitted to do so (for example in response to a court order)
- Any third party where necessary to meet our legal and regulatory obligations, including statutory reporting or the detection or prevention of unlawful acts

If the law allows or requires us to do so, we may share your personal data with:
- The police and law enforcement agencies
- Courts and tribunals
- The Information Commissioner’s Office (ICO)

We require all sub-processors to process personal data only on our documented instructions, implement appropriate security measures, and assist us in meeting our UK GDPR obligations. We maintain a record of sub-processors and review them regularly. Where we make material changes to our sub-processors, we will update this Notice accordingly.

If you ask us not to share your personal data with certain third parties, we may be unable to provide some services to you.

Website sub-processors and tools

The following third-party tools are used on Our Site. Non-essential tools are loaded only where you have given the appropriate cookie consent. Essential hosting, security, and typography services may process limited technical data without consent where permitted by law.

Business sub-processors

The following sub-processors support our wider business operations and may also receive personal data collected via Our Site where relevant (for example, when you make a payment, become a client, or submit an enquiry). Stripe, listed below, also processes payments made through Our Site:

11. How Can I Access My Personal Data?

If you want to know what personal data we hold about you, you can ask us for details and for a copy of it where we hold any. This is known as a “subject access request”.

To help us respond quickly, please provide enough information for us to verify your identity and locate the relevant records. For example, your full name, email address, telephone number, and the type of information you are requesting.

Where you are an existing or former client, we may ask for additional verification details (such as your business name, client reference, or other information we hold on file) before releasing sensitive information.

All subject access requests should be made in writing and sent to the contact details in Section 13.

We do not normally charge for a subject access request. We will respond within one month of receiving it. In complex cases, we may extend this by up to a further two months and will inform you if this is necessary.

You may ask someone else to request information on your behalf (for example a friend, relative, or solicitor). We must have your authority to respond to a request made on your behalf.

Where you are a data controller and we act for you as a data processor (for example by processing payroll), we will assist you with subject access requests on the same basis as set out above.

12. How Can I Have My Data Erased?

If you wish to have your personal data erased, please contact us using the details in Section 13. We will follow our procedures to delete your data from our systems where we are not required or permitted to retain it.

In certain circumstances, we may refuse an erasure request where we have a lawful reason to keep the data (for example legal, tax, or regulatory obligations, or to establish, exercise, or defend legal claims). If we refuse your request, we will explain why. Further information is available on the ICO website.

13. How Do I Contact You?

To contact us about anything relating to your personal data or this Privacy Notice, including to make a subject access request, please use the following details (for the attention of Dylan O’Rourke):

Email address: hello@saintfinancialgroup.co.uk

Telephone number: 01255 474 005

Postal address: St Osyth Grange, 677 St Johns Road, St Osyth, Essex, CO16 8BJ.

14. Our Use of Cookies

Our Site uses cookies and similar technologies. First-party cookies are set by us. Third-party cookies are set by providers such as analytics, advertising, and chat tools. Non-essential third-party cookies are blocked until you consent.

All cookies used on Our Site are handled in accordance with PECR, as amended, and the UK GDPR.

Legal bases for cookies:
- Strictly necessary cookies are used on the basis of legitimate interests in operating a secure, functional website.
- Analytics, marketing, and functional cookies are used only where you have given your consent. You may withdraw consent at any time via the cookie settings control or the buttons below.

Before non-essential cookies are placed on your device, you will be shown a banner requesting your consent. You may accept all cookies, reject non-essential cookies, or manage your preferences by category. Rejecting non-essential cookies is as easy as accepting them.

Certain cookies are strictly necessary for Our Site to function. We do not ask for consent before placing these cookies, but you may still block them in your browser settings. If you do, some parts of Our Site may not work properly.

You can also control cookies through your browser settings. Most browsers allow you to block or delete cookies. Deleting cookies may remove saved preferences and require you to set your choices again.

We recommend keeping your browser and operating system up to date. If you need help adjusting cookie settings, refer to your browser’s help documentation.

Cookie inventory

You can update your cookie choices at any time using the buttons below, or via the “Cookie settings” tab on the left of your screen. When you withdraw consent, we stop loading non-essential cookies and remove existing tracking cookies where possible.

15. What if There’s a Data Breach?

We work hard to protect personal data. If a personal data breach occurs, we will:

Report it immediately to our data protection contact.

Notify the Information Commissioner’s Office without undue delay and, where required, within 72 hours of becoming aware of the breach, if the breach is likely to result in a risk to individuals’ rights and freedoms.

Notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

Where we notify individuals or the ICO, our notification will include, as applicable:
- The nature of the breach
- The categories and approximate number of individuals and records concerned
- The likely consequences of the breach
- The measures taken or proposed to address the breach and mitigate harm
- Contact details for obtaining further information

16. Changes to this Privacy Notice

We may change this Privacy Notice from time to time, for example if the law changes, if we add or remove sub-processors or website tools, or if our processing activities change. The current version will always be published on this page. Where changes materially affect how we process your personal data, we will notify you where required by law.

For more information on your rights under UK GDPR, please visit the ICO website.

17. Content on This Site

Content within this site is either held by Saint Financial Group©, has been licensed or is being used under fair use. No copyright infringement has been intended across the site, if you have any questions get in touch with us: Hello@Saintfinancialgroup.co.uk
Content is also being supplied from pexels, unsplash, Storysetand freepik. Articles within our blog are all being used under the Fair Use guidelines of Section 107 of the Copyright Act. All rights are reserved to the copyright owners.