Privacy Notice

Last updated 25 February 2021

1. Who are we?

This privacy notice is issued by intelliflo Limited (“intelliflo”, “we”, “our” or “us”). Our registered office is at Wellington House, 60-68 Wimbledon Hill Road, SW19 7PA.

intelliflo is a technology company that provides business management solutions to financial advisors and institutions through our cloud-based platform and services. You can find more information about our solutions and services on our website.

We collect and use data about individuals, and we do so as a controller of that data. This means we determine why and how we collect and use that data e.g. to provide our services or for other reasons, as described in this privacy notice.

We have appointed a data protection officer to oversee our handling of the data we collected. If you have any questions about how we collect or use that data, you may contact our data protection officer by emailing us at dataprotection@intelliflo.com.

2. What is the purpose of this privacy notice?

When we provide our services or otherwise interact with individuals, we collect information about them which constitutes personal data under applicable laws. Personal data means any information about an identified or identifiable natural person. This privacy notice explains how we collect, use, share and protect your personal data. Please read this privacy notice carefully to understand what we do with your personal data. We may change this privacy notice from time to time and then we will make the updated privacy notice available on our website. The date at the bottom of this page indicates when this privacy notice was last updated. In certain circumstances, we may provide supplemental privacy notices which should be read together with this privacy notice.

3. When does this privacy notice not apply?

Information for our customer’s clients

If you access our services as a client of our customer (e.g. your financial advisor), this privacy notice does not apply, and your financial advisor’s privacy notice explains how your personal information is used. We will process your personal data only as directed or permitted by our customer. Please contact your financial advisor to obtain a copy of their privacy notice.

Links to other websites

This website may contain links to other websites. We are not responsible for the privacy practices or the content of such websites. We encourage you to read the privacy notice of such websites to understand how your personal information that is collected on that site is used and protected.

4. Whose personal information do we collect?

We collect and process personal data about individuals (data subjects) who may be:

  • A user of our services (e.g. an employee of our customers)
  • A representative of our former, current or prospective customers, partners, or vendors
  • Data subjects who work in or around the UK financial advice sector
  • A visitor to our website
  • A visitor to our premises or facilities
  • Data subjects who are staff of intelliflo’s suppliers or intelliflo’s app store developers
  • Data subjects who have registered for intelliflo's annual customer conferences Any other individual (outside our organisation) with whom we interact (“you”).

5. What personal information do we collect about you, and how?

We may collect and process your name, information about the company you work for, your job title and role, your business contact details (email, mobile number), information about your business relationship with us, your regulatory registration number (if any), information about your use of our services or websites, online identifiers such as social media details (e.g. your Twitter handle) and any other information that we ask you to provide or you choose to share with us.

We may collect and process personal information about you in the following ways:

Information that you give us:

  • By filling in forms on our website e.g. when you submit your personal details in our “Get In Touch” form to ask us to send you information about us, our products and services, or to respond to your requests and questions;
  • By providing your information when using our services; or
  • By interacting with us by phone, email or by other means.

Information that our services, systems and websites may collect about you:

  • Information that allows us to understand how you do, or did, use our services e.g. from log information or database entries that are, or were, triggered by your engagement with our services;
  • If you visit our websites, we may also collect certain information about you and your use of our website by using cookies and similar technologies e.g. IP addresses, domain names, the web browser and operating system used to access our website, your location and browsing history, including the pages visited, the time spent on each page, the time and date of each visit. This information is used to measure the use of our site, improve its content and personalize your online experience, but it would typically not identify you without combining this information with other information we may have about you. Please see oue Cookie Policy for more information about how and why we use cookies and similar technologies, and how you can change your cookie settings, and please note our site does not respond to “Do Not Track” requests;
  • If you contact us (e.g. via email or phone), we may log your correspondence with us; and
  • If you visit our facilities or premises, your visit may be recorded by our CCTV systems for security reasons.

Information about you that we may collect from other sources:

  • From a colleague of yours, or the organization you work for or represent;
  • from publicly available profiles, registers and public and private databases;
  • From our partners e.g. application providers who may integrate their services with our solution;
  • From other third parties who run industry events where we have been present, and you have registered to attend;
  • We may validate the quality of the data we hold, by leveraging third-party services such as email verification tools or tools that allow us to understand what social media systems you may use; and
  • In some circumstances, from authorities and governmental agencies.

6. What are the consequences if you fail to provide us with the requested personal data?

If we ask you to provide us with your personal data to comply with a legal requirement, or to allow us to enter into or perform a contract with you, we will advise you whether you are obliged to provide the personal data as well as of the possible consequences if you fail to do so.

7. How do we use your personal information?

This section of this privacy notice explains for what purposes we use your personal data and on which legal bases we rely, to ensure that we process your personal data lawfully.

The legal bases for our processing are as follows:

  • Our processing of your personal data is necessary to perform a contract to which you are a party, or in order to take steps at your request prior to entering into a contract;
  • Our processing of your personal data is necessary to comply with a legal (or regulatory) obligation we are subject to;
  • Our processing of your personal data is necessary for the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data; and
  • In some circumstances and subject to applicable laws, your consent, however we will make this clear to you at the time of collection of your personal data, and you will have the right to withdraw your consent at any time.

Purpose

Legal Basis

Perform and administer our agreement with you or your organization, and maintain the relationship or otherwise interact with you for day-to-day business purposes e.g. to provide you with support for the service;

  • Performance of a contract;
  • Compliance with a legal obligation;
  • Legitimate interests;

Provide you with updates and training to help you get the best out of our services;

  • Performance of a contract;
  • Legitimate interests;

Respond to any questions or queries you may have for us;

  • Performance of a contract;
  • Legitimate interests;

Better understand your use of our services and the financial advice sector to allow us to develop products and services that best serve our customers and the market;

  • Performance of a contract;
  • Legitimate interests;

Sending you newsletters or other information about us, our or our affiliates’ products and services and the financial advice sector;

  • Legitimate interests;

Log and monitor calls and electronic communications for record-keeping, security, quality, staff training and other business purposes;

  • Performance of a contract;
  • Legitimate interests;

Manage our and our affiliates’ business operations, and for other internal administrative and other business purposes, including to promote, market, distribute and provide our and our affiliates’ products and services to you or your organization;

  • Legitimate interests;

Inform you about our or our affiliates’ products and services, conferences, events, publications, or anything else that you have requested or we think may be of interest to you or your organization, and subject to applicable laws, this information may be provided to you by mail, phone, email, text message, social media or in the form of other digital advertisement and where you receive marketing via email or text message from us, we will tell you in that message how to unsubscribe;

  • Legitimate interests;
  • Consent (in some circumstances);

Conduct business analysis and market research relevant to our or our affiliates’ business;

  • Legitimate interests;

Test, develop and improve our and our affiliates’ products, services and IT-infrastructure, including our websites or systems;

  • Legitimate interests;

Ensure network and information security, and investigate, detect and prevent fraud and other crime;

  • Performance of a contract;
  • Compliance with a legal obligation;
  • Legitimate interests;

Protect our and our affiliates’ interests, including establishing, exercising and defending legal rights and claims;

  • Compliance with a legal obligation;
  • Legitimate interests;

In connection with corporate transactions or restructurings;

  • Legitimate interests;

In some circumstances, to comply with our legal obligations and requests from authorities.

  • Compliance with a legal obligation;
  • Legitimate interests;

If you are a user of the intelliflo developer solution we will be processing your personal data in order to manage your account(s) registered on our applications. We will also process your data in order to contact you, in relation to intelliflo's developer focused products, for important notifications, feature releases and promotions.

  • Performance of a contract;
  • Legitimate interests;

Any information collected about you from our website, your use of our services or otherwise, can be associated with other identifying information we have about you e.g. from other sources, and we may derive inferences based on that information.

We may aggregate and/or de-identify information about your use of our website and services for our business purposes e.g. testing, product development and improvement activities, or to create business intelligence reports or statistical information about the use of our services.

8. Who do we share your personal information with?

We may disclose your personal information, for the purposes set out in this privacy notice, to

  • A colleague of yours, or other staff within the organization you work for or represent;
  • Our affiliates, our and their vendors, information technology service providers, data analysis and web hosting companies or other third parties who support us or them e.g. in providing our services to you, conducting marketing and CRM activities, and in managing business operations;
  • Our partners (e.g. application providers or developers) who integrate their services with our platform;
  • Our agents, distributors, auditors and consultants; and
  • In some circumstances, the police, courts, governmental agencies and authorities, where we are legally obliged to do so or in our reasonable opinion such disclosure is necessary to comply with laws or legal processes, support an investigation or to protect our rights and interests.

We may also disclose your personal data in connection with any proposed purchase, merger or acquisition of any part of our or our related bodies corporate’s business e.g. to a potential buyer and their professional advisers.

From time to time, we may share your personal information with the following third parties for the purposes set out above:

  • FullContact - This allows us to enrich the social media details of data subjects who may have an interest in our products
  • Cloudingo - This allows us to identify duplicates in our data
  • Absorb - This is our learning management system
  • Schedule Once - This allows us to book meetings, it will allow access to diaries and contact details
  • HubSpot - We use this as a CRM to build relationships with clients and conduct marketing activities such as sending emails
  • Marketo - We use this as a CRM to build relationships with clients and conduct marketing activities such as sending emails
  • Sendgrid - We use this to send emails from our system when necessary
  • Salesforce - We use this as a CRM (Customer Relationship Management) system which allows us to manage relationships with clients and conduct marketing activities
  • DocuSign - We use this to generate contracts and allow electronic signing of said contracts
  • Congamerge - We use this to generate contracts
  • Cirrus Insight - We use this to integrate Outlook with Salesforce
  • Jitterbit - We use this to connect our systems together
  • Go Cardless - We use this to process payments
  • Natterbox - We use this as one of our telephone systems
  • LogMeInInc - We use this so that we can use GoToWebinar and GoToMeeting
  • Microsoft Office 365 - We use this for sending and receiving emails
  • Vonage - If you make telephone calls to intelliflo, or someone calls you from intelliflo, details about your phone call will be processed by Vonage.
  • Zoom - If you join a call or demo with someone at intelliflo, your details will be processed by Zoom.

If you would like further information regarding the disclosures of your personal information, please see the "Contact us" section below for our contact details.

9. How do we protect your personal information?

To seek to protect the security of your personal data, we implement appropriate technical and organisational security measures which include physical and technical security safeguards and a governance model that ensures that adequate policies, procedures and controls are in place within our organisation.

intelliflo is an ISO27001 certified firm, which means that we have Information Security Management Systems in place, a key control within that framework is our management and risk assessment of suppliers we use. All suppliers that may process your data are subject to rigorous review as part of our ISO27001 supplier management processes.

If you are a user of our services, you are responsible for maintaining the secrecy of your user credentials. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please immediately notify us.

10. How do we protect your personal information when sending it abroad?

Your personal data may be transferred to countries outside the UK or the European Economic Area, for example, to the United States. Where the level of protection of personal data in those countries has not been deemed adequate by the European Commission (or e.g. by relevant bodies or applicable laws in the UK), we put in place standard data protection clauses (adopted by the European Commission) or third parties engaged by us may rely on other transfer mechanisms (e.g. binding corporate rules) to provide appropriate safeguards to protect your personal data in accordance with applicable data protection laws.

You can find a list of countries deemed by the European Commission as providing an adequate level of protection at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en.

You can obtain a copy of the standard data protection clauses at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

If you would like further information regarding our data transfers and the steps we take to safeguard your personal data, please contact us using the details set out in the 'contact us' section.

11. How long do we retain your personal information for?

We may retain your personal data as long as it remains necessary in relation to the purposes we collected the information for. When determining the appropriate retention period, we consider the risks of the processing, our contractual, legal and regulatory obligations, internal data retention policies and our legitimate business interests as described in this privacy notice.

For example, we will process your personal data for 2 years after your firm ceases to do business with intelliflo, or your employer deletes your account, if your data is not on the FCA register. If your data is on the FCA register, we will process your data for 2 years after your data ceases to be on the FCA register. After this point we will either anonymise or delete the data dependent on what is most appropriate.

Where we are storing information in email, our email retention policy is 7 years - so any information you send us via email would be deleted 7 years after you send it.

Information stored in Salesforce or Netsuite will be stored for 7 years from the point you stop doing business with us.

We will process personal data for 2 years following any conference we host and will store the personal data for 2 years after. After 2 years your data will be deleted.

intelliflo developer store accounts are stored for 3 years after you last login to your account and 3 years after our last customer ceases to use your product. This is so we can deal with any billing issues which may arise.

For further information regarding how long your personal information will be kept, please our contact details in see the 'Get in touch' section.

12. What are your rights in relation to the personal data we hold about you?

It is important that you understand that at any point while we are in possession of, or processing, your personal data, you, the data subject, have the following rights that intelliflo is fully committed to upholding (subject to the conditions set out in applicable laws):

Your rights include:

  • The right to access your personal data

    You have the right to request a copy of the information that we hold about you.

  • The right to rectification

    You have a right to correct data that we hold about you that is inaccurate or incomplete.

  • The right to erasure

    In certain circumstances you can ask for the personal data we hold about you to be erased from our records.

  • The right to restriction of processing

    You may object to your data being processed under legitimate interests by emailing dataprotection@intelliflo.com - please note, this does not mean that intelliflo has to cease processing as we may have an overriding legitimate interest to do so, despite such an objection.

  • The right to data portability

    You have the right to have data you supplied to us transferred to another organisation, in machine readable format.

  • The right to object to processing of your personal data

    Subject to the conditions prescribed in applicable laws, you have the right (i) to object, on grounds relating to your particular situation, to the processing of your personal data which is based on our or a third party’s legitimate interests; and (ii) to object to the processing of your personal data for direct marketing purposes.

  • Rights relating to automated decision-making

    You have the right to not have decisions made automatically about you, to be informed if they are made and to have an automated decision reconsidered.

  • The right to withdraw consent

    You have the right to withdraw consent if that is the legal basis we are processing your data on.

  • The right to lodge a complaint with the ICO

    You have a right to complain to the Information Commissioner's Office if you believe that any use of your personal information by us is in breach of applicable data protection laws and/ or regulations. More information can be found on the Information Commissioner’s Office website: https://ico.org.uk

    This will not affect any other legal rights or remedies that you have.

What forms of ID will I need to provide in order to access this?

intelliflo Ltd accepts the following forms of ID when information on your personal data is requested:

Two forms of ID, such as:

  • Government issue photo ID such as Passport, driving licence
  • Birth certificate
  • Utility bill (from last 3 months)

intelliflo may also ask you to prove current or former employment at the firm you are or were working for as we are unlikely to have your home address.

How can you contact us?

You may contact our data protection officer if you have any questions about how we collect, store or use your personal information:

Data Protection Officer
intelliflo Ltd
Wellington House
60-68 Wimbledon Hill Road
SW19 7PA
0330 102 8402 Email: dataprotection@intelliflo.com