When you invest in a investment plan that is offered by Invexus, personal information about you is collected primarily through our standard forms (such as our application form).
When you visit our website, we may collect technical and navigational information, such as device type, browser type, Internet protocol address, pages visited, and average time spent, user journeys and demographics. Information is collected on an anonymous basis and is used by us to analyse the efficacy of our marketing campaigns and to improve our website design and functionality.
We may collect your information when you complete forms or sign up to publications on our website. This information is used by us to provide you with online access to your investments or to provide you with marketing material.
We use your personal information to establish and administer your investment, comply with relevant laws and regulations such as the Anti-Money Laundering and Counter-Terrorism Financing Act and to communicate with you about your investment.
Personal information may be used for secondary purposes such as the provision of promotional and marketing material. You can contact us at any time if you do not wish to receive such materials or information.
We may disclose your personal information to:
Invexus uses third party investment administrators and registries to support the administration of our investment plans. We have contractual arrangements with these service providers to ensure they comply with privacy laws when dealing with your personal information.
We take all reasonable steps to protect your personal information from misuse, loss, unauthorised access, interference, modification or disclosure.
We have physical, electronic and procedural safeguards to protect your information which is held by us. For example, your personal information is stored in secured office premises, electronic databases requiring logins and passwords for access and/or at one of our secured warehouses. Access to information stored electronically is restricted to staff whose job purpose requires access. We also require all staff to maintain the confidentiality of customer information.
Our service providers are required to notify us of any unauthorised access, disclosure or loss of personal information.
In such a circumstance, Invexus performs an assessment to determine if there has been an ‘eligible data breach’ whereby the access or disclosure of the personal information is likely to result in serious harm to the individuals to whom the information relates. If Invexus determines there has been an ‘eligible data breach’ then the individuals affected will be notified as soon as practicable of the details of the breach and the recommended steps to take in response to it. If required, Invexus will also inform the Office of the England Information Commissioner at the same time.