Privacy Notice: Oxford Risk Rating Online

We are Oxford Risk Research & Analysis Ltd, a company based in the UK that helps harness the power of behavioural finance and technology to enable advisers and investors to make the best decisions more effectively. Our company number is 04571309, and our registered address is 57 Woodstock Road, Oxford, OX2 6HJ.

 

If you would like to get in touch, please email privacy@oxfordrisk.com and we will be happy to help you.

Contents

  1. Purpose and legal basis for processing
  2. What we need
  3. Why we need it
  4. What we do with it
  5. How long we keep it
  6. What are your rights?
  7. Do we use any data processors?
  8. Do we transfer any data overseas?
  9. What if you have concerns or want to make a complaint?

Purpose and legal basis for processing

When you receive financial advice, your adviser is legally obligated to make sure that the advice is suitable and appropriate for you. Oxford Risk provides your adviser and/or investment provider with tools that help to determine the level of investment risk that you are willing and able to take.

The legal basis we rely on for processing your personal data is to fulfil our contractual obligations to your adviser/investment provider, and to support our legitimate interests in providing and developing tools that help advisers and investors the best financial decisions in the face of complexity, uncertainty and behavioural biases.

What we need

When you take an Oxford Risk assessment, we collect your name, date of birth, gender, and postcode; along with your responses to questions about financial risk and investment attitudes. We sometimes also collect your full postal and email addresses, and your phone number.

Why we need it

We need to collect this information to send a risk profiling questionnaire to you, and to help your adviser review and store your results.                                

What we do with it

We use your name to prepare a profile report that your adviser or investment provider must keep on file for a number of years. We use your name, email and/or postal address to send our assessments to you.

We do not use your personal data to determine the level of investment risk that is suitable for you. We also do not make any automated decisions on the basis of the data you provide.

We use your date of birth, gender and postcode as part of a large, pseudonymised, aggregated data set, used to ensure our tools are performing to a rigorous scientific standard.

How long we keep it

Your adviser/investment provider acts as the data controller in our relationship with them, and we process data on their instruction. Therefore, we keep your data until your adviser/investment provider tells us to delete it. Usually this means we will hold onto your data for 5 years after you end your relationship with the adviser/investment provider, to help them satisfy their record-keeping obligations.

What are your rights?

You have several rights guaranteed under the General Data Protection Regulation, which are summarised below. If you would like to discuss any of these, we ask that you first contact your adviser/investment provider, because they have the ultimate responsibility in deciding what information about you is held on our systems. If you would like to get in touch with us directly, please email privacy@oxfordrisk.com.

Access

You have the right to see the data we hold about you. Please contact your adviser/investment provider and ask them to initiate a subject access request on your behalf.

Rectification

You have the right to correct or augment any data that is inaccurate or incomplete. We usually display a summary of the personal data we hold about you before you start one of our risk profiling assessments, which gives you the opportunity to correct any errors. You can also ask your adviser/investment provider to rectify any of the information we hold.

Erasure

You have the right to ask us to erase the information we hold about you, however this right may be trumped by your adviser’s and/or investment provider’s legal obligations to maintain complete records. Please discuss data erasure with your adviser/investment provider for more information.

Restricting processing

You may have the right to ask us to restrict the processing of your personal data under certain circumstances. Please discuss restricting our processing of your data with your adviser/investment provider for more information.

Objection

You have the right to object to our processing of your data; however, objecting may limit the services that your adviser/investment provider can provide you. Please discuss your right to object with your adviser/investment provider for more information.

Do we use any data processors?

Our website uses a third-party service to send emails inviting you to take a risk profiling questionnaire.

Do we transfer any data overseas?

To send you email invitations, we may transfer your name and email address, and your adviser’s name and email address to a third-party service that uses servers outside of the EEA. These transfers are protected by the EU/US and Swiss Safe Harbour Framework. We don’t transfer any other information outside of the EEA, unless we have come to an agreement with your adviser/investment provider beforehand. You should discuss international transfers with your adviser/investment provider for more information.

What if you have concerns or want to make a complaint?

If you have concerns about how we process your data, we recommend you get in touch with your adviser/investment provider; whoever sent you to take one of our risk profiling questionnaires. If you would like to get in touch with us directly, we will be happy to hear from you at privacy@oxfordrisk.com.

 

If you have a serious concern or you would like to make a complaint, please get in touch with the Information Commissioners Office (ICO).

Web: https://ico.org.uk/make-a-complaint/your-personal-information-concerns/

Phone: 0303 123 1113