We are Oxford Risk Research & Analysis Ltd, a company based in the UK that helps harness the power of behavioural finance and technology to enable advisers and investors to make the best decisions more effectively. Our company number is 04571309, and our registered address is 57 Woodstock Road, Oxford, OX2 6HJ.
If you would like to get in touch, please email email@example.com and we will be happy to help you.
When you receive financial advice, your adviser is legally obligated to make sure that the advice is suitable and appropriate for you. Oxford Risk provides your adviser and/or investment provider with tools that help to determine the level of investment risk that you are willing and able to take.
The legal basis we rely on for processing your personal data is to fulfil our contractual obligations to your adviser/investment provider, and to support our legitimate interests in providing and developing tools that help advisers and investors the best financial decisions in the face of complexity, uncertainty and behavioural biases.
When you take an Oxford Risk assessment, we collect your name, date of birth, gender, and postcode; along with your responses to questions about financial risk and investment attitudes. We sometimes also collect your full postal and email addresses, and your phone number.
We need to collect this information to send a risk profiling questionnaire to you, and to help your adviser review and store your results.
We use your name to prepare a profile report that your adviser or investment provider must keep on file for a number of years. We use your name, email and/or postal address to send our assessments to you.
We do not use your personal data to determine the level of investment risk that is suitable for you. We also do not make any automated decisions on the basis of the data you provide.
We use your date of birth, gender and postcode as part of a large, pseudonymised, aggregated data set, used to ensure our tools are performing to a rigorous scientific standard.
Your adviser/investment provider acts as the data controller in our relationship with them, and we process data on their instruction. Therefore, we keep your data until your adviser/investment provider tells us to delete it. Usually this means we will hold onto your data for 5 years after you end your relationship with the adviser/investment provider, to help them satisfy their record-keeping obligations.
You have several rights guaranteed under the General Data Protection Regulation, which are summarised below. If you would like to discuss any of these, we ask that you first contact your adviser/investment provider, because they have the ultimate responsibility in deciding what information about you is held on our systems. If you would like to get in touch with us directly, please email firstname.lastname@example.org.
You have the right to see the data we hold about you. Please contact your adviser/investment provider and ask them to initiate a subject access request on your behalf.
You have the right to correct or augment any data that is inaccurate or incomplete. We usually display a summary of the personal data we hold about you before you start one of our risk profiling assessments, which gives you the opportunity to correct any errors. You can also ask your adviser/investment provider to rectify any of the information we hold.
You have the right to ask us to erase the information we hold about you, however this right may be trumped by your adviser’s and/or investment provider’s legal obligations to maintain complete records. Please discuss data erasure with your adviser/investment provider for more information.
You may have the right to ask us to restrict the processing of your personal data under certain circumstances. Please discuss restricting our processing of your data with your adviser/investment provider for more information.
You have the right to object to our processing of your data; however, objecting may limit the services that your adviser/investment provider can provide you. Please discuss your right to object with your adviser/investment provider for more information.
Our website uses a third-party service to send emails inviting you to take a risk profiling questionnaire.
To send you email invitations, we may transfer your name and email address, and your adviser’s name and email address to a third-party service that uses servers outside of the EEA. These transfers are protected by the EU/US and Swiss Safe Harbour Framework. We don’t transfer any other information outside of the EEA, unless we have come to an agreement with your adviser/investment provider beforehand. You should discuss international transfers with your adviser/investment provider for more information.
If you have concerns about how we process your data, we recommend you get in touch with your adviser/investment provider; whoever sent you to take one of our risk profiling questionnaires. If you would like to get in touch with us directly, we will be happy to hear from you at email@example.com.
If you have a serious concern or you would like to make a complaint, please get in touch with the Information Commissioners Office (ICO).
Phone: 0303 123 1113