Personal Data
In the EU’s General Data Protection Regulation (GDPR), Personal Data is defined as “…any information relating to an identified or identifiable natural person (“data subject”); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.”

How we use and store your information
The following privacy policy will outline how GKP Trading Ltd T/A GKP Legal & Wealth (GKP) will collect, store and use your data. This is done so that we can:
– Respond to your queries and information requests;
– Respond to service requests;
– Respond to any complaints;
– Store contact details, including but not limited to contact name, postal address, telephone, email address (if provided), your query with us, relationship to us, including information recorded through application forms, complaints, etc. on our database*;
– Create a suitable member listing for the public to contact;
– Refine our website and improve your experience when using it through cookies.
*If your membership lapses, is resigned or is revoked, the SWW will still retain information under a lawful basis in order to assist members of the public with enquiries in relation to document storage, rewrites or updates.

Why do we need to collect and store personal data?
In order for us to do any of the above, we must collect and store your data firstly for correspondence purposes. We will ensure that the information collected will only be used for its intended purpose and does not constitute an invasion of your privacy. The GKP may wish to contact you for marketing purposes, however we would contact you for additional consent for that purpose if not already given.

Will we share your personal data with anyone else?
We may need to pass your details onto third parties who are either contracted to, or part of the GKP associate companies. Any third parties who we do pass your details onto are obliged to store your details securely and only process them if responding to info requests, queries, complaints, etc. on our behalf. When the time comes that they no longer require your personal data, they will dispose of this accordingly and in line with our company policy. If we wish to pass your personal data to a third party, we will only do so with your explicit consent, unless we are legally obliged to do so otherwise.

How will we use the personal data we collect about you?
Processing data constitutes as collecting, storing and using. We will process this data in accordance with the GDPR. We will do our utmost to keep your information accurate and up to date and not keep it longer than is necessary. The GKP will issue occasional reminders to all clients to keep their contact details up to date and will update them accordingly. The personal data that we collect will be added to our database, and if we email you, also our Outlook Contacts Management System.

Under what circumstances will we contact you?
We will only ever contact you when necessary, or when you have requested that we do so. We do not mean at any point to be intrusive or ask for unnecessary information. We will do our best to ensure that the information we hold is as secure as possible to minimise the risk of unauthorised access or disclosure.

Can you find out about the personal data that we hold about you?
If you want to see what personal data we hold on you and how it is processed, you may contact us to request this. This is known as a Data Subject Access Request (DSAR) and you must request this in writing (either by post or email), providing the necessary identification before any information is released. If the GKP do store any of your personal data, you may request information on the following:
– Identity and the contact details of the person or organisation that has determined how and why to process your data. In some cases, this will be a representative in the EU.
– Contact details of the GDPR owner, where applicable.
– The purpose of the processing as well as the legal basis for processing.
– If the processing is based on the legitimate interests of The GKP or a third party, information about those interests.
– The categories of personal data collected, stored and processed.
– Recipient(s) or categories of recipients that the data is/will be disclosed to.
– If we intend to transfer the personal data to a third country or international organisation, information about how we ensure this is done securely. The EU has approved sending personal data to some countries because they meet a minimum standard of data protection. In other cases, we will ensure there are specific measures in place to secure your information.
– How long the data will be stored.
– Details of your rights to correct, erase, restrict or object to such processing.
– Information about your right to withdraw consent at any time.