Data privacy and protection

21&You is responsible for ensuring that it uses your data in compliance with data protection law. The purpose of this notice (the “Privacy Notice”) is to explain what personal data 21&You collects and how 21&You uses it. For data protection law, 21&You is a data controller in respect of your data. “Personal data” is any data that can be used to identify you or that 21&You can link to you and which 21&You has in its possession or control.
In this Privacy Notice when we refer to “21&You” or “we”/“us”/“our” we mean 21&You and our Associates

How we use your data

Personal data may be stored and processed by 21&You in the following ways and for the following purposes:

to provide 21&You products and services, including processing instructions and providing confirmations, advice, and statements to our clients;
verify your identity (including for fraud prevention purposes), assess your ability to meet your financial commitments (if any), and manage 21&You's relationship with you and/or the client to whom you are connected;
to contact you in connection with your work with 21&You and the products and services that 21&You provides to you or a client to whom you are connected;
to perform the contract with you or a client/supplier to whom you are connected (including performing 21&You's obligations and exercising 21&You rights);
to engage in marketing and business development activity and to advise you or a client to whom you are connected of other products and services similar to those which you or a client to whom you are connected receive from 21&You and/or its Associates;
to engage in Community Investment projects where you choose to participate;
to notify you about changes to 21&You's service;
to carry out financial risk assessments, risk mitigation activities, and risk reporting and risk management;
to comply with 21&You's legal and regulatory obligations. This includes reporting to the relevant authorities, complying with anti-money laundering obligations and tax reporting obligations;
to use it to prevent and respond to actual and potential fraud or illegal activities; or
to use it to look into any complaints or queries you or a client/supplier to whom you are connected may have.

21&You is entitled to use personal data in these ways because:

Consent - we may (but usually do not) need your consent to use your data. You can withdraw your consent by contacting us.
Performance of a contract - we may need to collect and use your data to enter into a contract with you or to perform our obligations under a contract with you or a client to whom you are connected.
Legitimate interest - we may use your data for our legitimate interests, some examples of which are given above.
Compliance with law or regulation - we may use your data as necessary to comply with applicable laws/regulations.