Privacy Notice

Last updated: 17 January 2026

Who We Are

Redstone Wealth Management Limited is an Appointed Representative of Quilter Financial Services Limited. We are registered on the FCA Register with Firm Reference Number: 843533.

Our registered office address is: Senator House, 85 Queen Victoria Street, London EC4V 4AB.

For data protection queries, you can contact us at: hub@redstonewm.co.uk

What Personal Information We Collect

We may collect and process the following categories of personal data about you:

• Identity Data: Full name, title, date of birth, gender, marital status, and copies of identification documents
• Contact Data: Home address, email address, and telephone numbers
• Financial Data: Bank account details, income, assets, liabilities, investment history, pension information, and details of existing financial arrangements
• Employment Data: Employment status, occupation, employer details
• Family Data: Information about your dependants and family circumstances
• Transaction Data: Details about payments, products and services you have obtained from us
• Technical Data: IP address, browser type, and other technology on devices you use to access our services
• Profile Data: Your financial goals, attitude to risk, investment objectives, and preferences
• Usage Data: Information about how you use our website and services
• Marketing and Communications Data: Your preferences in receiving marketing communications

Special Category Data

In some circumstances, we may need to collect special categories of personal data, such as health information (for example, when arranging life insurance or protection products). We will only collect this data where necessary and with your explicit consent or where otherwise permitted by law.

How We Collect Your Personal Information

We collect personal information through:

• Direct interactions: Information you provide when you contact us, use our services, or complete forms and questionnaires
• Automated technologies: Information collected automatically when you visit our website, including cookies and similar technologies
• Third parties: Information from product providers, regulatory bodies, credit reference agencies, fraud prevention agencies, and publicly available sources
• Other advisers: Information from other professional advisers you may use, such as accountants or solicitors (with your consent)

How We Use Your Personal Information

We will only use your personal data when the law allows us to. Most commonly, we use your personal data:

• To provide financial advice: To assess your needs, provide suitable recommendations, and arrange financial products and services on your behalf
• To fulfil our contract with you: To perform our obligations under any contract we have entered into with you
• To comply with legal obligations: To meet regulatory requirements, prevent money laundering, and comply with other legal duties
• For legitimate interests: To maintain records, improve our services, manage our business operations, and protect our business interests
• With your consent: To send you marketing communications where you have given us consent to do so

Legal Basis for Processing

We rely on the following legal bases to process your personal data:

• Contractual necessity: Processing is necessary to fulfil our contract with you or to take steps at your request before entering into a contract
• Legal obligation: Processing is necessary to comply with our legal and regulatory obligations, including FCA regulations and anti-money laundering requirements
• Legitimate interests: Processing is necessary for our legitimate interests (or those of a third party), such as maintaining records, managing our business, and protecting against fraud
• Consent: You have given clear consent for us to process your personal data for a specific purpose

Who We Share Your Personal Information With

We may share your personal data with the following categories of recipients:

• Product providers: Life insurance companies, investment platforms, pension providers, and other financial institutions when arranging products for you
• Our network: Quilter Financial Services Limited, as our appointed representative network
• Regulatory bodies: The Financial Conduct Authority (FCA), Financial Ombudsman Service, and other regulatory authorities
• Professional advisers: Lawyers, accountants, auditors, and consultants who assist us in running our business
• Service providers: IT service providers, cloud storage providers, and other third parties who provide services to us
• Credit reference agencies: When assessing applications for certain financial products
• Fraud prevention agencies: To verify your identity and prevent fraud
• Law enforcement: When required by law or to protect our legal rights

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We only allow them to process your personal data for specified purposes and in accordance with our instructions.

Data Security

We have implemented appropriate technical and organisational security measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit and at rest
• Secure access controls and authentication procedures
• Regular security assessments and testing
• Staff training on data protection and security
• Physical security measures for our offices
• Secure disposal procedures for paper and electronic records

We limit access to your personal data to those employees, agents, and contractors who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

How Long We Keep Your Personal Information

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal and regulatory obligations. Generally:

• Active clients: We retain your data for as long as you remain a client and continue to use our services
• Former clients: After you cease to be a client, we will retain your data for at least six years from the end of our relationship, or longer if required by law
• Prospective clients: If you do not become a client, we will typically delete your data within two years of our last contact, unless you have consented to receive marketing communications

In some circumstances, we may retain your data for longer periods where required by law, regulation, or to protect our legal rights. When determining retention periods, we consider the nature and sensitivity of the data, the purposes for which it was collected, and applicable legal requirements.

Your Rights

Under UK data protection law, you have the following rights:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can ask us to correct inaccurate or incomplete personal data
• Right to erasure: In certain circumstances, you can ask us to delete your personal data (subject to legal and regulatory obligations)
• Right to restrict processing: You can ask us to temporarily restrict how we use your personal data
• Right to object: You can object to our processing of your personal data in certain circumstances
• Right to data portability: You can request that we provide your personal data in a structured, commonly used format or transmit it to another organisation
• Right to withdraw consent: Where we rely on your consent to process your personal data, you can withdraw that consent at any time
• Right to complain: You have the right to lodge a complaint with the Information Commissioner's Office (ICO)

Please note that some of these rights may be limited in certain circumstances. For example, we may not be able to delete your data if we are required to retain it by law or to defend legal claims.

How to Exercise Your Rights

To exercise any of your rights, please contact us at hub@redstonewm.co.uk. We will respond to your request within one month, although we may need to request specific information from you to help us confirm your identity and ensure your right to access the data.

Marketing Communications

We may use your personal data to send you marketing communications about our services, market updates, and other information we think may be of interest to you. We will only send you marketing communications if you have given us your consent to do so or where we have a legitimate interest and you have not objected.

You can opt out of receiving marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email we send you
• Contacting us at hub@redstonewm.co.uk

Please note that even if you opt out of marketing communications, we may still need to send you service-related communications, such as information about your financial arrangements or updates to our terms and conditions.

Automated Decision Making

We do not use automated decision-making or profiling that has legal or similarly significant effects on you. All significant decisions about your financial arrangements are made by our qualified advisers, who will discuss recommendations with you before proceeding.

International Transfers

We primarily store and process your personal data within the United Kingdom. However, some of our service providers may be located outside the UK or European Economic Area (EEA). Where we transfer your personal data outside the UK, we ensure appropriate safeguards are in place, such as:

• Transferring to countries with adequacy decisions from the UK government
• Using standard contractual clauses approved by the ICO
• Ensuring the recipient is certified under an approved certification mechanism

Cookies and Online Tracking

Our website uses cookies and similar technologies to distinguish you from other users and provide you with a better experience. For detailed information about the cookies we use and the purposes for which we use them, please see our Cookie Policy.

Changes to This Privacy Notice

We may update this privacy notice from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any significant changes by posting the updated notice on our website and updating the "last updated" date at the top of this page. We encourage you to review this privacy notice periodically to stay informed about how we protect your personal data.

Contact Us and Complaints

If you have any questions about this privacy notice or how we handle your personal data, please contact us:

Complaints to the ICO

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority, if you believe we have not handled your personal data properly or have not responded adequately to your concerns.