Introduction
Moonlit Passage is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website or engage our services.
We are registered under the Data Protection Act 2018 and comply with the UK General Data Protection Regulation (UK GDPR).
Information We Collect
When you use our website or request our services, we may collect the following types of information:
- Personal identification information: Name, email address, postal address
- Financial information: Pension details, retirement goals, income requirements (when you engage our services)
- Technical information: IP address, browser type, device information, pages visited
- Communication records: Emails, consultation notes, service documentation
How We Use Your Information
We use your personal data for the following purposes:
- To provide retirement planning and pension advisory services
- To respond to your enquiries and consultation requests
- To communicate with you about our services
- To comply with legal and regulatory obligations
- To improve our website and service delivery
- To maintain records required by financial services regulations
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contractual necessity: To fulfill our service obligations when you engage us
- Legitimate interests: To respond to enquiries and improve our services
- Legal obligation: To comply with financial services regulations and record-keeping requirements
- Consent: For marketing communications, where applicable
Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected:
- Client service records are retained for a minimum of seven years following the end of our engagement, as required by financial services regulations
- Enquiry information from non-clients is retained for up to two years
- Website analytics data is retained for up to 26 months
- Marketing consent records are retained until you withdraw consent
Data Sharing and Disclosure
We do not sell or rent your personal data to third parties. We may share your information with:
- Professional advisors (accountants, lawyers) when necessary for service delivery
- Regulatory authorities when required by law
- Service providers who support our operations (email hosting, document storage) under strict confidentiality agreements
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encrypted data transmission and storage
- Secure access controls and authentication
- Regular security assessments and updates
- Staff training on data protection practices
Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right to access: Request a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your data in certain circumstances
- Right to restrict processing: Request limitation on how we use your data
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent for processing where consent is the legal basis
Cookies and Tracking
Our website uses cookies and similar tracking technologies. For detailed information, please see our Cookies Policy.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date.
Contact Us
If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us:
Email: [email protected]
Address: 42 Harrington Gardens, London SW7 4JU, United Kingdom
Supervisory Authority
If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: moonlit-passage.com
Telephone: 0303 123 1113