Privacy Policy

1. Introduction

ChromaticFlux ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our financial services.

We are a financial services company authorised and regulated by the Financial Conduct Authority (FCA). Our firm reference number is FRN123456.

2. Information We Collect

2.1 Information You Provide to Us

• Contact Information: Name, email address, phone number, postal address
• Financial Information: Income, expenses, investment objectives, risk tolerance
• Identity Information: Date of birth, National Insurance number, passport or driving licence details
• Communication Records: Records of our correspondence and phone calls

2.2 Information We Collect Automatically

• Technical Data: IP address, browser type, operating system, device information
• Usage Data: Pages visited, time spent on our website, click patterns
• Cookies: Information stored via cookies and similar technologies

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide financial advice and services
• To assess your suitability for financial products
• To communicate with you about our services
• To comply with legal and regulatory requirements
• To prevent fraud and ensure security
• To improve our website and services
• To send you marketing communications (with your consent)

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal bases:

• Contract: Processing necessary for the performance of a contract with you
• Legal Obligation: Processing required to comply with legal requirements
• Legitimate Interests: Processing necessary for our legitimate business interests
• Consent: Where you have given specific consent for processing

5. Information Sharing and Disclosure

We may share your personal information with:

• Regulatory Bodies: FCA, HMRC, and other regulatory authorities
• Service Providers: Third-party companies that help us provide our services
• Financial Product Providers: To facilitate investment or insurance applications
• Legal Advisors: When required for legal advice or proceedings
• Credit Reference Agencies: For identity verification and fraud prevention

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection and security
• Secure disposal of personal information

7. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Generally:

• Client records are kept for at least 6 years after the end of our relationship
• Financial advice records are kept indefinitely
• Marketing preferences are kept until you withdraw consent
• Website analytics data is typically kept for 2 years

8. Your Rights

Under UK data protection laws, you have the following rights:

• Access: Request copies of your personal information
• Rectification: Request correction of inaccurate information
• Erasure: Request deletion of your personal information
• Restriction: Request limitation of processing
• Portability: Request transfer of your data to another service
• Objection: Object to processing based on legitimate interests
• Consent Withdrawal: Withdraw consent where applicable

To exercise any of these rights, please contact us using the details provided below.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience. For detailed information about our use of cookies, please see our Cookie Policy.

10. International Transfers

We primarily process your personal information within the UK. If we need to transfer your information outside the UK, we will ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the UK government
• Standard contractual clauses
• Binding corporate rules
• Certification schemes

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date.

12. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

13. Complaints

If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):