Privacy Policy

Who we are

Eight Financial Advice is a trading name of Eight Wealth Management Ltd. Eight Wealth Management Ltd is an Appointed Representative of St. James’s Place Wealth Management plc, which is authorised and regulated by the Financial Conduct Authority. This notice was last updated on 22 April 2026.

Overview

Eight Financial Advice is a trading name of Eight Wealth Management Ltd, which is the data controller of your personal information. Eight Wealth Management Ltd also trades as Eight Mortgages and 3Nines Financial Planning.

Eight Wealth Management Ltd is an Appointed Representative of St. James’s Place Wealth Management plc (‘SJP’), which is authorised and regulated by the Financial Conduct Authority. SJP acts as a joint controller with Eight Wealth Management Ltd for certain regulated financial advice activities. You can read the SJP Partner Privacy Notice at www.sjp.co.uk/site-services/privacy.

St. James’s Place is also responsible for managing any complaints made by you in respect of the regulated services we provide on its behalf. Where SJP uses your personal data (for example, by conducting audits or dealing with complaints), this will be governed by the SJP Privacy Policy.

This Privacy Policy explains when and why we collect your personal information as part of our provision of wealth management services, and how we use it. If requested, we will provide you with a copy of this Privacy Policy for your records.

If you have questions about this notice or wish to exercise your data rights, please contact:

Data Protection Enquiries

Eight Financial Advice

Fusion 1, Parkway

Whiteley, Fareham

Hampshire, PO15 7AA

Email: hello@eightfinancialadvice.co.uk

Telephone: 01489 555180

You may also contact our joint controller’s Data Protection Officer at: St. James’s Place plc, St. James’s Place House, 1 Tetbury Road, Cirencester, Gloucestershire, GL7 1FP. Email: dpo@sjp.co.uk. Telephone: 01285 878453.

Eight Wealth Management Ltd is part of a group of associated organisations (‘the Eight group’). These include:

• Eight Tax & Accountancy Services Limited (ETAS) – a separate company registered in England and Wales (Company No. 10359256), acting as an independent data controller for accountancy and taxation services.
• The Eight Foundation – a registered charity operating within the Eight group structure.

We only share information with associated companies when it is necessary, lawful and appropriate, and only in line with your marketing or service preferences. Cross-group marketing is governed by Section 5 of this notice.

3. Our processing of your personal information

Depending on our relationship with you, we will collect and use different personal information about you for different reasons. In order to make this notice as user-friendly as possible, we have split it into different sections. Please refer to the section that best describes your relationship with us.

Sometimes we will request or receive “special categories of personal information” (which includes information relating to your health, genetic or biometric data, criminal convictions, sex life, sexual orientation, racial or ethnic origin, political opinions, religious or philosophical beliefs, and trade union membership). For example, in order to better understand your circumstances and recommend appropriate financial products, we may need access to information about your health. Details about your health might also be needed to make reasonable adjustments when providing our services to you.

We also use details of any unspent criminal convictions for fraud prevention purposes.

Where you provide personal information to us about other individuals (for example, members of your family or other dependants), we will also be data controller of their personal information. This notice will apply to those individuals and you should refer them to it.

3.1 Prospective clients

This section applies if you are a prospective client and we need certain information about you to carry out pre-client identification and compliance checks and to set you up as a client on the St. James’s Place client relationship management system.

3.1a What personal information may we collect?

• General information such as your name, address, phone numbers and email addresses, date of birth and gender.
• Identification information including passport, driving licence, national identity card (for non-UK nationals), government issued ID verification and address verification documents such as council tax letters, bank statements and evidence of benefit entitlement.
• Employment information such as job title, employment history and professional accreditations.
• Financial information: bank details, financial reviews (fact finds), information relating to your personal finances such as financial liabilities and assets, income and outgoings.
• Information obtained from carrying out identification checks and checking sanction lists and politically exposed persons (PEP) screening, including bankruptcy orders.
• Information relevant to the services we provide such as previous and current investments, information about your lifestyle, attitude to investment risk, existing plan details, objectives, copies of your will and information about any trusts you have.
• Information about your family including information about your dependants.
• Information such as IP address and browsing history obtained through our use of cookies (see Section 7).
• Information obtained during telephone recordings.
• Information gathered from publicly available sources such as the electoral roll, internet search engines and social media sites such as LinkedIn where you have been flagged as a PEP.

3.1b What special categories of personal information may we collect?

• Details about any criminal convictions and any related information obtained from our sanctions checks and PEP screening, including information relating to any offences or alleged offences you have committed or court sentences you are subject to.
• Details about your health which are relevant to your application (for example, as part of a pension or income protection need we may ask about medical conditions to establish whether you are deemed to be a vulnerable client) or where you have disclosed such information because it explains your risk appetite.
• In limited circumstances, we may also collect other special categories of data as detailed on a separate consent form.

3.1c How will we collect your personal information?

We will collect information directly from you when:

• you enquire about or apply to receive our wealth management services; and
• you contact us by email, telephone and through other written and verbal communications.

We will also collect your personal information from:

• Publicly available sources such as the electoral roll, court judgments, insolvency registers, internet search engines and social media sites.
• James’s Place group companies, who will process your personal data in accordance with their Privacy Policy at: www.sjp.co.uk/site-services/privacy.

3.1d What will we use your personal information for?

There are a number of reasons we use your personal information and for each use we need to have a “lawful basis” to do so.

We will rely on the following lawful bases when we process your personal information:

• We have a legal or regulatory obligation to use such personal information. For example, our regulators require us to hold certain records of our dealings with you.
• We have a valid business reason to use your personal information, for example where necessary for our everyday business operations and activities, to maintain our business records, to evaluate and enhance our systems and processes, where necessary for the performance of a contract or other legally binding obligation to you, or to take steps at your request prior to entering into a contract.
• Where we have your consent to process your personal information.

In each case we assess our need to use this personal information for these purposes against your rights to privacy to ensure we are protecting your rights.

When we use your special categories of personal information, we must have an additional lawful basis:

• You have given your explicit consent to our use of your special categories of personal information. In some cases we are not able to offer you certain advice or financial products unless we have your health information.
• There is a substantial public interest such as prevention and detection of fraud.
• We need to use such special categories of personal information to establish, exercise or defend legal rights.
• It is in the substantial public interest to comply with regulatory requirements relating to unlawful acts and dishonesty – such as carrying out fraud, credit and anti-money laundering checks.

3.1e Who will we share your personal information with?

We will not sell or transfer your personal information to anyone unless we have a valid purpose as set out above and we will only disclose it to the following parties:

• Other Partners within the Partnership to provide specialist services where we do not have the authorisation to carry out certain activities such as high risk investments.
• James’s Place group companies, who will process your personal data in accordance with their Privacy Policy at: www.sjp.co.uk/site-services/privacy.
• Third parties who provide sanctions checking services including Experian.
• Compliance consultants including the Consulting Consortium.
• Financial crime and fraud detection agencies.
• Our regulators including the Financial Conduct Authority and the Financial Ombudsman Service.
• Selected third parties in connection with any sale, transfer or disposal of our business.
• Our insurers.
• The police, HMRC and other crime prevention and detection agencies.
• Third parties including self-employed contractors who we have entered into contractual arrangements with to provide services we need to carry out our everyday business activities such as business administration, document management providers, back office system providers, storage warehouses, IT suppliers, actuaries, auditors, lawyers, outsourced business process management providers, our subcontractors and tax advisers.
• Associated companies within the Eight group (such as Eight Tax & Accountancy Services Limited), where you have provided explicit consent for cross-group marketing or where sharing is otherwise necessary and lawful.

3.2 Existing clients

This section applies if you currently receive wealth management services from us and sets out how we use your information. Please refer to Sections 3.1a-3.1c for the categories of personal information we may collect and how we collect it, as these apply equally to existing clients with the following additions:

• Information contained in client review meeting records and file notes.
• Information contained in any records held by previous independent financial advisers (IFAs) with whom you were previously a client and which have been transferred to us when that IFA was acquired by St. James’s Place group companies.
• Your marketing preferences and details of your customer experience with us.

The lawful bases and data sharing arrangements set out in Sections 3.1d and 3.1e apply equally to existing clients. In addition, we use your personal information for the following purposes in the context of ongoing client services:

• To carry out annual reviews and reviews of ongoing suitability of your current arrangements.
• To arrange and implement any of our recommendations, for example investing into certain funds or arranging a product or insurance policy for you.
• To provide services in accordance with your client agreement.
• To prevent and investigate fraud.
• To communicate with you and resolve any complaints that you might have.
• To apply for and claim on our own insurance.

3.3 Clients’ family members, business associates or beneficiaries

This section applies if your personal information has been provided to us by a client to explain their lifestyle and approach to investments and wealth management (for example, if you are a spouse or partner, dependant mentioned in a will or trust document, or a business partner) and sets out how we use your information.

We may collect general information such as your name, address, contact details, date of birth and gender, your relationship to our client, financial information relating to your financial liabilities, and any information relevant to the services we provide to our client.

In special circumstances, we may collect details about your physical and mental health where relevant to the services we provide for our client, or information concerning your sex life or sexual orientation where relevant (for example, if you are in a civil partnership with our client).

We collect this information directly from our client, from documents provided by our client (such as wills or trust documents), from St. James’s Place group companies, and from any records held by previous IFAs transferred to us when that IFA was acquired.

We will not sell or transfer your personal information to anyone unless we have a valid purpose. We share your personal information with the same categories of recipients as set out in Section 3.1e above.

3.4 Other business partners

If you are a business partner such as a products provider, portfolio or fund manager or contractor who carries out business functions on our behalf, this section is relevant to you.

We may collect general information such as your name, address, business phone numbers and email addresses, employment information, information about your clients, employees, services and products, your bank details, and information obtained from checking sanction lists and credit checks.

We collect this information directly from you, from St. James’s Place group companies, publicly available sources and service providers who carry out sanctions checks.

We process this information to carry out fraud, credit and anti-money laundering checks; to carry out due diligence; to comply with our legal or regulatory obligations; for business purposes including maintaining records; and for compliance and monitoring purposes.

3.5 Users of our website

If you use our website, this section sets out our uses of your personal information.

We may collect general information submitted via the website (such as your name, contact details and company name) and information such as IP address and browsing history obtained through our use of cookies (see Section 7).

We have a valid business reason to use your personal information, necessary for our everyday business operations, for example to maintain business records and to monitor usage of the website.

We will not sell or transfer your personal information and will only disclose it to St. James’s Place group companies and third parties (such as IT suppliers and website providers) who we have entered into contractual arrangements with to provide our everyday business services.

3.6 Where you are a job applicant

This section applies if you are a job applicant. We collect personal information including your name, address, work history, education information, remuneration history, interview information, employment preferences, reference information, right to work documentation, date of birth, gender, and personal information you voluntarily provide during the recruitment process.

We will retain personal information collected during the recruitment process for a maximum of 6 months from the end of the process (or longer for successful candidates in accordance with our Employee Privacy Notice). If a candidate is unsuccessful, any health information obtained during recruitment will be deleted within that same 6-month period.

4. Lawful bases for processing

We use personal information under the following lawful bases:

Contract: To provide financial advice, operate accounts and deliver the services you have requested.

Legal obligation: To comply with FCA rules, anti-money laundering and fraud prevention laws, tax regulations, statutory record-keeping and complaint-handling obligations.

Legitimate interests: To manage and improve our services, support internal administration, monitor systems, carry out analysis and maintain secure operations. Where we rely on legitimate interests for marketing, this applies only to the organisation you originally engaged with, unless you provide explicit consent through our preference centre.

Consent: Used for direct marketing where soft opt-in does not apply, or where you choose to receive communications from other organisations within the Eight group. You may withdraw consent at any time.

5. Marketing activities and marketing across the Eight group

We carry out the following marketing activities depending on our relationship with you.

5.1 Marketing to prospective clients

Where we have obtained your personal information from LinkedIn searches, we will connect with you in accordance with the terms and conditions of the LinkedIn social network and may provide information about our wealth management services. Where we have obtained your personal information from a marketing list from a third party, we will have undertaken rigorous checks to verify that those third parties have obtained appropriate consent for us to market to you.

We will use your personal information to provide you with information about our wealth management services and any newsletters and event invites where you have provided your consent for us to do so.

5.2 Marketing to existing clients

We will use your personal information to provide you with information about our wealth management services and any newsletters and event invites where it is part of the ongoing wealth management services we offer or where you have provided your consent for us to do so.

We will also provide you with information about St. James’s Place wealth management products and other third party products which we think may interest you where you have consented to receive this.

5.3 Marketing across the Eight group

We may send you marketing communications about our own services where you have purchased a product or service from us and you have not opted out. This is known as the “soft opt-in” and is permitted under UK PECR (Regulation 22(3)). The soft opt-in applies only to the organisation you originally engaged with (for example, Eight Financial Advice or Eight Tax & Accountancy Services Limited) — it does not extend across separate legal entities within the Eight group.

The ICO’s published guidance confirms that the soft opt-in is only available to the single entity that originally collected the contact details and cannot be used by other companies within the same group. Cross-group electronic marketing therefore requires explicit, named consent — that is, consent which specifically names each Eight group organisation you agree to hear from.

Named consent at the point of onboarding

When we collect your contact details — whether at the start of our client relationship, during a meeting, or through our website — we will give you the opportunity to consent to receiving marketing communications from other named organisations in the Eight group. Currently, these are:

• Eight Tax & Accountancy Services Limited (ETAS) — accountancy and taxation services
• The Eight Foundation — a registered charity operating within the Eight group structure

We will present a clear, separate opt-in choice for each organisation at the point of collection. You are under no obligation to consent, and your decision will not affect the advice or services we provide to you. Where you consent, each organisation named will be able to contact you about its own products, services or activities from the point at which consent is recorded.

You can review and update your cross-group marketing choices at any time through our email preference centre or by contacting us using the details in Section 1. Each organisation maintains its own email system, sender identity and suppression list. Opting out of one organisation’s communications does not affect the others.

The Eight Foundation — charitable soft opt-in

The Eight Foundation is a registered charity and, as of 5 February 2026, benefits from the charitable purpose soft opt-in introduced by the Data (Use and Access) Act 2025 (amending PECR Regulation 22). This means The Eight Foundation may contact you about its charitable activities without requiring your prior consent, provided it collected your details in the course of you expressing an interest in or supporting its charitable purposes, and it offered you a clear opt-out at the point of collection and in every subsequent communication. Where we share your details with The Eight Foundation for this purpose, we will ensure this is done in a manner consistent with this notice and applicable law.

Postal marketing from Eight group companies

The consent requirements described above apply to electronic marketing (email, SMS and equivalent channels) governed by PECR. Direct marketing sent by post is not subject to PECR’s electronic consent requirements. Where other Eight group companies send you information by post, they will do so under a lawful basis of legitimate interests (UK GDPR Article 6(1)(f)), supported by a Legitimate Interests Assessment, and will always give you a clear opportunity to opt out. You may, of course, object to postal marketing at any time by contacting the relevant organisation.

Lawful basis summary for cross-group marketing

Electronic marketing to you from other Eight group organisations: explicit named consent (UK GDPR Article 6(1)(a); PECR Regulation 22), collected at onboarding or updated through our preference centre. Postal marketing from other Eight group organisations: legitimate interests (UK GDPR Article 6(1)(f)), with opt-out in every communication. Electronic marketing from The Eight Foundation about its charitable purposes: charitable purpose soft opt-in (PECR Regulation 22(3A), as inserted by the Data (Use and Access) Act 2025), where applicable conditions are met.

5.4 General marketing practices

If you wish to opt out of marketing, you may do so by clicking on any “unsubscribe” link in any marketing email, responding to any marketing email communication confirming you would like to opt out, or telling us when we call you. You can also contact us using the details set out in Section 1 to update your contact preferences.

Please note that, even if you opt out of receiving marketing messages, we may still send you communications in connection with the services we offer you.

6. Where we obtain personal information

We may obtain personal information from:

• You directly
• James’s Place Wealth Management plc (joint data controller)
• Other Eight group companies where relevant and lawful
• Product providers and financial institutions
• Regulatory authorities
• Legal professionals such as courts or solicitors
• Public sources such as Companies House, the electoral roll and credit reference agencies
• Trustees, executors, attorneys or family members involved in your financial arrangements
• Publicly available internet sources and social media, where required for enhanced due diligence

7. How long do we keep personal information for?

We will only keep your personal information for as long as reasonably necessary to fulfil the purposes set out in this notice, to comply with our legal and regulatory obligations, or for as long as necessary to respond to concerns you raise with the advice you received. As a financial services firm, we are regulated by the Financial Conduct Authority, which imposes certain record-keeping rules which we must adhere to.

The following retention schedule applies:

In the event of a claim, we will keep your data beyond the standard retention period until such time as the claim is finally settled or finally determined by a court with no further right of appeal.

If you would like further information regarding the periods for which your personal information will be stored, please contact us using the details set out in Section 1.

8. What is our approach to sending your personal information overseas?

There are a small number of instances where your personal information is transferred to countries outside of the United Kingdom, for example when we transfer information to SJP group companies or Eight group associated companies, or to third-party suppliers based outside the UK, or when third parties acting on our behalf transfer your personal information outside the UK.

Where such a transfer takes place, we will take appropriate safeguarding measures to ensure your personal information is adequately protected. We may do so by:

• Using UK International Data Transfer Agreements (IDTAs) or other approved transfer mechanisms.
• Only transferring personal information to countries deemed to have adequate levels of data protection by the UK Government.
• Entering into standard contractual clauses approved by relevant data protection authorities.
• Relying on the transfer being necessary for the performance of the contract we have with you.

Regular data transfers outside the UK occur in connection with Eight group associated companies located in Singapore, Hong Kong, the United Arab Emirates and, in connection with SJP activities, Hong Kong, Singapore and Shanghai. All such transfers are protected by IDTAs or equivalent safeguards.

If you would like further information regarding our data transfers and the steps we take to safeguard your personal information, please contact us using the details in Section 1.

9. How do we protect your information?

We take our responsibility to look after your personal information and privacy seriously. We have a number of security measures in place to help prevent fraud and cybercrime.

• We have a dedicated group, the “Information Security Oversight Committee” (ISOC), that provides oversight and guidance to our information security and privacy programme. ISOC is chaired by the Chief Technology Officer and has a reporting line that enables effective escalation of issues to the Board.
• We educate and train our employees, Partners and contractors on their information security, fraud prevention and privacy obligations annually.
• When you login or send us information over the internet, we protect the security of this information while it is being transmitted by encrypting it using Secure Sockets Layer (SSL).
• We will always interact with you in a safe, secure and consistent manner. We will only send funds that you have requested to be withdrawn to a verified bank account in your name and will verify your identity when speaking to you on the phone. We will not ask for your password over the phone or send you unsolicited emails asking you to enter your online account credentials.
• We continually review our physical and logical security controls in place across the business, including security guards, CCTV, personal card access, clear desk policies, authentication controls, antivirus, firewalls, malware detection and encrypted employee devices.
• We conduct security testing of our applications and services in a controlled environment before they are made available to clients.
• We have a business resiliency plan with disaster recovery and business continuity testing, designed to ensure timely and full restoration of our products and services.

Whilst we take appropriate technical and organisational measures to safeguard your personal data, please note that we cannot guarantee the security of any personal data that you transfer over the internet to us.

10. Cookies

Our website uses cookies – small text files that are stored on your computer or in your browser – to help us monitor how visitors use our site and allow us to maintain the optimum experience for website users. The website does not store or capture personal information about you when you visit it; it merely records anonymous traffic information.

You can disable and delete cookies by changing the appropriate setting within your browser’s Help, Tools or Settings menu. Please note that by disabling cookies you may not benefit from some of the features of our site. You can find out more about deleting or controlling cookies by visiting aboutcookies.org.

Facebook advertising: We may use the Custom Audience pixel from Facebook Inc to track what users do after they see or click on our Facebook advertisements. Data collected in this way is anonymous to us. Facebook can connect this data with your Facebook account and use it for its own advertising purposes in accordance with Facebook’s Data Policy.

Google Ads: We use the Google Ads remarketing service to advertise to previous visitors to our site on third-party websites (including Google). Any data collected will be used in accordance with this Privacy Policy and Google’s privacy policy.

Google Analytics: This website uses Google Analytics to analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

We use Hotjar in order to better understand our users’ needs and optimise our service. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices in pseudonymised form.

Please view our full Cookie Policy on our website for further details on all cookies we use.

11. Monitoring

Please note that if you communicate with us electronically, including by email, telephone or fax, this communication may be randomly monitored and/or recorded to protect the interests of our business and our customers. This includes for the purposes of maintaining customer and service quality standards, detection and prevention of crime and to ensure that employees comply with legal obligations and our policies and procedures.

12. Hyperlinks

We may provide hyperlinks from this website to websites of other organisations including websites of associated companies. Please note that this Privacy Policy applies only to our site and that we will not be liable for the contents of linked websites or any transactions carried out with organisations operating those websites.

13. Your rights

You have several rights which you can exercise at any time relating to the personal information that we hold about you. Please contact us at any time using the details set out in Section 1 if you wish to exercise these rights; we will not usually charge you a fee (except where a request is manifestly unfounded, excessive or repetitive).

We respect your rights and will always consider and assess them, but please be aware that there may be some instances where we cannot comply with a request you make because, for example, complying could prevent us from meeting our own legal or regulatory requirements, or from providing services to you.

We will respond to your request within one month of receipt. In some cases, we may need to request more time. We will notify you if this is the case.

13.1 The right to access your personal information

You are entitled to a copy of the personal information we hold about you and certain details of how we use it. We follow strict disclosure procedures which may mean we require proof of identity prior to disclosing such information. Please contact us using the details in Section 1 to submit a data subject access request.

13.2 The right to rectification

If you believe there are any inaccuracies, discrepancies or gaps in the information we hold about you, please contact us and ask us to update or amend it.

13.3 The right to restriction of processing

In certain circumstances, you have the right to ask us to stop using your personal information, for example where you think the personal information we hold may be inaccurate or where you think we no longer need to use it.

13.4 The right to withdraw your consent

Where we rely on your consent to process your personal information, you have the right to withdraw such consent to further use of your personal information at any time.

13.5 The right to erasure

You are entitled to request your personal information to be deleted in certain circumstances, such as where we no longer need your personal information for the purpose we originally collected it. When you exercise this right, we need to consider other factors such as our own regulatory obligations.

13.6 The right to object to direct marketing

You have the right to request that we stop sending you marketing messages at any time. You can do this by clicking on the “unsubscribe” button in any email we send you, or by contacting us using the details in Section 1. Please note that, even if you opt out of receiving marketing messages, we may still send you communications which are relevant to the nature of services we offer you.

13.7 The right to object to processing

In certain circumstances, where we only process your personal data because we have a legitimate business need to do so, you have the right to object to our processing of your personal data.

13.8 The right to data portability

In certain circumstances, you can request that we transfer personal information that you have provided to us to a third party. When you exercise this right, we need to consider other factors such as our own regulatory obligations.

13.9 Rights relating to automated decision-making

We do not carry out automated decision-making to provide products and services to you.

13.10 Use of Artificial Intelligence (AI)

We may use artificial intelligence (AI) tools to support our business processes, for example to create efficiencies or assist in improving our services so that we may deliver better client outcomes. Where AI is used, we will always ensure that a human being can oversee and/or be involved in any decision informed by such tools.

We may also engage third-party service providers who use AI technologies to support the delivery and improvement of our services. Such third-party AI systems will strictly only be used where approved by us in writing, with human oversight maintained at all times. We continuously seek to ensure that any processing by any autonomous or semi-autonomous AI system does not prevent the fulfilment of individual data subject rights.

13.11 The right to make a complaint with the ICO

If you believe that we have breached data protection laws when using your personal information, you have the right to complain to the Information Commissioner’s Office (ICO).

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline: 0303 123 1113. Website: www.ico.org.uk/make-a-complaint.

Please note that lodging a complaint with the ICO will not affect any other legal rights or remedies that you have.

14. Contacting us

If you would like any further information about any of the matters in this notice or if you have any other questions about how we collect, store or use your personal information, please contact:

Data Protection Enquiries

Eight Financial Advice

Fusion 1, Parkway

Whiteley, Fareham

Hampshire, PO15 7AA

Email: hello@eightfinancialadvice.co.uk

Telephone: 01489 555180

Alternatively, you may contact the St. James’s Place Data Protection Officer at: St. James’s Place plc, St. James’s Place House, 1 Tetbury Road, Cirencester, Gloucestershire, GL7 1FP. Email: dpo@sjp.co.uk. Telephone: 01285 878453.

15. Updates to this notice

From time to time we may need to make changes to this notice, for example as the result of changes to law, technologies or other developments. We will provide you with the most up-to-date notice on our website.

This notice was last updated on 22 April 2026.