The purpose of this policy is to outline Magna Financial’s policy with regards to how we manage data that is collected
1. Who are we?
We are a payment institution authorised and regulated by the Financial Conduct Authority (FCA) in the UK with Firm Registration Number 807745. We provide Foreign Currency Exchange (FX) and Payment Services.
2. What personal information do we collect?
3. How do we use your information?
The way we collect and use data is always lawful. We use your personal data to provide information on the services you have requested or products you have ordered. Data is collected and used on a lawful basis where our interests do not outweigh your interests which is outlined below.
We use your data to:
3.1 Provide our products and services to you under contract. We:
- Take steps prior to entering into a contract.
- Decide whether to enter a contract.
- Manage and perform a contract.
- Make sure our records are up to date.
3.2 Fulfil our legal obligations:
- When you exercise your rights under GDPR (General Data Protection Regulation) and make requests.
- For compliance with legal and regulatory requirements, and related disclosures.
- For the establishment and defence of legal rights.
- For activities relating to the prevention, detection and investigation of crime.
- To verify your identity and prevent fraud and money laundering, including sharing the data we have collected from you with fraud prevention agencies. By law, we are required to review transactions and report any which may be suspected of being related to money laundering activities.
- To monitor communications (emails, calls and other) and activities on your account.
- Carry out our legitimate interests, without acting against your privacy rights
- For good governance, accounting, managing and auditing our business.
- For market research, analysis and developing statistics.
3.3 With your consent, we:
- Send you marketing communications.
- Disclose your personal data to other people or organisations when you ask us to.
- Process any special categories of personal data at your request.
4. How long do we hold on to your information?
We keep your data whether you become a Magna Financial customer or not:
- For as long as it takes to deal with your query
- For as long as you might legally bring a claim against us
- After your account has been closed or otherwise come to an end based on our legal and regulatory requirements
5. What are your rights?
Under GDPR (General Data Protection Regulation), you have:
- The right of access
- The right of rectification
- The right of erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling
If you would like further information about data protection you can visit the Information Commissioner’s Office (ICO) at www.ico.org.uk. The ICO is the UK’s independent authority set up to uphold information rights in the public interest and data privacy for individuals. We comply with all ICO regulatory and statutory requirements. You have the right to make a complaint to the ICO regarding the handling of your data.
6. Fraud prevention and money laundering checks
We may use your personal details in order to conduct identity checks as required by law as a measure to prevent money laundering.
The personal data we have collected from you at application or any stage may be shared with fraud prevention agencies. We are required by law to review transactions and report any which may be suspected of being related to money laundering activities.
7. Automated decision making
We may process your personal data without human intervention to evaluate your personal situation, such as transactional history and account-opening anniversary events. We may do this to decide what marketing communications might be suitable for you, to analyse statistics and to assess risks.
This is all done on the basis of our ‘legitimate interests’, to protect our business, and to develop and improve our products and services. If we use automated decision-making including profiling activity to assess your application, this will be performed on the basis of it being necessary to perform the contract.
8. Sharing your information
We will not sell, share, or rent your information to others except as set out in this policy.
We may share your information with:
- Organisations that provide operational services relating to the performance of the Equals cards or services that you use. Our strategic partners are, where required by law, authorised and regulated to the required standards.
- Suppliers, such as card producers, when it is necessary in order to fulfil our obligations to you in setting up and maintaining your account.
- The purchaser of the company or the purchaser of its assets in the event of the sale of the company or its assets. While our website may contain links to other sites, we are not responsible for their privacy practices or content.
While our website may contain links to other sites, we are not responsible for their privacy practices or content.
We won’t provide your details to third parties. We have no responsibility or liability for their practices.
When we collect information (e.g. on hobbies and lifestyle) from competitions, we won’t share this with sellers, however we may occasionally share unidentifiable, aggregate data.
10. Transferring your information overseas
We might transfer your personal data outside of the UK and EEA (European Economic Area). In this event, we will always take all necessary steps to ensure the data is held securely and processed in line with applicable laws to the UK.
11. Opting out of marketing preferences
You are free to opt out of receiving all marketing communications from us and our strategic partners at any time by contacting us via email at firstname.lastname@example.org.
Should you be opted in to receive email correspondence, there is an unsubscribe link in each email we send out, if you use this, we will not send any unsolicited mail to your registered email address.
Communications regarding changes to existing products or services held, our terms, conditions and policies are important and sometimes critical. You may not opt out of receiving these communications.
13. Reviewing, correcting or updating your personal data
If any of your details are recorded incorrectly and need to be changed, please contact us on +44 (0)203 371 9966 or email us at email@example.com with details of the required changes and the reasons for the change. Proof of change of address may be needed.