Data Subject Access Requests

1. Your rights

Under the UK GDPR and EU GDPR you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of personal data, subject to legal and regulatory retention obligations;
• restrict or object to certain processing;
• receive your personal data in a portable format; and
• withdraw consent at any time where processing is based on consent.

2. How to make a request

Send your request in writing to our privacy contact:

Privacy contact: privacy@frederic-james.com

Please include: your full name, the email address associated with your Frederic James account, the right(s) you wish to exercise, and a clear description of the information or action requested.

3. Identity verification

To protect your data, we will verify your identity before responding. We may ask you to confirm details we already hold, sign in to your account, or provide a copy of a government-issued photo ID. We will only use the information you provide for the purpose of verifying the request.

4. Response time

We will acknowledge your request without undue delay and respond substantively within one calendar month of receiving a verified request, as required by Article 12 of the UK GDPR and EU GDPR. Where a request is complex or where we receive multiple requests, we may extend this period by up to two further months and will tell you within the first month if we need to do so.

5. Fees

Requests are handled free of charge. We may charge a reasonable administrative fee, or refuse to act, where a request is manifestly unfounded or excessive, in particular because of its repetitive character.

6. Limitations on erasure

We may be required to retain certain personal data even where erasure is requested — for example, transaction records, customer due diligence documentation and other information we are obliged to keep under the UK Money Laundering Regulations 2017, tax law or accounting standards. Where this applies we will explain which information is retained and on what basis. See our Data Retention Policy.

7. Right to complain

If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority:

• United Kingdom — Information Commissioner's Office (ICO), ico.org.uk
• European Union — your local national supervisory authority. A directory is maintained by the European Data Protection Board at edpb.europa.eu