Privacy Policy - Truestone, Impact investment management

Privacy Policy

1. Introduction

This privacy notice explains how we collect and process your personal data when you use our site https://www.truestoneimpactinvestment.co.uk/ and/or our services. By providing us with your data, you confirm that you are over 13 years of age.

Data Controller:
TRUESTONE IMPACT INVESTMENT MANAGEMENT LIMITED (“we”, “us”, “our”) is responsible for your personal data.

Contact Details:

Legal Entity: Truestone Impact Investment Management Limited
Email: info@tiim.co.uk
Postal Address: 20 St Dunstan’s Hill, London EC3R 8HL

It is important that the information we hold about you is accurate and up to date. Please notify us of any changes by emailing enquiries@tiim.co.uk.

2. Personal Data We Collect, Purpose, and Legal Basis

Types of Personal Data:

Communication Data: Emails, messages, and social media communications.
- Purpose: Communication, record-keeping, legal compliance.
- Legal Basis: Legitimate interests.
Investor Data: Name, contact details, bank information.
- Purpose: Manage investments and send reports.
- Legal Basis: Performance of a contract and pre-contractual steps.
User Data: Website usage, posted content.
- Purpose: Website operation, security, backups, publications management.
- Legal Basis: Legitimate interests.
Technical Data: IP address, login details, browser information, page visits, navigation paths, time zone settings.
- Purpose: Analytics and website optimization.
- Legal Basis: Legitimate interests.
Marketing Data: Preferences regarding investment information and communication.
- Purpose: Deliver relevant content and ads.
- Legal Basis: Legitimate interests.
Sensitive Data: We do not collect sensitive data (race, religion, sexual orientation, political beliefs, or health data).

We may combine data types to deliver content and measure advertising effectiveness.

Failure to provide certain data may prevent us from providing our services.

3. How We Collect Personal Data

Directly from you via forms, emails, or communications.
Automatically via cookies and similar technologies (see our Cookie Policy).
From third parties like analytics providers (Google), advertising networks (Facebook), search engines, payment services, or public sources (Companies House, Electoral Register).

4. Marketing Communications

We may use your data for marketing based on consent or legitimate interests.

Under Privacy and Electronic Communications Regulations:

You may receive marketing if you’ve invested, requested info, or agreed to marketing.
Limited companies may receive emails without prior consent.
Opt-out anytime via unsubscribe links or by emailing enquiries@tiim.co.uk.

Marketing opt-out does not apply to personal data for investment purposes.

5. Disclosure of Personal Data

We may share your data with:

Service providers (IT, system administration).
Professional advisers (lawyers, auditors, insurers).
Government authorities as required by law.
Third parties in case of business sale, transfer, or merger.

All third parties must protect your data and process it only under our instructions.

6. International Transfers

Your data may be transferred outside the EEA under safeguards:

US providers under EU-US Privacy Shield or equivalent.
Specific contracts, codes of conduct, or EU-approved mechanisms.
Explicit consent when no other safeguard exists.

7. Data Security

We implement measures to prevent unauthorized access, loss, alteration, or disclosure. Only employees and partners with a business need can access your data.

Data breaches are handled according to legal obligations.

8. Data Retention

Investor data: retained for six years after investment ends (tax purposes).
Data may be anonymized indefinitely for research or statistical purposes.

9. Your Rights

You have rights under data protection laws: access, correction, erasure, restriction, objection, portability, and withdrawal of consent.

Requests: enquiries@tiim.co.uk. Verification of identity may be required. See ICO – Individual Rights.