Privacy Policy
We, DAC SSAS Limited (DACSSAS), understand that protecting the privacy of our clients and visitors to our website is very important and that information about you is particularly sensitive.
This notice explains the terms under which personal information is obtained from our clients and stored by DACSSAS under the General Data Protection Regulation (GDPR) that came into effect on 25 May 2018.
DACSSAS will collect sufficient personal information from our clients in order to establish and administer Small Self-Administered Schemes. This includes basic facts such as their name, address, dependants and contact details but may include health information that is categorised under the GDPR as sensitive personal data, for which we will require the client to provide their explicit consent.
The lawful basis of the data processing is that the client (known as the ‘data subject’) is giving their explicit consent that collection of the data is necessary for the performance of a contract with DACSSAS in respect of the products and services provided in accordance with our Terms & Conditions.
Sharing Information
We may share client information with other product providers and third party investment advisers we use. We also have a legal obligation to provide information to government departments and regulatory bodies such as The Pensions Regulator (TPR) and Her Majesty’s Revenue & Customs (HMRC), appropriate Ombudsmen and the Information Commissioner’s Office (ICO). We may also use third party companies to administer and communicate information in respect of our legal and regulatory obligations.
DACSSAS (with its associated trustee company) are controllers and processors of the personal data clients provide to us. Our registered office is Bellingham House, 2 Huntingdon Street, St. Neots, Cambridgeshire, PE19 1BG.
Holding Client Personal Data
All the personal data we use is controlled by DACSSAS in the United Kingdom. No third parties have access to client personal data unless the law allows them to do so. We have a data protection regime in place to oversee the effective and secure processing of client personal data.
All information at DACSSAS is stored on secure servers. All our data transfers to and from authorised third party recipients have built-in security features, including encryption, to best protect your personal data. Email communications cannot be secured in such a robust manner, although we do endeavour to supply confidential information in password protected files wherever possible.
A client's basic personal data will be kept for a maximum of 6 years, or as long as is required by law, following the end of their business relationship with DACSSAS, after which time it will be destroyed.
Important Information
If at any point a client believes information that we retain about them is incorrect, the client can request to see this information and have it corrected and possibly deleted. The client may also request that their data be transferred to another data controller in a machine-readable format. Providing clients with their data information is free of charge, but charges may apply for excessive requests.
If a client wishes to raise a complaint on how we have handled their personal data, they can write to our Managing Director at DAC SSAS Limited, Bellingham House, 2 Huntingdon Street, St. Neots, Cambridgeshire, PE19 1BG. Alternatively they can email admin@dacssas.com or telephone us on 01480 595 800.
If a client is not satisfied with our response or believes we are not processing their data in accordance with the law, they can complain to the Information Commissioners Office (https://ico.org.uk/).
Where relevant, clients have the right to withdraw their general and explicit consent at any time, however, without their consent, we will not be able to process the data they have provided.