At Plus Group, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect personal data when you interact with us, whether as a client, prospective client, supplier, prospective supplier, or website visitor.
It also explains your rights under data protection law and how you can exercise those rights.
This Privacy Policy is intended to meet our transparency obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy applies to personal data processed by Plus Group across all of its business services, platforms, and websites, including but not limited to:
References in this Privacy Policy to “Plus Group”, “we”, “us”, or “our” include all Plus Group entities and services unless stated otherwise.
This Privacy Policy applies to:
This Privacy Policy does not apply to the processing of personal data relating to employees, workers, contractors, or job applicants, which is covered by separate Employee and Recruitment Privacy Notices.
This Privacy Policy applies to data processing carried out in the United Kingdom and is governed by UK data protection law.
For the purposes of UK data protection legislation, Plus Group is the data controller for the personal data collected and processed in connection with our services, platforms, and websites.
This means we determine the purposes and means by which personal data is processed, in accordance with applicable data protection laws.
This Privacy Policy applies to Plus Group and all affiliated companies and brands operating under the Plus Group name, including those providing paraplanning services, technology platforms, AI-enabled tools, marketing services, and online directories.
If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us at:
Chandler House, 7 Ferry Road Office Park, Riverside, Preston, Lancashire, PR2 2YH
Scott Daniels
Our Data Protection Officer is responsible for overseeing Plus Group’s compliance with data protection law.
If you have any concerns about how your personal data is processed, or wish to exercise your rights under data protection legislation, you can contact the DPO using the details above.
We collect and process different types of personal data depending on how you interact with Plus Group, whether as a client, prospective client, supplier, prospective supplier, or website visitor.
If you are a client or a prospective client, we may collect and process the following categories of personal data:
This may include data processed through paraplanning services, technology platforms, AI-enabled tools, or online directories operated by Plus Group.
When you visit our websites or use our online services, we may collect:
Further information about cookies is set out in Section 6.
If you provide services to us as a supplier or prospective supplier, we may collect:
We do not intentionally collect special categories of personal data, such as health data, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data, through our public-facing services.
Where special category data is processed, this will only take place where:
In some circumstances, personal data relating to children may be processed by Plus Group, for example where we provide services to regulated adviser firms in connection with products or services for a child, such as a Junior ISA or other child-related financial arrangements.
In these circumstances:
Children’s personal data is handled with appropriate safeguards and in accordance with applicable data protection law and contractual obligations.
Plus Group does not knowingly collect children’s personal data directly through its public-facing websites, platforms, or marketing activities.
Plus Group collects personal data through a combination of direct interactions, automated technologies, and third-party sources, depending on the nature of the service or platform being used.
We may collect personal data directly from you when you:
Where Plus Group provides services to adviser firms, personal data may also be provided to us by those firms for the purpose of delivering contracted services, with the adviser firm acting as data controller and Plus Group acting as processor where applicable.
When you use our websites, platforms, or digital tools, we may automatically collect certain information through automated technologies, including:
This data is used to operate, maintain, secure, and improve our services and platforms.
We use cookies and similar technologies on our websites and online services to:
Further information about how we use cookies and how you can manage your preferences is set out in Section 6 of this Privacy Policy and in our Cookie Policy.
We may receive personal data from third-party sources where legally permitted, including:
Where personal data is obtained from third parties, we take reasonable steps to ensure that the data has been collected lawfully and that appropriate transparency information has been provided.
Plus Group processes personal data only where there is a lawful basis to do so and for specific, legitimate purposes. The purposes and lawful bases depend on the nature of the service provided and whether Plus Group is acting as a data controller or as a data processor on behalf of a client.
We may use personal data for the following purposes.
Clients and prospective clients
Where Plus Group processes personal data on behalf of adviser firms or other clients, this processing is carried out in accordance with documented instructions and applicable data processing agreements.
Website visitors and online users
Under UK data protection law, we rely on the following lawful bases when acting as a data controller:
Purpose
Lawful basis
Providing services and platforms
Performance of a contract
Managing client and supplier relationships
Performance of a contract / Legitimate interests
Responding to enquiries
Legitimate interests
Processing payments and invoices
Performance of a contract / Legal obligation
Improving services, platforms, and tools
Legitimate interests
Marketing communications
Consent, where required
Where Plus Group acts as a data processor, personal data is processed on the lawful basis determined by the relevant data controller, in accordance with contractual obligations and applicable law.
Some Plus Group services include AI-enabled functionality to support drafting, analysis, automation, or service delivery.
Where AI-enabled tools are used:
Cookies are small text files that are placed on your device when you visit a website or use an online service. They help us operate our websites and services, understand how they are used, and improve functionality and user experience.
Cookies may be:
Plus Group uses cookies and similar technologies for the following purposes:
Where required by law, non-essential cookies are used only with your consent.
You can manage your cookie preferences in the following ways:
Further information about cookies and how to manage them is available in our Cookie Policy.
Plus Group does not sell or rent personal data. We share personal data only where necessary for business operations, service delivery, legal compliance, or where required to support our services and platforms.
We may share personal data with trusted third-party service providers who support our operations, including:
These providers process personal data on our behalf under contractual arrangements that require them to:
Where Plus Group provides services to adviser firms or other professional clients, personal data may be shared with those clients where necessary to deliver the agreed services.
In such cases:
We may disclose personal data where required to do so by law or where disclosure is necessary to:
If Plus Group undergoes a merger, acquisition, reorganisation, or sale of assets, personal data may be shared with relevant third parties involved in the transaction, subject to appropriate confidentiality and data protection safeguards.
Personal data processed by Plus Group is primarily stored and processed within the United Kingdom.
Where personal data is transferred outside the UK, this will only take place where:
Safeguards may include:
Where Plus Group acts as a data processor on behalf of a client, any international transfers are carried out in accordance with the client’s instructions and applicable data processing agreements.
Plus Group ensures that any international transfers of personal data are limited, justified, and subject to appropriate oversight.
Plus Group retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including:
When personal data is no longer required, it is securely deleted, anonymised, or archived in accordance with our retention policies and applicable law.
Specific retention periods are set out in Plus Group’s Data Retention Policy. By way of summary:
Where Plus Group acts as a data processor, personal data is retained in accordance with the instructions of the relevant data controller and applicable contractual arrangements.
Plus Group implements appropriate technical and organisational measures to ensure personal data is stored securely.
When personal data is disposed of, this is done in a secure manner to prevent unauthorised access or disclosure.
Plus Group takes the security of personal data seriously and implements appropriate technical, organisational, and procedural measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
We have implemented a range of security controls designed to protect personal data processed across our services, platforms, and systems, including:
These measures apply across Plus Group’s paraplanning services, technology platforms, AI-enabled tools, and websites.
Plus Group maintains procedures for identifying, managing, and responding to personal data breaches.
Where a personal data breach occurs that is likely to result in a risk to the rights and freedoms of individuals, we will:
If you believe that your personal data has been compromised, you should contact us using the details set out in Section 12.
Plus Group may use personal data to send marketing communications relating to our services, platforms, tools, and events. These communications may include:
Marketing communications may relate to paraplanning services, technology platforms, AI-enabled tools, marketing services, or online directories operated by Plus Group.
We will only send direct marketing communications where we have a lawful basis to do so, such as your consent or a legitimate business interest, and in accordance with applicable marketing laws.
You have control over your marketing preferences and can opt out of marketing communications at any time by:
We will process opt-out requests promptly, though it may take a short period for changes to take effect.
Plus Group does not sell personal data to third parties for marketing purposes and does not permit third parties to use personal data for their own direct marketing.
Under UK data protection law, you have a number of rights in relation to your personal data. These rights apply to personal data processed by Plus Group when we act as a data controller. Where Plus Group acts as a data processor, requests will be handled in accordance with the instructions of the relevant data controller.
You have the right to:
To exercise any of your data protection rights, please contact our Data Protection Officer at:
Email: hello@plusgroup.org
We aim to respond to requests within one month. In some cases, we may need to verify your identity or extend the response time where requests are complex or numerous, in line with applicable law.
We take data protection seriously and encourage you to contact us if you have any concerns about how your personal data is handled.
If you have a complaint or concern regarding the processing of your personal data, please contact our Data Protection Officer using the details below:
Data Protection Officer
Plus Group
Email: hello@plusgroup.org
We will investigate your concern and respond within a reasonable timeframe.
If you are not satisfied with our response, or believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the UK data protection regulator:
Information Commissioner’s Office (ICO)
Website: www.ico.org.uk/concerns
Telephone: 0303 123 1113
Postal address: Information Commissioner’s Office,
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
If you are based outside the UK, you may also contact your local data protection authority.
We may update this Privacy Policy from time to time to reflect:
We encourage you to review this Privacy Policy periodically to stay informed about how we process personal data.
Where we make material changes to this Privacy Policy, we will:
The latest version of this Privacy Policy will always include the effective date at the top of the document.
Whether you need one-off expertise or tailored, ongoing support - we’re here to help you get it right.
Book a call
Back office support for financial advisers, firms and networks
