Introduction

Financial Holdings Limited referred to as ‘Financial Holdings’, ‘we’, or ‘our’ is committed to protecting and respecting your privacy and personal data.

This Privacy Notice explains how we collect, use, and process personal information about you during and after your relationship with us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR), as applicable.

Financial Holdings is a “Data Controller”. This means we are responsible for determining how and why your personal data is processed.

Financial Holdings is a registered business with the Jersey Financial Services Commission, registration number 122126. We are also registered with the Jersey Office of the Information Commissioner (JOIC), Registration number 65662.
We comply with applicable data protection laws, which require that personal data we hold about you must be:

1. Processed lawfully, fairly, and in a transparent manner.
2. Collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
3. Adequate, relevant, and limited to what is necessary in relation to those purposes.
4. Accurate and, where necessary, kept up to date.
5. Kept in a form which permits identification of data subjects for no longer than is necessary.
6. Processed securely using appropriate technical and organisational measures.

Financial Holdings is accountable to you and relevant supervisory authorities for demonstrating compliance with applicable data protection laws and principles.

The Data Protection Manager (“DPM”)

We have appointed a DPM to oversee compliance with this Privacy Notice and applicable data protection requirements.

If you have any questions about this Privacy Notice or how we handle your personal data, please contact the DPM at dpm@prospectcapital.je

The Kind of Information We Hold About You

Personal data means any information relating to an identified or identifiable individual. It does not include anonymised data where identification is no longer possible.

Where necessary, we will specify the categories of data collected in relation to the relevant service or interaction.

How Is Your Personal Information Collected?

We collect personal information when you contact us, visit our website, make an enquiry about our services, engage us for a specialist finance solution, or interact with us for other related purposes.

What Special Category Data do we collect about you?

We do not routinely collect special category data. In limited circumstances where such data is required (for example, relating to health), it will only be processed with your explicit consent or where otherwise permitted under UK GDPR and EU GDPR.

How We Will Use Information About You?

We will only use your personal data where a lawful basis under UK GDPR or EU GDPR applies. These include:

Most commonly, we will use your personal data in the following circumstances:

• Where processing is necessary for the performance of a contract, such as providing our services under a lending arrangement.
• Where we are required to comply with a legal obligation, including regulatory and disclosure requirements.
• Where it is necessary for our legitimate interests (or those of a third party), provided your rights and freedoms do not override those interests. For example, providing relevant updates about services you have previously used.

We may also process your personal data in the following limited circumstances:

• Where you have given your consent for a specific purpose.
• Where it is necessary to protect your vital interests or those of another person.

Change of purpose

We will only use your personal data for the purposes for which it was collected unless we reasonably consider that another compatible purpose applies.

If we need to use your personal data for an unrelated purpose, we will notify you and explain the lawful basis for doing so.

Specific Data Collection Points

Financial Holdings provides specialist finance solutions to clients across multiple sectors. We offer various funding options and asset-backed lending solutions.

We collect, process, and store personal data necessary to assess applications, manage relationships, and provide our services. We maintain appropriate governance and security measures to protect the data you provide.

The data collected for each application is, but not limited to:

Loan and Asset Finance Services

For more information about what information, we collect about you, please contact our DPM at dpm@prospectcapital.je

Data Sharing

We may, from time to time, share your personal data with organisations outside of Financial Holdings where they act as data processors on our behalf. These organisations are required to process your data strictly in accordance with our instructions and this Privacy Notice.

We ensure that all data processors are subject to appropriate contractual safeguards requiring compliance with UK GDPR and EU GDPR standards.

One such service provider is Mailchimp, which we use to manage email communications. Your email address may be stored within systems operated by Mailchimp for the purposes of delivering these services. You can review their privacy notice here: https://mailchimp.com/en-gb/gdpr/

We do not share your personal data with third parties unless there is a lawful basis to do so. This may include compliance with legal obligations, regulatory requirements, or valid requests from public authorities.

Your personal data may be transferred to and stored in countries outside the European Economic Area (EEA).

Where such transfers occur, we ensure appropriate safeguards are in place to protect your personal data in accordance with this Privacy Notice and applicable data protection laws, including UK GDPR and EU GDPR requirements.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against accidental loss, misuse, alteration, unauthorised access, or disclosure.

Access to personal data is restricted to employees, agents, contractors, and authorised third parties who require access for legitimate business purposes. All such parties are subject to strict confidentiality obligations.

Further details of our security measures can be requested from our DPM at dpm@prospectcapital.je

We have procedures in place to respond to suspected personal data breaches and will notify you and any relevant supervisory authority where we are legally required to do so.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting, or reporting requirements.

Retention periods are determined based on the nature, sensitivity, and volume of the data, the potential risk of harm from unauthorised use or disclosure, and applicable legal obligations.

Where appropriate, we may anonymise personal data so that it can no longer be associated with an identifiable individual. In such cases, the data may be used without further notice.

A copy of our retention schedule is available upon request from our DPM at dpm@prospectcapital.je

Rights of Access, Correction, Erasure, and Restriction

You have rights under UK GDPR and EU GDPR in relation to your personal data. It is important that the information we hold about you is accurate and up to date, and you should inform us of any changes.

Subject to legal conditions, your rights include:

• Right of access – to request a copy of the personal data we hold about you and confirmation of how it is being processed.
• Right to rectification – to request correction of inaccurate or incomplete personal data.
• Right to erasure – to request deletion of your personal data where there is no lawful reason for us to continue processing it.
• Right to object – to object to processing based on legitimate interests or for direct marketing purposes.
• Right to restriction of processing – to request suspension of processing in certain circumstances, such as while accuracy is being verified.
• Right to data portability – to request transfer of your personal data to another organisation, where applicable.

If you wish to review, verify, correct, or request deletion of your personal information, object to its processing, or request that we transfer a copy of your personal data to another party, please contact our DPM at dpm@prospectcapital.je

You will not be required to pay a fee to access your personal data (or to exercise any of your other rights). However, we may charge a reasonable fee where a request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with such requests in limited circumstances permitted by law.

How to Request Your Information and Identity Verification

Please use the Data Subject Access Request form, available via our Cookie Banner. If you have any questions about this process or your rights, you may contact our DPM at dpm@financialholdingsltd.com

We may request specific information from you to confirm your identity and ensure your right to access the information or exercise your rights. This is a security measure to prevent personal data from being disclosed to unauthorised individuals.

We will respond to your request without undue delay and in any event within four weeks of receipt and satisfactory identity verification. Where requests are complex or numerous, this period may be extended by up to a further eight weeks, and you will be informed where this applies.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

To withdraw consent, please contact our DPM at dpm@financialholdingsltd.com

Once consent is withdrawn, we will cease processing your personal data for the relevant purpose unless another lawful basis applies under UK GDPR or EU GDPR.

Changes to this Privacy Notice

We may update this Privacy Notice from time to time. Where changes are significant, we will notify you accordingly.

We may also communicate updates regarding how your personal data is processed or request confirmation that your information remains accurate.

Complaints

We aim to resolve any concerns you may have regarding the handling of your personal data. However, you also have the right to lodge a complaint with the Jersey Office of the Information Commissioner (JOIC).

Contact details are as follows:

Financial Holdings
One Liberty Place, Liberty Wharf, La Route de la Liberation, St Helier, Jersey, JE2 3NY
Telephone: (+44) 1534 288 977
Email: dpm@financialholdingsltd.com