Privacy policy
Your rights, your information and how we use it.
WPS Advisory Limited (trading as WPS Advisory, OneYou and LifeStage) is committed to protecting your personal identifiable information (PII). This Privacy Policy explains what personal data we collect through our information-only website, how we use it, who we may share it with, why, and your rights and choices regarding your data. This website provides general financial information and educational content only – we do not provide personal financial advice through this website. Whether we collect data for our services or about our staff, all personal details—however collected, recorded, or used, regardless of the media—have appropriate safeguards applied in line with the Data Protection Act 2018 and UK data protection legislation.
We may update this Privacy Policy periodically. Please check our website for the latest version or contact us. We will notify you of significant changes via email or other appropriate channels.
Who we are
WPS Advisory Limited (trading as WPS Advisory, OneYou and LifeStage) is authorised and regulated by the Financial Conduct Authority (FCA) for regulated advice (FCA Reference Number: 624546). You can verify this at https://register.fca.org.uk or by contacting the FCA at 0300 500 8082.
We act as data controllers and processors under the Data Protection Act 2018.
As Data Controllers: We determine the purposes and means of processing your personal data for our services.
As Data Processors: We receive personal data from third parties (data controllers) such as employers or pension scheme trustees, where we process data on their behalf according to their instructions.
It is your responsibility to keep your personal data accurate and current by informing us of any changes during our relationship.
All information, including PII, is encrypted. Sensitive data transmitted over public networks is protected using encryption techniques such as VPN, SSL, and IPSEC.
How to contact us
For questions about this Privacy Policy or your data, contact:
The Data Protection Officer WPS Advisory Limited Suite A, 5th Floor, West One, Newcastle upon Tyne, NE1 3PA Email: dataprotectionenquiries@wpsadvisory.com
A copy of our Privacy Notice is available at https://wpsadvisory.com/privacy-policy/. Contact us to request a copy. Please allow one month for our response.
The information we collect and use
We collect and use personal data to provide financial information through our website, facilitate inquiries about our services, and maintain our records. The data is sufficient, relevant, and limited to these purposes, including:
Personal Information
- Information about you, e.g., name, address, contact details, gender, date of birth, National Insurance number, pension reference number, benefits details, service periods, and, if employed and an active pension scheme member, salary details.
- Information about your product or service, e.g., bank account details.
- Information from your interactions, e.g., forms on our website, inquiry forms, consultation requests, emails, letters, and details you provide when seeking information about our services.
Website Data
- Contact Form Data: Information submitted through website contact forms, inquiry forms, and consultation requests.
- Website Analytics: Data about your website usage, including pages visited, time spent on site, bounce rates, and user journey patterns.
- IP Addresses and Browser Information: Technical data including IP address, browser type and version, operating system, referring website, and device information.
- Cookies and Tracking Data: Information collected via cookies and similar technologies (see detailed cookies section below).
- Marketing Data: Email addresses and preferences for those who subscribe to our marketing communications.
Other Data Categories
- Access data for online services, e.g., name, email address, date of birth, National Insurance number.
- Special category data, e.g., health, marital or civil partnership status, collected only with your consent for specific products or to comply with legal obligations.
- Information about others you provide (e.g., spouse, partner, dependants over 13), where you are responsible for obtaining their consent for our use per this Privacy Policy.
- For website users under 18, we may collect limited data only where a parent or guardian provides consent, with communication directed to the parent/guardian.
Where we collect and use sensitive personal identifiable information, this information will only be collected and used where it is needed to provide the product or service for which we have been contracted to supply or to comply with legal obligations.
What are cookies?
Our cookie policy is part of this Privacy Policy. A cookie is a small file requesting permission to be placed on your computer’s hard drive. Cookies help analyse web traffic, track site visits, and personalise web applications based on your preferences.
Types of cookies we use:
Essential Cookies: Necessary for website functionality, including:
- Session management cookies
- Security cookies
- Load balancing cookies
Analytics Cookies: Help us understand website usage, including:
- Google Analytics cookies to track visitor behavior
- Performance monitoring cookies
- User experience improvement cookies
Functional Cookies: Enhance website experience, including:
- Language preference cookies
- User interface customization cookies
- Form completion assistance cookies
Marketing Cookies (with consent): For marketing purposes, including:
- Advertising preference cookies
- Social media integration cookies
- Email marketing tracking cookies
Managing Cookies
You can accept or decline cookies via browser settings, though declining may limit website functionality. You can also manage your cookie preferences through our cookie consent manager available on our website.
Learn more at http://www.allaboutcookies.org. For cookie-related questions, email dataprotectionenquiries@wpsadvisory.com.
Where we collect your information
We collect personal data directly from you or various sources, including:
Direct Collection
- Website Forms: Contact forms, inquiry forms, and consultation requests
- Direct Communications: Phone or video calls (voice recorded), emails, letters, or meetings with our advisers
- Registration: Registration with us, getting to know you questionnaires, fact finds, or product/service applications
Third-Party Sources
- Your employer or pension scheme trustee, if you are a member of an employer’s pension scheme
- Other investments with discretionary fund managers or insurance companies, with your permission
- Public or commercial sources (e.g., business directories) to verify or enhance data (e.g., address, contact details)
Website Analytics
- Automated Collection: Website visitor data collected through analytics tools, cookies, and tracking technologies
- User Behavior: Page views, session duration, click-through rates, and navigation patterns
Why we collect and how we use your information
We take your privacy seriously and we will only ever collect and use in a transparent manner information which is personal to you where it is necessary, fair and lawful to do so for the completion of our services, as well as limiting access to your personal data to those needing to carry out the processing.
We will collect and use your information only where one of the following lawful processing conditions set out under the Data Protection laws is satisfied:
- Contract Performance: Responding to inquiries and facilitating consultations for potential financial services (following separate consultation and agreement processes)
- Legal Obligations: Meeting legal or regulatory obligations (e.g., annual reviews, fraud prevention, terms updates)
- Legitimate Interests: Our legitimate interests include providing relevant financial information to help you understand your options; processing information to better understand visitor needs and improve our website content; website analytics to improve our services; and maintaining our own accounts and records. We will only process data for legitimate interests where these interests do not override your fundamental rights and freedoms.
- Third-party Legitimate Interests: Third-party legitimate interests (e.g., sharing with your employer’s pension scheme administrator for governance)
- Consent: Your consent to send information about our products, services, or selected third parties, or for marketing communications
If you do not permit data collection, we may be unable to respond to your inquiries or provide full website functionality.
Third parties with whom we may share your information
We share your data with third parties for the purposes above, including:
Service Providers
- Website Analytics: Google Analytics and other analytics providers for website performance monitoring
- Email Marketing: Email service providers for newsletter and marketing communications
- Website Hosting: Hosting providers and content delivery networks for website operation
- IT Support: CRM, hosting, IT support providers for system administration, security, storage, backup, or recovery
Financial Services Partners
- Companies providing benefits comparison illustrations (when you request information)
- Insurance and investment companies (when facilitating inquiries about their products)
- Professional advisers (when you request consultation referrals)
Regulatory and Legal
- Regulators, ombudsmen, credit reference agencies, law enforcement, or HMRC for compliance or crime prevention
- Insurers or parties with legitimate business concerns
- Legal advisors and auditors as required
Marketing Partners (with consent)
- Selected third-party service providers for marketing purposes (only with your explicit consent)
We never sell your data. Data sharing complies with our obligations to keep your information secure.
Where your information is processed
The data you provide to us is primarily held in the UK and may also be held within the EEA or in countries with the same or equivalent levels of data protection, including in the US with organisations certified under the Data Protection Framework. If you have any questions or concerns about your data held with us you can write to the Data Protection Officer at the address above.
How we protect your information
We prioritise information and system security, complying with data protection obligations. All personal data, whether on paper, online, or other media, is safeguarded. Methods for handling data are documented, with procedures and audits ensuring compliance. Independent assurance and benchmarking by third-party consultants verify our security controls.
Employees are supervised, contractually obligated to protect sensitive data, and trained annually on GDPR and security. Our controls align with industry standards, managing risks to data confidentiality, integrity, and availability. Our controls also fall in line with our ISO requirements including ISO 27001 (information security management), ISO 27701 (privacy information management), and ISO 9001 (quality management).
How long we keep your information
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and maintain appropriate records for business purposes.
We will keep your personal data where you have made contact with us. If you have engaged with us and sought our guidance and advice then in most circumstances we will not delete your data. We keep your information only where required to meet our legal or regulatory obligations. The length of time we keep your information for these purposes will vary depending on the obligations we need to meet.
For website visitors who do not engage our services, we retain data only for as long as necessary for the purposes for which it was collected, including:
- Analytics Data: Retained for business analysis and website improvement purposes
- Contact Form Data: Retained to respond to inquiries and potential future engagement
- Cookies: As specified in our cookie settings and browser preferences
We regularly review our data retention and will delete personal data when it is no longer needed for legitimate business purposes, unless we are required to retain it for legal or regulatory obligations.
In certain circumstances, if you do not make any contact with us, we will anonymise your records after a set period of time.
Your individual rights
Under Data Protection laws, your rights include:
- Right to be informed: Clear information about your data, its use, and sharing, as provided in this Privacy Policy
- Right of access: Request a copy of your data via a data subject access request, provided in a machine-readable format
- Right to rectification: Correct inaccurate or incomplete data, verified as part of our practices
- Right to erasure: Request data deletion if no compelling reason exists for retention
- Right to restrict processing: Request suppression of data processing in specific circumstances
- Right to data portability: Obtain your data for use across services (e.g., with another adviser)
- Right to object: Object to data processing for our legitimate interests, though this may limit our ability to provide advice or website functionality. We may continue processing where we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims
- Rights related to automated decision-making: We do not use automated decision-making or profiling
Cookie Rights
You also have specific rights regarding cookies:
- Consent Management: Withdraw or modify cookie consent at any time
- Browser Controls: Manage cookies through your browser settings
- Preference Centre: Use our website cookie preference centre to control non-essential cookies
Contact the Data Protection Officer to exercise these rights. Most requests are free, with a one-month response time.
Marketing Communications
Our Marketing Approach: We do not use your personal data for unsolicited direct marketing. We will only send you marketing communications where you have specifically consented to receive them.
If you have consented to receive marketing communications, you may:
- Unsubscribe: Use the unsubscribe link in any email communication
- Email Preferences: Contact us to modify your email preferences
- Opt-out: Contact our Data Protection Officer to opt out of all marketing
We will always respect your communication preferences and marketing choices.
Force Majeure
We always want to deliver the service you are paying us to provide. However, there may be exceptional circumstances which mean this is not possible for reasons that are outside our control. Wherever possible we will give you advance notice if as a result we have to change the service we are able to provide. We will always seek to return to providing you with the service as soon as possible.
We will only do this due to occurrences that are not caused as a result of our fault or negligence and which we are unable to control, prevent or provide against through the exercise of reasonable care and diligence. These occurrences will include but will not be limited to war, civil war, act of God, fires, flood, epidemic, utility disruption, subsidence, strikes, lock-outs, insurrection or riots, embargoes, unavailability of raw materials or services, delays in transportation, changes to requirements or regulations of any governmental authority or regulatory authority.
How to make a complaint
If you believe we have not handled your data per this Privacy Policy, contact:
The Data Protection Officer WPS Advisory Limited Suite A, 5th Floor, West One, Newcastle upon Tyne, NE1 3PA Email: complaints@wpsadvisory.com
We will address your concerns. You may also complain to the Information Commissioner’s Office:
Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline: 0303 123 1113 https://ico.org.uk/make-a-complaint
Changes to this Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending email notifications for significant changes
- Updating the “last modified” date at the bottom of this policy
Contact Information
WPS Advisory Limited (Trading as WPS Advisory, OneYou and LifeStage)
Suite A, 5th Floor, West One, Newcastle upon Tyne, NE1 3PA
Phone: 0800 633 5911
Email: clientspecialistteam@ukwps.com
Website: www.wpsadvisory.com
Data Protection Officer
Email: dataprotectionenquiries@wpsadvisory.com
Website PP V1 11062025
You must be logged in to post a comment.