Privacy & Cookie Policy

We treat your right to privacy very seriously and we are committed to making sure your personal data is protected. Our Privacy Policy contains important information on how we comply with applicable UK data protection legislation. The Data (Use and Access) Act 2025 (‘DUAA’) sets out the rules about the data that we are permitted to collect, what we do with that information, who we may share it with, and your choices and rights relating to that data.

We have described below how we deal with your confidential information and who to contact if you have any questions. For details of the privacy policy that applies to the use of the YourCAM portal and app, please click here.

How to contact us

If you have any questions about our Privacy Policy or the information we collect and use about you, please contact:

Patsy Anang - Data Protection Officer
City Asset Management
7 Bishopsgate, London
EC2N 3AR                                 

Email:  CIS@city-asset.co.uk

What information do we collect on you?

In order to provide services to you, we will need to hold various types of data about you. We’ve described the type of information below, together with examples:

  • Information about who you are - name, date of birth and contact details.

  • Information connected to the service of your portfolio - bank account details, mandate, risk profile.

  • Information about your circumstances - your financial details, investment knowledge and objectives, employment, and other investments.

  • Information about your contact with us - meeting notes, phone calls, recordings of meetings, emails and letters.

  • Information that is automatically collected - cookies when you visit our website.

  • Information when you visit our office - visual images collected via closed circuit television (CCTV) or recordings of meetings.

  • Information collected as sensitive personal information - details relating to your health, marital or partnership status, and domestic arrangements. We are under the strictest possible obligations in relation to this type of information under DUAA and it would very rarely be shared with third parties.

  • Information you provide about other people - joint applicants or beneficiaries, or people authorised by you, such as accountants or solicitors.

  • Information on children and dependants - this will generally include name, age, gender, and current occupation.

How do we collect your information?

We mostly collect your personal information directly from you, including:

  • Application forms, fact finds and risk profiling.

  • Phone conversations.

  • Emails or letters you send to us.

  • Meetings with our team.

  • Our online services, such as yourCAM and this website.

If you have a financial adviser, the information we collect and use may have been provided by them on your behalf.  We may also collect personal information about you from places such as directories or other publicly available sources to check or improve the information we hold, like your address, or to give better contact information if we are unable to contact you directly.

How do we use your personal information?

We take your privacy seriously and we will only ever collect and use information which is personal to you where it is necessary and lawful to do so.  We will collect and use your information only where:

  • You have signed up for our portfolio management services or have asked us to provide you with financial advice. This may include us making data available to our agents and our third-party custodian for the purpose of executing orders, settlement of transactions and holding investments and money for you. It may also include other related purposes, such as printing your quarterly valuations and annual tax packs.

  • We must meet our regulatory obligations. This can include telling you about changes to our terms and conditions, preventing financial crime, and details required by regulatory or government agencies.

  • We may also share information with tax or regulatory authorities where we are required to do so.

  • Where we need to verify your identity so that we can comply with fraud, money-laundering and terrorist financing regulations.

  • If it is in your or our interest to provide you with information about investments that may affect you, or provide updates on changes that may impact you.  This may include changes to tax or regulatory rules or to our operations and services. If you have given us permission, we may also send you further information, such as our quarterly newsletter or invitations to events.

Please note that we only use details on children to manage portfolios where they may be the beneficiary and will only collect and use the information required to ensure the effective management of that portfolio. Where we collect sensitive personal data, we will only use this information where needed to provide our service to you or comply with our legal obligations.  When providing data is optional, we will ask for your consent.  However, if you do not wish us to collect and use your personal information in these ways, it may mean that we will be unable to provide you with our services.

If we change the way we collect, use or store your information, we will provide you with an updated policy and details on the changes.

Marketing Preferences

We may use your name, address and email address for marketing to you when you have consented for us to do so.  We will contact you according to your preferences and consent. You have the right to revoke consent at any time using the unsubscribe button on any email material or contacting us directly to remove you from our lists of marketing recipients. 

Who may we share your information with?

We may share your information with third parties for the reasons detailed above. Whenever we share your personal information, we will do so in line with our obligations to keep your information safe and secure. Third parties can include your financial adviser and companies who support us in the delivery of services we offer to you, such as SIPP providers.

All companies that process your data in relation to our services must undergo a due diligence process to ensure their integrity and commitment to providing the agreed service and protection of data provided to them.

In addition, to comply with law and regulations, we may need to supply your data to the following organisations:

  • Our regulators, the Financial Conduct Authority (FCA) and the Information Commissioner’s Office for the UK (ICO).

  • Law enforcement, credit and identify check agencies for the prevention and detection of crime.

  • HM Revenue & Customs (HMRC) for UK tax requirements and any other country in which you may have a tax liability.

We will never sell your details to someone else or pass them to a third party outside of the financial service industry who is not directly connected to the service we provide to you. 

How do we protect your information?

We take information and system security very seriously and we strive to meet the highest possible standards. We have achieved the Cyber Essentials Plus certification.

Any personal information which is collected, recorded or used in any way, whether on paper, online or via any other media, will have appropriate safeguards applied.

Your information is protected by controls designed to minimise loss or damage through accident, negligence or criminal activity such as hacking, cyber attack and fraud. Our employees also protect sensitive or confidential information when storing or transmitting information electronically, and we deliver regular mandatory training to all staff, regardless of their role at CAM. Our high levels of protection extend to working from home practices.

We encourage all clients to share information via our secure online portal YourCAM, to make sure it is encrypted.

Where is your information processed?

The majority of your information is processed in the UK and European Economic Area (EEA). 

However, some of your information may be processed by us or third parties we may work with outside of the EEA, including countries such as the United States.  Where your information is being processed outside of the EEA, we take additional steps to make sure that your information is protected to at least an equivalent level as would be applied by UK / EEA data privacy laws. We put in place legal agreements with our third-party suppliers and do regular checks to make sure they meet these obligations.

How long do we keep your information?

We will keep your personal information only where it is necessary to provide you with our products or services while you are a client.

We will also keep your information after this period where required to meet our legal or regulatory obligations. The length of time we keep your information for these purposes will vary depending on the specific obligations we need to meet.

What are your individual rights?

You have rights to access and amend the information that we are holding about you, and to restrict processing of it. For a list of your rights, please visit the Information Commissioner’s Office website. The Information Commissioner’s Office is the UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals.

How can you access the data we hold about you?

You have the right to request the personal information that we hold about you and for a copy of this information, please contact:

Patsy Anang - The Data Protection Officer
City Asset Management Plc
7 Bishopsgate
London
EC2N 3AR

CIS@city-asset.co.uk

We will provide the information to you or, in the case of more complex requests, provide you with the date when information will be available within 30 days of your request.

Cookies

A cookie is a small file of alphanumeric characters that is downloaded to your computer’s hard drive via your web browser, that allows the website you are accessing to recognise your device. They are widely used to help website efficiency as well as provide information to the website owners.

Our website currently uses cookies for two reasons.  Firstly, to improve your personal user experience and secondly to understand how our website is being used.  Most modern browsers allow you to decide whether to accept cookies, and how long to keep them, but, if you reject cookies, it may limit the functionality of this website.

This website is built on the Squarespace platform. Squarespace may use cookies which are necessary for the proper operation of their system, and to track the usage of this website. These cookies provide statistics to help us understand how the site is being used and, ultimately, provide an improved user experience. These statistics do not include your personal details or any other information that identifies you. 

Our website also uses Google Analytics, which are cookies designed to collect information on how visitors use our site. You can opt out of being tracked by Google Analytics across all websites here.

How we use cookies

We use Google Analytics to collect information about how people use this site. Google Analytics stores information about what pages are viewed, how long users are on the site, how they got here and what they have clicked on. We do not collect or store your personal information (e.g., your name or address) so this information cannot be used to identify who you are. We do not allow Google to use or share our analytics data and Google’s privacy policy is available here.

The following cookies are used by Google Analytics:

Name: _utma

Typical Content: randomly generated number

Expires: 2 years

Name:_utmb

Typical Content: randomly generated number

Expires: 30 minutes

Name:_utmc

Typical Content: randomly generated number

Expires: when you close your browser

Name:_utmx

Typical Content: randomly generated number

Expires: 2 years

In the future, our website may allow us to provide options to improve your visit. Our website may also use Javascript, and if so, it will identify if your browser has Javascript enabled and set a cookie for the duration of your visit.

Name: Has_js

Typical Content: randomly generated number

Expires: When you close your browser

Our website also checks to see if you are using a browser on a mobile device so that we can provide you with a version of the site that is easier to use on a smaller screen.  The site then sets a cookie so that every page is then delivered in the mobile version.

Name: Mobileplugin group

Typical Content: randomly generated number

Expires: When you close your browser

For more information on cookies, including how to manage and delete can be found here  

Third-party websites

We may provide links to other third-party websites.  We have no control over third-party websites and your data will be subject to the privacy policies of those sites.

Changes to privacy policy

We regularly review our privacy policy and may change it without notice. This policy was last updated in October 2025.