The Investment Association

A company limited by guarantee

Fundipedia Limited

A limited company

The Investment Association (the "IA") and Fundipedia Limited ("Fundipedia") have made the IA’s common shareclass register (the "Common Shareclass Register") available to the general public on this dedicated website powered by Fundipedia, which compiles data regarding United Kingdom ("UK") investment funds’ operated and/or managed by IA members and/or other firms within the financial services industry (the "Website").

The IA and Fundipedia ("we", "us", "our") are committed to protecting and respecting your privacy.

This privacy policy (the "Policy") (together with our terms of use and any other documents referred to in it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting our Website,  www.commonshareclassregister.org, you are accepting and consenting to the practices described in this Policy. You can withdraw such consent at any time.

This website is hosted by Microsoft Azure, in the United Kingdom.

For the purpose of the Data Protection Act 2018 ("the Act") and Regulation (EU) 2016/679 as it forms part of the law of England and Wales by virtue of section 3 of the European Union (Withdrawal) Act 2018 and as implemented by the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019, together with any equivalent legislation relating to the protection of personal data following the UK’s withdrawal from the EU (the "General Data Protection Regulation" or "GDPR"), the data controller is The Investment Association of Camomile Court, 23 Camomile Street, London EC3A 7LL and the data processor is Fundipedia Limited of Unit 7 - Ground Floor Britannia Business Park, Comet Way, Southend On Sea, Essex, England, SS2 6GE.

As used in this Policy, the term "Regulations" shall include, together, the Act and the General Data Protection Regulation, each of them, as from time to time applicable, amended, restated or supplemented and any other applicable UK legislation relating to the protection of personal data.

1. INFORMATION WE MAY COLLECT FROM YOU

We may collect and process the following data about you (including without limitation):

1.1 Information that you give us

You may give us information about you by filling in forms on our Website or by corresponding with us by phone, e-mail or otherwise. This includes information you provide when you register to use our Website, post material, participate in social media functions on our Website, request further services and when you report a problem with our Website. If you contact us, we may keep a record of that correspondence. We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them. The information you give us may include your name, e-mail address and phone number.

1.2 Information we collect about you

With regard to each of your visits to our Website we may automatically collect the following information:

1. technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this Website;
2. contact data, including your email address once you register an account with us via our Website;
3. identity data, including your first name, last name, username or similar identifier and title;
4. profile data, including your username, password and preferences; and
5. information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our Website (including date and time); services you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.

1.3 Information we receive from other sources

We may receive further information on the categories set out above about you if you use any of the other websites we operate or the other services we provide. In this case, any data collected may be shared internally and combined with data collected on this Website. We may also work closely with third parties (including, for example, business partners, sub-contractors, analytics providers, search information providers) and may receive information about you from them.

2. COOKIES

We collect some information on this website through the use of 'cookies'. To find out how we use them, see our cookie notice here https://www.fundipedia.com/cookie-policy

3. USES MADE AND PROCESSING OF THE INFORMATION

We may use information held about you (information that you give to us, information we collect about you and information we receive from other sources) in the following ways:

3.1 Information you give to us

We may process information that you give to us:

1. to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us;
2. to notify you about changes to our service;
3. to ensure the security of our Website and services, maintaining back-ups of our databases and communicating with you and record-keeping;
4. for the purposes of offering, marketing and selling relevant products and/or services to you;
5. for the purposes of supplying goods and/or services that we may from time to time advertise and sell through our Website, and keeping proper records of those transactions;
6. to analyse the use of the Website and services;
7. to ensure that content from our Website is presented in the most effective manner for you and for your computer; and
8. in general, we may process any of your personal data with the purpose to comply with any legal obligation to which we are subject.

Information you give us may comprise:

1. information contained in or relating to any communication that you send to us, including any metadata associated with the communication, where applicable (such as marketing and communications data, including your preferences in receiving marketing from us and our third parties and your communication preferences);
2. contact information, including your email address;
3. identity information, including your first name, last name, username or similar identifier and title;
4. profile data, including your username, password and preferences; and
5. information containing personal views or comments that you might have made directly to us in any form or that are in the public domain in any form or shape, which may or may not be linked to a particular role or position of public interest that you may hold or may have held in the past or your personal or particular views in relation to a particular subject matter of certain general interest.

3.2 Information we collect about you

We may process information that we collect about you:

1. to administer our Website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
2. to improve our Website to ensure that content is presented in the most effective manner for you and for your computer;
3. to allow you to participate in interactive features of our service, when you choose to do so;
4. as part of our efforts to keep our Website safe and/or secure;
5. to make suggestions and recommendations to you and other users of our Website about services that may interest you or them;
6. to collect broad demographic information for aggregate use; and
7. in co-operation with your internet provider, to identify you if we feel it is necessary to enforce compliance with our terms of use or to protect our service, Website, users or others.

The legal basis for this processing is our legitimate interests and business and the proper administration of our Website and applicable businesses.

3.3 Information we receive from other sources

We may combine information that we receive about you from other sources with information you give to us and information we collect about you. We may use this information and the combined information for the purposes set out above (depending on the types of information we receive).

To this extent, we may collect information about any public or private role, public service position or public profile that may be available in the public domain, as well as any declarations, opinions, comments or any other information about you that, linked to your public profile, may be of public domain and widely available to the public in general.

3.4 Information of third parties

You will not supply to us, and we will not accept, any other person’s personal data other than your own personal data.

4. WHERE WE STORE YOUR PERSONAL DATA

The data that we collect from you is hosted and stored in the United Kingdom.

Your data may be transferred to, and stored at, a destination outside the UK. It may also be processed by staff operating outside the UK, who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the provision of services to you and the provision of support services. By submitting your data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy and in compliance with the Regulations.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your data, we cannot guarantee the security of your data transmitted to our Website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

You acknowledge that any personal data that you submit for publication through our Website or services may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal data by others.

5. DISCLOSURE OF YOUR INFORMATION

5.1 Group members

We may share your information with any member of our respective groups, which means our respective subsidiaries, ultimate holding companies and applicable subsidiaries, as defined in section 1159 of the UK Companies Act 2006 for the purposes set out in this Policy.

5.2 Selected third parties

We may also share your information with selected third parties for the purposes set out in this Policy. These selected third parties may include:

1. business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you, including payment services providers;
2. analytics and search engine providers that assist us in the improvement and optimisation of our Website; and
3. insurers and/or professional advisors for the purposes of maintaining appropriate insurance levels, managing risks, obtaining legal advice and managing disputes.

We may disclose your information to third parties:

1. in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
2. if substantially all of either of our assets are acquired by a third party, in which case personal data held by it about its members will be one of the transferred assets; 
3. if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; and/or
4. to protect the rights, property, or safety of Fundipedia and the IA and any of the IA’s members or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

6. RETENTION AND DELETION OF PERSONAL DATA

We will not retain and store any personal data for longer than it is necessary for the purposes of compliance with our legal obligations under the Regulations.

We will retain your personal data for a minimum period of two (2) years, or as any other longer period that may be imposed to us by law or by the Regulations (the "Data Retention Period").

Upon elapsing of the Data Retention Period, all your personal data stored and retained by us will be deleted from its files and records.

7. YOUR RIGHTS

Your rights under the Regulations are:

7.1 Information

You have the right to be informed of your rights and how your personal data will be stored, treated, deleted and controlled, as all is set out in this Policy.

7.2 Access to information

You have the right to access your personal data, so that you are aware of and can verify the lawfulness of the processing. The Regulations give you the right to access information held about you. Your right of access can be exercised in accordance therewith. Any access request is free of charge.

Please note that we reserve the right to charge a reasonable fee taking into account the administrative costs of providing the information and/or refuse to respond to any access request, should any such requests be manifestly unfounded or excessive, if in particular, these requests are repetitive.

We aim to reply to any requests with undue delay and within two months from the receipt of the request, unless the complexity of the request so requires. We shall inform you of any delays that may occur in replying to any request that you may have submitted to us. If any such requests are denied, you would have the right to complain to the supervisory authority (the Information Commissioner’s Office).

7.3 Rectification

Where applicable, if we hold personal information about you, it is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us.

You have the right to rectification of any data that is incorrect and, taking into account the purposes of the processing, you have the right to request that any incomplete information is completed.

7.4 Erasure

You can request that any data is erased:

1. where the personal data is no longer necessary in relation to the purpose for which it was originally collected/processed;
2. when you wish to withdraw consent;
3. when you object to the processing and there is no overriding legitimate interest for continuing the processing;
4. when your personal data has been unlawfully processed in breach of the Regulations;
5. when your personal data has to be erased in order to comply with a legal obligation; and
6. when your personal data is processed in relation to the offer of information society services to a child.

7.5 Restriction

Processing of your personal data will be restricted in any of the following circumstances:

1. where there is a contest regarding the accuracy of your personal data, we will restrict any processing until the data has been verified;
2. where you object to the processing and we need to consider whether our organisation’s legitimate grounds override yours as a data subject;
3. when processing is unlawful and you oppose erasure and request restriction instead; and
4. we no longer need your personal data but that you require the data to establish, exercise or defend a legal claim.

7.6 Data Access Portability

You may also, free of charge, request to view, access and use your personal data (and if applicable your transaction data) in a way that is generally portable. We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

7.7 Objection

You may express an objection on grounds relating to your particular situation to:

1. processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling);
2. direct marketing (including profiling); and
3. processing for purposes of scientific/historical research and statistics.

7.8 Rights in relation to automated decision making and profiling

You may object to being subject to any automated data processing decisions, unless such automatic processing is necessary for entering into or performance of a contract between you and the IA, is lawfully authorised and/or based on your explicit consent.

8. LINKS TO THIRD PARTY WEBSITES

Our Website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

9. DATA ACCURACY

Whilst we accept responsibility for maintaining the personal information entrusted to us on our Website, we are not responsible for its accuracy over time or at the point of entry.

10. CHANGES TO OUR PRIVACY POLICY

Any changes we may make to our Policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our Policy and to ensure that you are happy with any such changes.

11. COMMUNICATIONS WITH REGISTERED USERS

We may contact registered users by e-mail as these have been provided by registered users to this Website.

12. CONTACT

Questions, comments and requests regarding this privacy policy are welcomed. You can contact us:

1. by e-mail at the following e-mail address: and should be addressed to [email protected];
2. by post, at our registered office address set out above; and
3. by telephone, using the contact number published on www.fundipedia.com from time to time.

13. DATA PROTECTION OFFICER

For the purposes of the Regulations:

1. the IA has appointed Mr Jack Knight as its Data Protection Officer, who can be contacted by post at Camomile Court, 23 Camomile Street, London, EC3A 7LL, or by e-mail at [email protected], or telephone number on +44 20 7831 0898; and
2. Fundipedia has appointed Simon Swords as its Data Protection Officer, who can be contacted by post at Unit 7 - Ground Floor Britannia Business Park, Comet Way, Southend On Sea, Essex, England, SS2 6GE, or by email [email protected], or telephone number on +44 845 867 2845.

14. FILING OF COMPLAINTS

If you have any complaints or concerns about the contents of this Policy or your personal data stored, controlled by the IA or processed by Fundipedia, you can address these with the supervisory authority, the Information Commissioner’s Officer.