Privacy policy
Acies Management Holdings Limited
This Privacy Notice outlines how Acies Management Holdings Limited (“Acies MGU”, “we”, “us”, or “our”) collects, processes, and protects personal data in accordance with applicable data protection laws, including the Data Protection Act 2018 (the UK’s implementation of the GDPR).
Acies MGU acts as a data controller and is responsible for complying with all applicable data protection requirements. This policy applies to personal data we collect from individuals when providing our services, including via our website, products, events, or interactions through our Appointed Representatives (“ARs”).
We have appointed a Data Protection Officer (DPO) to oversee the handling of personal data. If you have any questions regarding this Privacy Notice, or how we handle your personal data, you may contact our DPO using the details in the “Contacting Us” section below.
Website Use
Data transmission over the internet is not entirely secure. While we make reasonable efforts to protect the personal data you provide, we cannot guarantee its absolute security. Use of our website and its facilities is at your own risk.
We have taken care to ensure the accuracy of the information on this site, but we give no warranty, express or implied, regarding its completeness or accuracy. You may use information from this site for personal purposes only and may not reproduce it without prior written approval.
Processing Your Personal Information
Personal Data We May Collect
We may collect the following types of personal data:
- Contact information (name, email, phone number, address)
- Account and login details for access to Acies services
- Technical data such as IP address, browser type, and website usage
- Communications between you and us (email or other correspondence)
- Information provided by your employer, Appointed Representatives, or other third parties where relevant
- Financial data if you engage with our services requiring payments or invoicing
Acies does not normally collect special category data (e.g., health data, racial or ethnic origin, sexual orientation, or criminal conviction data) unless necessary for a specific service or contractual requirement.
Sources of Data
We may collect information:
- Directly from you, e.g., via website forms, surveys, or communications
- From your employer if they provide services to you through us
- From Appointed Representatives or other authorised third parties
- Automatically via cookies, server logs, and similar technologies when you use our website
Why We Collect Your Data
We collect and use personal data to:
- Provide our services and products
- Administer your account or requests
- Respond to enquiries and communications
- Optimise our website and services
- Prevent fraud or misuse of our services
- Comply with legal or regulatory obligations
- Contact you with marketing communications if you have consented
Sharing of Personal Information
We may share your data where necessary to provide our services or comply with legal obligations, including with:
- Approved service providers or suppliers providing support services
- Credit reference or fraud prevention agencies
- Regulatory bodies or law enforcement where required
- Third parties acting on our behalf in connection with the services you use
We do not share your data for unrelated marketing purposes without your consent.
Data Retention
We retain your personal data only as long as necessary for the purposes it was collected, including:
- Standard service data: retained for up to 7 years after account closure or service completion
- Employer-related services: retained as required to meet contractual obligations
All retention periods are reviewed regularly to ensure compliance with legal and regulatory requirements.
Legal Basis for Processing
Acies MGU processes personal data on the following legal bases:
- Performance of a contract: e.g., providing services or fulfilling a request you have made
- Consent: e.g., for marketing communications or other optional services
- Legitimate interests: e.g., fraud prevention, IT and website optimisation
Where personal data is processed based on consent, you may withdraw consent at any time.
How We Protect Your Information
We use technical and organisational measures to secure your data, including:
- Role-based access controls for electronic systems
- Encryption of data in transit and at rest where applicable
- Secure storage for physical records
- Internal procedures covering storage, access, and disclosure of information
Your Rights
You have the following rights under data protection law:
- Right to be informed: About what personal data we hold and how we use it
- Right of access: To request a copy of the data we hold about you
- Right to rectification: To correct inaccuracies or complete incomplete data
- Right to erasure: To request deletion under certain conditions
- Right to restrict processing: In certain circumstances
- Right to data portability: To obtain a machine-readable copy of your data
- Right to object: To processing, including for direct marketing
- Rights regarding automated decision-making and profiling: Currently not used by Acies for services
Requests will be responded to within 30 days.
Cookies
We use cookies and similar technologies to improve your experience, e.g., remembering preferences, keeping you logged in, and analysing website usage. You can manage or block cookies via your browser settings. For more information, visit allaboutcookies.org.
Changes to This Privacy Notice
This Privacy Notice is reviewed regularly. Updates will be posted on our website. Last updated: 3rd September 2025.
Contact
For any questions or to exercise your data protection rights, please contact our DPO at:
Acies Management Holdings Limited
100 Fenchurch Street
London
EC3M 5JD
Email: info@aciesmgu.com
If you feel your concern has not been addressed satisfactorily, you may contact the Information Commissioner’s Office (ICO):
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: https://ico.org.uk
Email: casework@ico.org.uk
