GDPR Compliance

Last updated: 1 March 2026

dense-range Financial Services Ltd is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we meet our obligations under data protection legislation and how you can exercise your rights.

Our Role as Data Controller

For the personal data we collect and process in connection with our financial management services, dense-range Financial Services Ltd acts as the data controller. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that processing complies with data protection law.

Contact Details

Data Controller: dense-range Financial Services Ltd
Address: Suite 412, Northern Quarter House, 78 Dale Street, Manchester, M1 2HN
Email: [email protected]

Lawful Basis for Processing

We only process personal data where we have a lawful basis to do so. The lawful bases we rely on include:

Contractual Necessity

We process certain personal data because it is necessary for the performance of our contract with you, or to take steps at your request prior to entering into a contract. This includes processing your contact details to communicate with you and your financial information to provide our advisory services.

Legal Obligation

As a regulated financial services firm, we are required to process certain personal data to comply with legal obligations. This includes verifying client identities, maintaining records for regulatory purposes, and reporting to regulatory authorities where required.

Legitimate Interests

We may process personal data where necessary for our legitimate interests, provided these interests are not overridden by your rights. Our legitimate interests include improving our services, protecting our business from fraud, and marketing our services to existing clients.

Consent

Where we process personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Your Data Protection Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request. We will respond to valid requests within one month, though this may be extended by up to two months for complex requests.

Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. We will respond to such requests without undue delay.

Right to Erasure

In certain circumstances, you have the right to request that we delete your personal data. This right is not absolute and applies only in specific situations, such as where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent.

Please note that regulatory requirements may prevent us from deleting certain data, particularly records relating to financial advice provided.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to processing for direct marketing, we will cease such processing immediately.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. We do not currently use automated decision-making that produces such effects.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us at [email protected]. To help us process your request efficiently, please provide:

• Your full name and contact details
• Sufficient information to identify you (such as account number or previous correspondence)
• A clear description of the right you wish to exercise

We may request additional information to verify your identity before processing your request.

Data Protection Impact Assessments

Where processing is likely to result in a high risk to individuals' rights and freedoms, we conduct Data Protection Impact Assessments (DPIAs) to identify and mitigate risks. This includes assessments for any new processing activities or significant changes to existing processes.

International Data Transfers

We primarily process personal data within the United Kingdom. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office or transfers to countries with adequacy decisions.

Data Breach Procedures

We have procedures in place to detect, investigate, and report personal data breaches. Where a breach is likely to result in a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk, we will also notify affected individuals without undue delay.

Record Keeping

We maintain records of our processing activities as required by Article 30 of the UK GDPR. These records document the purposes of processing, categories of data subjects and personal data, recipients of personal data, and retention periods.

Staff Training

All staff members receive regular training on data protection principles and practices. This ensures that everyone who handles personal data understands their responsibilities and the importance of protecting individuals' privacy.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
SK9 5AF
Website: ico.org.uk

We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

Updates to This Page

We may update this GDPR compliance information from time to time. Any significant changes will be communicated through our website.