Privacy Policy

Who we are

When we say “we”, “us”, or “Verso” in this notice, we mean the companies in the Verso Group which are:

• Verso Wealth Management Limited
• Verso Investment Management LLP

What information do we collect about you?

We collect information about you when you engage us for financial planning, mortgage advice and / or investment management services. This information will relate to your personal and financial circumstances. It may also include special categories of personal data such as data about your health, if this is necessary for the provision of our services.

We may also collect information when you voluntarily complete client surveys or provide feedback to us.

Our telephone and video calls may be recorded to help improve the quality and accuracy of our service, as well as for training, monitoring, and regulatory purposes.

Information relating to usage of our website is collected using cookies. These are text files placed on your computer to collect standard internet log information and visitor behaviour information. We will use your information collected from the website to personalise your repeat visits to the site. We use cookies to track visitor use of the website and to compile statistical reports on website activity.

For further information visit http://www.allaboutcookies.org/

You can set your browser not to accept cookies and the above website explains how to do this. However, in a few cases some of our website features may not function as a result.

Information about connected individuals

We may need to gather personal information about your close family members and dependents in order to provide our service to you effectively. In such cases it will be your responsibility to ensure that you have the consent of the people concerned to share this information with us. If you act as a trustee or attorney, we may also need information about the relevant beneficiaries or donor(s). We will provide a copy of this privacy notice for them or, where appropriate, ask you to pass it on to them.

How will we use the information about you?

We collect information about you in order to provide you with the services for which you engage us and to carry out identity, fraud and anti-money laundering checks.

Who might we share your information with?

In order to deliver our services to you effectively we may send your details to third parties such as those that we engage for professional compliance, accountancy or legal services as well as product and platform providers that we use to arrange financial products for you.

To fulfil our obligations in respect of prevention of money laundering and other financial crime, we may send your details to third party agencies for identity verification purposes.

Where third parties are involved in processing your data, we will have a contract in place with them to ensure that the nature and purpose of the processing is clear, that they are subject to a duty of confidence in processing your data and that they’ll only act in accordance with our written instructions.

Where it’s necessary for your personal data to be forwarded to a third party we’ll use appropriate security measures to protect your personal data in transit. This will include password protected documents and use of secure portals.

We won’t share your information for marketing purposes with companies outside our group of companies and we never sell your personal information to anyone.

Using artificial intelligence (AI) / automated tools to process your personal information

We may use AI tools to help us review information more efficiently and provide you with faster, more accurate services.

Purpose of AI use

AI tools may be used for:

• Drafting or summarising internal documents (e.g. meeting notes)
• Identifying patterns or errors in data
• Enhancing compliance monitoring

We do not use any systems for making automated decisions and do not use AI tools that use your personal information to train public models. If this changes, we’ll update this notice.

Purpose and lawful basis for processing

The purpose of processing your personal information using AI is to fulfil the tasks listed above. Our lawful bases for using AI to process your personal information are performance of a contract and legitimate interest.

Human review

AI doesn’t make decisions about you on its own — all outputs and decisions made by AI are subject to human review and approval before being used or relied on.

Data sharing and storage

Where AI tools are used we will ensure:

• Only the minimum necessary personal information is processed
• Data (including recordings) will be encrypted
• Processing occurs in secure, regulated systems
• Personal information will not be transferred outside the UK/EEA
• Initial and ongoing due diligence on AI tools used will be conducted

Your data protection rights

You have several rights under data protection law. This helps you understand and control how your personal information is used.

• Right to be informed

You can ask us to explain how we collect, use, share, and store your personal information.

• Right of access

You can request a copy of the personal information we hold about you, along with details of how we use it.

• Right to rectification

If you think any of your information is wrong or incomplete, you can ask us to correct or update it.

• Right to erasure

In some situations, you can ask us to delete your personal information.

• Right to restrict processing

You can ask us to limit how we use your information in certain circumstances.

• Right to object

You can object to us using your personal information, for example for direct marketing.

• Right to data portability

You can ask us to send your personal information to you, or directly to another organisation, in a structured, commonly used electronic format.

• Rights related to automated decision making and profiling

If a significant decision about you is ever made without meaningful human involvement, you have the right to request human review, ask for an explanation and challenge the decision.

We will respond to any request you make about your data protection rights within one month. To make a request, please contact us using the contact details at the end of this privacy notice.

Why do we need to collect and use your personal data?

UK General Data Protection Regulation (UK GDPR) requires us to have a lawful basis to process your personal data. Under the UK GDPR, the lawful bases we rely on for processing this information are:

• We have a contractual obligation

This is the main reason we process your data. The personal information that we collect about you is essential for us to be able to effectively carry out the services that we have agreed to deliver to you.

• We have a legal obligation

Sometimes, collecting personal data is needed to meet our legal and regulatory obligations. For example, UK anti-money laundering legislation may require us to collect personal information to verify your identity.

• We will obtain your consent

Special category data, such as that relating to health matters, is often required to provide our services. When this is required, we’ll obtain your explicit consent to collect and process this information.

We also rely on your consent where we contact you about products or services that may interest you — see ‘Marketing’ below for details and how to withdraw it.

• We have a legitimate interest

We rely on legitimate interest to retain relevant data for the purposes of assessing the appropriateness of our services, defending future complaints and meeting our Professional Indemnity Insurer’s expectations.

How long do we keep hold of your information?

During the course of our relationship with you, we will retain personal data which is necessary to provide services to you. We’ll take all reasonable steps to keep your personal data up to date throughout our relationship.

We are also subject to regulatory requirements to retain your data for specified minimum periods. These are, generally:

• Five years for investment business
• Three years for mortgage business
• Indefinitely for pension transfers and opt-out business
• Three years for insurance business

Copies of documents and information obtained to verify your identity for the purposes of UK anti-money laundering legislation will be retained for a minimum of five years after our relationship with you has ended.

You have the right to request deletion of your personal data. We will comply with this request, subject to the restrictions of our regulatory obligations and legitimate interests as noted above. Because these are legal requirements, we cannot delete your information before the minimum time periods have passed.

We reserve the right to retain data for longer where we believe it’s in our legitimate interests to do so. We will not keep your personal data for longer than 9 years after our relationship with you has ended (except for pension transfers and opt-out business).

Marketing

From time to time we may wish to contact you to offer additional products or services which may be of interest to you. If you have agreed to receive marketing information, you may opt out at a later date.

You have a right at any time to stop us from contacting you for marketing purposes or giving your information to other members of the group. If you no longer wish to be contacted for marketing purposes, please contact us using the contact details at the end of this privacy notice.

Other websites

Our website contains links to other websites. This privacy policy only applies to websites within the Verso Group. We recommend checking the privacy policies of any other sites you visit.

What can you do if you are unhappy with how your personal data is processed?

If you have any concerns about how we use your personal information, you have the right to raise a data protection complaint with us using the contact details below. You do not need to follow a specific process or use particular wording.

You can raise a complaint through any of our usual contact channels, including email, telephone or post. We will:

• Acknowledge your complaint promptly, and in any event within 30 days
• Investigate and respond without undue delay
• Keep you informed where appropriate

Further details of our complaints process are available on request.

If you are not satisfied with our response, you have the right to escalate your complaint to the Information Commissioner’s Office (ICO).

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Changes to our privacy policy

We keep our privacy policy under regular review and we will place any updates on our website when they occur. This privacy policy was last updated on 21st July 2026.

How to contact us

Please contact us if you have any questions about our privacy policy or personal information we hold about you: by email at Compliance@versowm.com.

Or write to us at: Verso, Cannon Place, 78 Cannon Street, London, EC4N 6HL.