How we look after your information

This notice (“Privacy Notice”) explains how the TreasurySpring group of companies process your personal data in connection with our business, including the provision of our website at https://treasuryspring.com/ (the “Website”) and mobile application for iPhone or Android (the “App”) (together the Website and App, the “Site”) and the services we provide (whether through our Site or otherwise) (“Services”).

Please take a moment to read this Privacy Notice as it provides you with important information about your personal data, including about the rights you have in relation to it.

Your access to and use of our Site is also subject to our Website Terms of Use and Cookie Policy.

We may update this Privacy Notice from time to time, including to reflect any changes to our use of personal data or to comply with applicable law or regulatory requirements. Please periodically review this Privacy Notice to keep up to date.
‍

About us

The Site and our Services are made available by the TreasurySpring group of companies(each a “Group Company”). Where this Privacy Notice refers to “TreasurySpring”, “we”, “us, “our”, this means one or more of the below Group Companies that provide the particular Site or Services to you. For more information about our Group Companies, including their location and respective roles and responsibilities, please see below.

Except as stated otherwise, each Group Company is an independent controller of your personal data.

Location: England and Wales
TreasurySpring Advisors Limited (company no: 11641312) is a company established under the laws of England and Wales with its registered office at 25 Market Mews, London, W1J 7BZ.
TreasurySpring Limited (company no: 10373508) is a company established under the laws of England and Wales with its registered office at 25 Market Mews, London, W1J 7BZ.

Location: Jersey
TreasurySpring Management (Jersey) Limited (company no: 125257) is a company established under the laws of Jersey with its registered office at Ordnance House, 31 Pier Road, St. Helier, JE4 8PW, Jersey.
TreasurySpring Investments (Jersey) ICC (registered no: 125392) is a private incorporated cell company established under the laws of Jersey with its registered office at Ordnance House, 31 Pier Road, St. Helier,JE4 8PW, Jersey, and each of its incorporated cells from time to time.

Location: United States of America
TreasurySpring Inc is a company established under the Delaware, United States, with address 8 The GreenSTE R, in the City of Dover, County of Kent, 19901

The information contained herein is confidential and should not be distributed. See disclaimer at the end of this document.

How to contact us
If you have any questions about this Privacy Notice or want to exercise your rights as a data subject, you can contact us using the following methods:

Email – Send us an email at: legal@treasuryspring.com
Post – Write to us at: TreasurySpring Advisors Limited, 25 Market Mews, London, W1J 7BZ.3.

Who this privacy notice applies to
We collect and process personal data from the following people:

Site users: If you use our Site or request a demo through our Site, we will collect and process your personal data in connection with your interaction with us and our Site.
Clients: If you use our Services or we communicate with you in respect of you potentially using our Services, we may collect and process your personal data in connection with the onboarding or supply of our Services to you.
People who contact uswith enquiries: If you contact us with an enquiry through our Site, submit a complaint through our Site or provide any feedback to us in our surveys and feedback forms, we will collect and process your personal data in connection with your interaction with us and our Site.
People who work for our clients, partners, service providers and issuers: If you work for one of our clients, partners, service providers or issuers and have responsibility in relation to the use or provision of our Services with your organisation, we will process your personal data in connection with your organisation’s relationship with us.
Visitors to our physical locations: If you attend one of our offices or other locations, we may process personal data that you volunteer in connection with your visit and any enquiries you make. For example, you may volunteer personal data when signing in as a guest. CCTV footage may also be collected for security purposes.
Event attendees: If you attend one of our events or a conference we represented at, we will process personal data about you in connection with your attendance at thee vent. For example, we may ask you to complete a registration or feedback form, or other document relating to the event.
Job applicants: If you apply for a job with us, whether through the Site or otherwise, we will collect and process your personal data in connection with your application.

The information contained herein is confidential and should not be distributed. See disclaimer on the final page.

Our processing activities
‍We process your personal data, which is any information relating to you including by reference to identifiersassociated with you (such as your name or email address), your online activity or any device that you use to access our Site, for the following purposes:
– to provide you with our Site;
– to provide you with our Services;
– to deal with client services and enquiries, carry out surveys and obtain feedback;
– to carry out insight and analysis;
– to carry out our promotional and marketing practices; and
– for business administration (including recruitment) and legal compliance purposes.

How we collect and receive personal data
We collect and receive personal data using different methods:
Personal data you provide to us
You may give us your personal data directly, for example, when you use our Services, contact us with enquiries, use or complete forms on our Site, subscribe to receive our marketing communications or provide feedback to us.
Personal data we collect using cookies and other similar technologies
‍When you access and use our Site, we will collect certain Usage Data and Technical Data. We collect this personal data by using cookies and other similar technologies (see the Insight & analysis through cookies and other similar tracking technologies section).
Personal data received from third parties
We may receive personal data about you from third parties. Such third parties may include your employer if your employer receives our Services or provides services to us, analytics providers, third party directories and third parties that provide technical services to us so that we can provide our Site and our Services.

If you fail to provide your personal data
‍Where we are required by law to collect your personal data, or we need to collect your personal data under the terms of a contract we have with you, and you fail to provide that personal data when we request it, we may not be able to perform the contract we have or are trying to enter into with you. This may apply where you do not provide the personal data we need in order to provide the Services you have requested from us or to process an application to register for our Services. In these circumstances, we may have to cancel your application or the provision of the relevant Services to you, in which case we will notify you.

Third-party links
This Privacy Notice only applies to personal data processed by us through your use of our Site and/or in connection with our business operations. However, from time to time, our Site may contain links to third-party websites and services. We have no control over these websites and services and this Privacy Notice does not apply to your interaction with the relevant third parties.

When you use a link to go from our Site to another website (even if you don’t leave our Site) or you request a service from a third party, your browsing and interactions on any other websites, or your dealings with any other third-party service provider, is subject to that website’s or third-party service provider’s own rules and policies. For example, our Site invites you to connect with us on social media platforms. When you click on the links we provide to such third-party platforms, you will be transferred from our Site to the relevant third-party platform and the privacy notice (and other terms and conditions) of that platform will apply to you.

We do not monitor, control or endorse the privacy practices of any third parties. We encourage you to become familiar with the privacy practices of every website you visit or third-party service provider that you use in connection with your interaction with us and to contact them if you have any questions about theirrespective privacy notices and practices.

Third-party app stores
‍If you download and install our App from an app store (such as Google Play or the Apple App Store), you must first register for a user account with the provider of the app store (e.g. Google or Apple) and agree to that app store’s user agreement. We have no influence over the terms of such user agreement and are not a party to it. When downloading, installing and using our App, certain information may be transmitted to the provider of the app store including identifiers relating to you or your device and the time of download. For further information on the type of information that may be shared with, or collected by, the provider of the app store, please see the relevant app store provider’s privacy notice. We have no influence over this process and are not responsible for the privacy practices of the provider of the app store.

Sharing personal data
‍We only share personal data with others when we are legally permitted to do so. When we share personal data with others, we put contractual arrangements and security mechanisms in place to protect the personal data shared and to comply with our data protection, confidentiality and security standards and obligations.

When processing your personal data, we may need to share it with third parties (including other entities within our group of companies), as set out below. This list is non-exhaustive and there may be circumstances where we need to share personal data with other third parties.

Group companies
We may share personal data described in this Privacy Notice within the Treasury group of companies, meaning the group companies described in the About Us section. We may share personal data between the Group Companies for sales or marketing purposes, or for IT and system administration services and internal reporting activities, or as otherwise needed for our business purposes.
Third-party suppliers who provide applications/functionality, data processing or IT services
We share personal data with third parties who support us in providing our Site and help provide, run and manage our internal IT systems. Such third parties may also include, for example, providers of information technology, cloud-based software-as-a-service providers, identity management, website design, hosting and management, data analysis, data back-up, security and storage services. The servers powering and facilitating that cloud infrastructure are located in secure data centres around the world, and personal data may be stored in any one of them. We also share your personal data with third-party service providers to assist us with insight analytics. These providers are described in our Cookie Policy.
Payment providers and banks
We share personal data with third parties who assist us with the processing of payments and refunds.
Third-party post/email marketing and CRM specialists
We share personal data with specialist suppliers who assist us in managing our marketing database and sending out our post and email marketing communications and account-related communications.
Event partners and suppliers
When we run events, we will share your personal data with third-party service providers that are assisting us with the operation and administration of that event. If we are running an event in partnership with other organisations, we will share your personal data with such organisations for use in relation to the event.
Recruitment agencies and related organisations
‍We share personal data with external recruiters, third-party providers that undertake background checks on our behalf and other entities within our group of companies.
Auditors, lawyers, accountants and other professional advisers
‍We share personal data with professional services firms who advise and assist us in relation to the lawful and effective management of our organisation and in relation to any disputes we may become involved in.
Law enforcement or other government and regulatory agencies and bodies
We share personal data with law enforcement or other government and regulatory agencies or other third parties as required by, and in accordancewith, applicable law or regulation.
Parties to a transaction
‍We may share information with parties that have or may acquire control or ownership of our business (and our or their professional advisers) in connection with a significant corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvency. Usually, information will be anonymised but this may not always be possible. The recipient of any of your personal data will be bound by confidentiality obligations.
Other third parties
Occasionally, we may receive requests from third parties with authority to obtain disclosure of personal data, such as to check that we are complying with applicable law and regulation, to investigate an alleged crime, or to establish, exercise or defend legal rights. We will only fulfil requests for personal data where we are permitted to do so in accordance with applicable law or regulation.

International transfers of personal data
‍We may transfer personal data to third parties (as described in the Sharing personal data section) that are located in countries that do not have data protection laws that protect personal data to the same standard as the UK GDPR or the Data Protection (Jersey) Law 2018. These third countries may not give you the same rights as under the UK GDPR or the Data Protection (Jersey) Law 2018 in relation to your personal data and may not have a data protection supervisory authority to help you if you have any concerns.

When transferring personal data to third countries, we ensure the safety of your personal data by relying on one of the following:
Adequacy decisions: We may transfer your personal data to countries or organisations that have been deemed to provide an adequate level of protection for personal data by the European Commission, the UK Government or any other relevant government body. This may include transfers to organisations that participate in the Data Privacy Framework listed here.
Contractual safeguards: We may use specific standard contracts approved by the European Commission, the UK Government, or any relevant governmental body to safeguard personal data. The contracts that we usually rely on are referred to as “Standard Contractual Clauses” or “SCCs”, although we may from time to time use other approved mechanisms. To find out more about the SCCs we use, please see here (EU) and here (UK). You can also contact us using the contact details set out in the How to contact us section.

How long we keep your personal data
Whenever we collect or process your personal data, we will only keep it for as long as is necessary for the purpose for which it was collected and in accordance with our data retention policies.

We may also retain your personal data for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

Your rights as a data subject
You have certain rights in relation to the personal data we hold about you. These rights include the right:
(i) to obtain copies of your personal data;
(ii) to have your personal data corrected or deleted;
(iii) to limit the way in which your personal data is used;
(iv) to object to our use of your personal data;
(v) to transfer your personal data;
(vi) not to be subject to decisions based on automated processing (including profiling) and;
(vii) to complain to a supervisory authority.

If you would like to exercise any of these rights, please contact us using the details set out in the How to contact us section.

Your right of access
If you ask us, we will confirm whether we are processing your personal data and, if so, provide you with a copy of that personal data (along with certain other details). If you require additional copies, we may charge a reasonable fee for producing those additional copies.
Your right to rectification
If the personal data we hold about you is inaccurate or incomplete, you are entitled to have it rectified. If we have shared your personal data with others, we’ll let them know about the rectification where possible. If you ask us, where possible and lawful to do so, we will also tell you who we’ve shared your personal data with so that you can contact them.
Your right to erasure
‍You can ask us to delete or remove your personal data in some circumstances, such as where we no longer need it or where you withdraw your consent (where applicable). If we have shared your personal data with others, we will let them know about the erasure where possible. If you ask us, where it is possible and lawful for us to do so, we will also tell you who we have shared your personal data with so that you can contact them directly.
Your right to restrict processing
You can ask us to “block” or suppress the processing of your personal data in certain circumstances such as where you contest the accuracy of that personal data or you object to us processing it for a particular purpose. This may not mean that we will stop storing your personal data but, where we do keep it, we will tell you if we remove any restriction that we have placed on your personal data to stop us processing it further. If we’ve shared your personal data with others, we’ll let them know about the restriction where it is possible for us to do so. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal data with so that you can contact them directly.
Your right to data portability
‍You have the right, in certain circumstances, to obtain personal data you have provided to us (in a structured, commonly used and machine-readable format) and to reuse it elsewhere or to ask us to transfer it to your chosen third party.
Your right to object
You can ask us to stop processing your personal data, and we will do so, if we are:
(i) relying on our own or someone else’s legitimate interest to process your personal data, except if we can demonstrate compelling legal grounds for the processing; or
(ii) processing your personal data for direct marketing purposes.
Your rights in relation to automated decision-making and profiling
You have the right not to be subject to a decision when it is based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for the entering into, or the performance of, a contract between you and us.
Your right to withdraw consent
If we rely on your consent (or explicit consent) as our legal basis for processing your personal data, you have the right to withdraw that consent at any time. You can exercise your right of withdrawal by contacting us using our contact details in the How to contact us section or by using any other opt-outmechanism we may provide, such as an unsubscribe link in an email.
Your right to lodge a complaint with the supervisory authority
If you have a concern about any aspect of our privacy practices, including the way we have handled your personal data, please contact us using the contact details provided in the How to contact us section. As we are incorporated in the United Kingdom, our regulatory authority is the Information Commissioner’s Office (“ICO”). Contact details for the ICO can befound on its website at https://ico.org.uk.