Privacy Policy

Steve Dixon Associates llp (“SDA”, “we”, “our” and “us”) is committed to protecting your privacy. Please read this Privacy Policy, as well as our Terms and Conditions, for more details about how we use information you submit to the website.

Important: By submitting personal data to us, subscribing to our mail list and/or by using our website, you give your consent that all personal data that you submit may be processed by us in the manner and for the purposes described below. You also have the right to withdraw your consent to the processing of your personal data at any time free of charge.


This policy explains how we collect and use personal information that we obtain about you. Personal information is any information that is capable of identifying you as an individual.

In this Privacy Notice, we’ll tell you about:

  1. who we are
  2. how to contact us
  3. what personal information we collect
  4. why we are able to process your information
  5. what purpose we are processing it for
  6. how long we store it for
  7. how to unsubscribe
  8. whether there are other recipients of your personal information
  9. whether we intend to transfer it to another country
  10. whether we do automated decision-making or profiling
  11. what are your rights
  12. what anonymous data is collected through this website
  13. cookies
  14. links to other websites
  15. the notification of changes to our privacy policy
  16. the governing law

1. Who we are

SDA is a data controller – we decide how your personal data is processed and for what purposes. We are regulated under the General Data Protection Regulation (GDPR) and are committed to maintaining the privacy and confidentiality of information provided by you to us.

2. Contact us

If you have any questions about our privacy notice, your personal information, or to exercise any of your rights as described in this privacy notice or under data protection laws, you can contact us by email at:,

Our address is: Oaks House, 16-22 West Street, Epsom, Surrey, KT18 7RG.

3. What personal information we collect

You may choose to receive information or services from us. When you contact or instruct us, we request personal information about you such as your name, postal address, email address and telephone number. We may also ask for demographic information to enable us to provide a personalised service to you.

4. Why we are able to process your information

Our choice of lawful basis for holding personal data for all past cases is legitimate interest. We hold personal data past the point at which it is being actively used only to ensure we have valid Professional Indemnity Insurance, which protects us, our clients and the data subjects.

For current and future clients, the lawful basis for processing personal data is through consent. We rely on this when:

  • providing pension review and related services to clients; or
  • sending direct marketing communications to customers via email or post.

Customers have the right to withdraw consent at any time.

5. What purpose we are processing your information for

We will use your personal data to fulfil your instructions and requirements and we will ask only for data that is adequate, relevant and not excessive for those purposes. Where we send you information for any purpose, it may be sent by email or post. When we ask you for personal data it may be for any of the following purposes:

  • to contact you to inform you of our services;
  • to send you regular updates on issues we think will be of interest to you; or
  • to send you requested information on our people and services.

6. How long we store your information for

We will store your personal data for as long as necessary to carry out the purposes for which it was obtained, including satisfying any related legal, accounting, or reporting requirements. It will be removed when the purposes are fulfilled, including no possible future legal, accounting or reporting requirements.

If you would like further information on this, please contact us for our retention policy.

7. How to unsubscribe

We hope you will be pleased with our information and services. However, if you no longer wish to receive emails from us and want to be removed from our electronic mailing list, please click “Unsubscribe from this list” on the latest email you’ve received from us or email us at the address given above with “email unsubscribe” in the subject heading.

If you also wish to be removed from our postal marketing database, please let us know by emailing us at the address given above with “mail unsubscribe” in the subject heading or writing to us at the address given above.

You can also change the way you are contacted, or the kind of material sent to you, at any time by contacting us above.

8. Any other recipients of your personal information

We do not share, sell or distribute your personal data with unrelated third parties, except as otherwise provided for in this privacy policy and under these limited circumstances:

  • In order to provide you with the information or services which you have requested, personal data may occasionally be transferred or shared with third parties, who act for or with us, for further processing in accordance with the purposes for which the data was originally collected or for purposes to which you have consented. In such cases, we will inform you of what information is shared and who it is shared with.
  • Where you have consented, we may also disclose your personal data to other businesses who may contact you about their services that may interest you.
  • We may share, transfer or disclose the information in our databases and server logs to comply with a legal requirement, to protect your vital interests, to protect the security or integrity of our databases or this website, to take precautions against legal liability, or in the event of a joint venture, collaboration, financing, sale, merger, reorganisation, change of legal form, dissolution or similar event.
  • Where appropriate, before disclosing personal data to a third party, we contractually require the third party to take adequate precautions to protect that personal data and to comply with applicable law.
  • Personal information will also be shared with our third party service provider, MailChimp, in order to manage email marketing lists and to send marketing emails to you. You can read MailChimp’s privacy policy here – MailChimp Privacy Policy – and their cookie policy here – MailChimp Cookie Statement.

9. Whether we transfer your personal data to another country

Personal information will be shared with our third party service provider, MailChimp, in order to manage email marketing lists and to send marketing emails to you. They operate in the United States. Find out more about MailChimp’s Privacy Policy.

Apart from this, SDA will not transfer your personal data to any other country.

10. Whether we have any automated decision-making or profiling

SDA does not carry out any automated decision-making or profiling.

11. Your rights

You have the right to:

  • Request a copy of the personal data that we hold on you;
  • Request that we correct any personal data that is found to be inaccurate;
  • Request for your personal data to be restricted;
  • Request for your personal data to be erased when it is no longer needed by SDA;
  • Withdraw your consent to the processing at any time; and
  • Lodge a complaint with the Information Commissioners Office.

Upon receipt of your request and enough information to permit us to identify your personal data, we will disclose to you the personal data we hold about you. This will be free of charge, unless we decide the request is manifestly unfounded or excessive, or if further copies are requested, in which case an appropriate fee will be charged.

We will also correct, amend or delete any personal data that is inaccurate and notify any third party recipients of the necessary changes.

If you wish to exercise any of the above rights, please contact us using the contact details set out above.

For more information on your rights, data protection or GDPR, visit the ICO website.

12. Anonymous data collected through this website

In addition to the information we collect as described above, we use technology to collect anonymous information about the use of our website. For example, our web server automatically logs which pages of our website our visitors view, their IP addresses and which web browsers they use. This technology does not personally identify you – it simply enables us to compile statistics about our visitors and their use of our website.

Our website contains hyperlinks to other pages on our website. We may use technology to track how often these links are used and which pages on our website our visitors choose to view. Again this technology does not identify you personally – it simply enables us to compile statistics about the use of these hyperlinks.

13. Cookies

In order to collect the anonymous data described in the preceding paragraph, we may use session ‘cookies’ that remain in the cookies file of your browser until the browser is closed.

Cookies by themselves cannot be used to discover the identity of the user. A cookie is a small piece of information which is sent to your browser and stored on your computer’s hard drive. You can set your browser to notify you when you receive a cookie. This enables you to decide if you want to accept it or not. For more information about cookies, including how to set your browser to reject them, please go to All About Cookies.

We may also use your IP address to help diagnose problems with our server and to administer our website. An IP address is an assigned number, similar to a telephone number that identifies your computer on a network. Your IP address is also used to gather broad demographic information.

We may also perform IP lookups to determine the domain you are coming from (e.g., to gauge more accurately our users’ demographics.

14. Links to other websites

This website may contain hyperlinks to websites that are not operated by us. These hyperlinks are provided for your reference and convenience only and do not imply any endorsement of the activities of such third-party websites or any association with their operators. We do not control these websites and are not responsible for their personal data practices. We urge you to review any privacy policy posted on any site you visit before using the site or providing any personal data about yourself.

15. Notification of changes to our privacy policy

We are continually improving our methods of communication and adding new features to this website so if we change our data protection practices, we will notify you on this page, so we encourage you to check this page frequently.

Last modified date: 29 May 2018.

16. Governing Law

This privacy policy forms part of our website Terms and Conditions.