Privacy Notice


About us

Johnston Financial Services Ltd also trades as Johnston Financial. Johnston Financial Services Ltd will be a data controller of any personal data it holds about you and the account(s) or policies that either we have arranged for you or which you have either mandated into our agencies or mandated us to obtain information about. This Privacy Notice will apply to all processing of your personal data that may occur within Johnston Financial services Ltd. 
A data controller is an individual or organisation which decides how your personal data will be used. The data controller is referred to as “we”, “us” and “our” in this Privacy Notice.
If you require any further information or wish to contact us or our Data Protection Officer at any time our contact details are:
Post                                                                                         Telephone
Write to us at:                                                                         Call us on 0131 556 4540
Johnston Financial Services Ltd
49 Northumberland Street
You can contact us by emailing
Or, you can contact the Data Protection Officer directly by emailing
Use of our website
We don’t collect personal data from people browsing our websites. We don't make any attempt to find out the identities of those browsing our website.
If you provide us with personal data through our website, our Privacy Notice is available to read from a link on the Home page. 
Our obligations under Data Protection Laws
Applicable Data Protection laws, (including the General Data Protection Regulation 2016 and the Data Protection Act 2018), impose obligations on us as the data controller, when we collect or create, hold, amend, disclose, share or otherwise use or erase/destroy (collectively referred to as processing) your personal data and give you, as the data subject, rights over your personal data.

One such obligation is to process, (e.g. collect, hold, use or erase) your personal data fairly, lawfully and in a transparent manner.  The lawful basis on which we process your personal data is “Legal Obligation”. This basis applies as we are required by our regulator, The Financial Conduct Authority, to have sufficient information about you, your objectives and your financial arrangements to be able to demonstrate both now and in the future that the advice we give you is suitable to your circumstances and objectives.
This means that we will hold your personal data throughout your lifetime and for up to six years thereafter. If you hold any pension plans and we have provided advice in relation to them, we are required by the Financial Conduct Authority to hold your data in perpetuity.
If you have signed a Client Agreement, we may contact you in the future by means of an unsolicited promotion (by telephone, email or post) should we wish to discuss the relative merits of a praticular product or service which we feel may be of interest to you and the lawful basis on which we process your personal data, for that purpose only, is "Consent". When signing our Client Agreement you are asked to give your consent to us doing so.
We may change our Privacy Notice in the future. If we make any substantial and/or material changes and those changes materially affect you, we’ll inform you of any changes before they take effect.
What personal data do we hold and where did we get it from?
We hold data on your personal details such as your name, address, date of birth and National Insurance Number. We hold details of your personal financial situation such as your earned and investment income. We also hold details of the protection, pension and investment arrangements you have. We may hold data in connection with the taxes you pay. This data will have been given to us by you with your agreement when we are advising you. We may also have gathered personal data from product providers or other sources if you have signed a mandate to allow us to obtain that information.  We will also obtain personal data from credit reference agencies when we fulfil our legal obligation to carry out ID checks to comply with the Anti Money Laundering regulations.
Broadly, we are likely to hold personal data that will give us a complete picture of your financial position and financial planning objectives.
Which other organisations may we share your data with?
We do not share your personal data except as required to implement your instructions in making or maintaining any of your financial arrangements. This may, for instance, require some of your personal data to be shared with an insurance company or investment platform. In all cases, we will only share what is required for the specific purpose and only on your instruction which is likely to be in the form of a signed application form but could be in other forms.
How long do we hold your personal data for?
We will hold your personal data indefinitely. We are required by our regulatory authority to be able to show the information on which we based our advice and upon which we determined the suitability of our advice. There is no time limit over which we have to meet that requirement.
Your legal rights
You have a number of rights over your personal data processed by us. These include your rights to request:
  • Access to your personal data. You may request a copy of the personal data that we hold about you.
  • Accuracy of your personal data. You may request that we correct incomplete, inaccurate or outdated personal data. We take sensible steps to make sure that personal data is accurate, complete, and current. You can help us do this by notifying us of any changes to your personal data.
  • Transmission of personal data. You may request that we transfer personal data you have provided to us to you or to another person.
  • Erasure of personal data. You may request that we delete your personal data.
  • That the processing of your personal data be restricted. You may request that our use of your personal data ends, is restricted or limited.
The extent of these rights are limited by law and we may not act on part or all of your request(s) where the right(s) are not applicable. If we don’t act on your request we will explain our reasons for not doing so when responding to your request.
If you require any further information about how we handle your personal data, including details of the relevant credit reference agencies we use for confirming ID for anti-money laundering purposes or wish to make a request to exercise any of your rights under applicable Data Protection Laws, please contact our Data Protection Officer.
How to complain
If you're unhappy with the outcome of any of your requests to exercise your rights, or how we handle your personal data then please let us know.
You are also entitled to complain to the Information Commissioner’s Office:
Post                                                         Telephone
Write to them at:                                                                           Call them on 0303 123 1113
Information Commissioner's Office
Wycliffe House
Water Lane
Send a message to