Privacy Policy.

Last updated: 15 July 2026

1. Who we are

John Investments Limited (“we”, “us”, “our”), trading as John Investments Wealth Management, is the controller of the personal data described in this policy. We are a company registered in England and Wales under company number 01488841, with our registered office at Unit D6, Pinetrees Road, Norwich, NR7 9BB, United Kingdom.

For any question about this policy or your personal data, contact us at privacy@wm.johninvest.ltd or by post at the registered office address above, marked for the attention of the Data Protection contact.

2. Scope

This policy explains how we handle personal data collected through this website. It applies to visitors to the site and to people who contact us, subscribe to our communications, or use our client portal. Where you are an existing client, additional information is provided in your client agreement.

3. The personal data we collect

We collect only what we need:

• Enquiry data - when you use our contact form or email us: your name, email address, telephone number (if provided), the subject you select and the content of your message.
• Subscription data - when you subscribe to our research: your email address and your consent record.
• Technical data - your IP address, browser type, device and the pages you view, collected through server logs and privacy-friendly analytics (see our Cookie Policy).
• Consent data - a record of the cookie choice you make, stored in your browser.

We do not knowingly collect special category data through this website. Please do not send us sensitive personal information through the contact form.

4. How and why we use your data

We use your personal data for the following purposes, each with a lawful basis under Article 6 of the UK GDPR / EU GDPR:

• To respond to your enquiry and take steps at your request before entering a relationship - legal basis: performance of a contract or steps prior to it, and our legitimate interest in responding to prospective clients.
• To send you research and communications you have requested - legal basis: your consent, which you may withdraw at any time.
• To operate, secure and improve the website - legal basis: our legitimate interest in a functioning, secure and well-designed site; analytics run only with your consent.
• To comply with legal and regulatory obligations, including record-keeping and the prevention of financial crime - legal basis: compliance with a legal obligation.

5. Cookies and analytics

We use a small number of cookies and similar technologies. Essential storage keeps the site working and remembers your cookie choice. With your consent we use a privacy-friendly, cookieless analytics tool to understand how the site is used. Full detail, and how to change your choice, is in our Cookie Policy.

6. Who we share it with

We do not sell your personal data. We share it only with:

• Service providers who process data on our behalf under contract - for example our website host, our form-delivery provider and our analytics provider. They act only on our instructions.
• Professional advisers and authorities where we are required to do so by law, regulation or a valid legal request.

7. International transfers

Some of our service providers may process data outside the United Kingdom or European Economic Area. Where they do, we rely on an adequacy decision or on appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses, so that your data continues to be protected to an equivalent standard.

8. How long we keep it

We keep enquiry and subscription data only as long as necessary for the purpose it was collected and to meet our legal and regulatory obligations, after which it is deleted or anonymised. Technical logs are kept for a limited period for security and diagnostics.

9. Your rights

Under the UK GDPR and EU GDPR you have the right to: access your personal data; have it corrected; have it erased; restrict or object to its processing; data portability; and, where we rely on consent, to withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, contact privacy@wm.johninvest.ltd. You also have the right to complain to a supervisory authority - in the UK, the Information Commissioner’s Office (ico.org.uk); in Germany, your competent state data protection authority.

10. Security

We apply appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls and staff confidentiality obligations. No transmission over the internet is completely secure, so we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. Material changes will be highlighted on this page.