Privacy Policy

We are FIX Protocol Ltd (company number 03760285 with its registered office at C/O TMF Group 13th Floor, One Angel Court, London, EC2R 7HJ and ICO registration number  C1556174) the owner and provider of this Website. We are the controller of your personal data. This Policy applies to our use of any and all Data, as defined in Clause 1 below, collected by us in relation to your use of the Website and any Services or Systems therein. All capitalised terms have the meaning given in this privacy policy (Policy) or in our Terms of Use.

Services shall mean collectively any online facilities, tools, services or information that FIX Protocol Ltd makes available through the Website either now or in the future.

Systems are any online communications infrastructure that FIX Protocol Ltd makes available through the Website either now or in the future.  This includes, but is not limited to, web-based email, message boards, live chat facilities and email links.

If you have any questions about this Policy, please contact the FIX Program Office at fix@fixtrading.org.

Introduction

We at FIX Protocol Ltd respect the privacy of our users and your right to protection of your personal data, and are committed to ensuring these are safeguarded to a high standard.  This policy statement sets out how we look after your data, your rights in relation to the data we collect and retain about you and how the law protects your right to privacy.

It is important that you read this Policy from time to time so that you are fully up-to-date and aware as to how we are using your Data.  We also work and share your Data with third party providers for the purposes of delivering our services to you.  When you leave our website we encourage you to read the privacy notice of every website you visit.

Data we collect about you

Without limitation, any of the following personal information (the Data) may be collected in our course of business:

  • Contact Data includes:
    • Name
    • Email address
    •  Telephone
    • Social media account / LinkedIn details
    • Address details
    •  Employer
    • Job title / role
  • Membership Data includes:
    • Details about your membership, including information regarding your joining fee and any ongoing membership fees
  • Profile Data includes:
    • Information about your professional interests and preferences (such as expertise in a particular asset class)
  • Technical Data includes:
    • IP address (automatically collected)
    • Web browser type and version (automatically collected)
    • Operating system
    • Data on the websites through which you reached our website
    • Location data
  • Marketing and Event Data includes:
    • Marketing preferences
    • Event attendance
    • Customer feedback
    • Survey responses
  • Usage Data includes:
    • Data from your use of our website

Our Use of Data

    • Any Data you submit, including any Data that you may submit through any communications System that we may provide, will be retained by FIX Protocol Ltd. for as long as you use the Services and Systems provided on the Website.
    • Unless we are obliged or permitted by law to do so, and subject to clauses 2.2.1, 2.2.2 3 and 4 below, your Data will not be disclosed to third parties. However:
      • We may disclose your Data to our affiliates and / or other companies within our group of companies for the purposes defined in clause Error! Reference source not found. below, and also to other third parties as described in clause 4
      • When you register for a conference organised by FIX Protocol Ltd. we may where you provide your consent share your Data with the sponsors of such conference, for organisation purposes and also for their own direct marketing purposes. This will be explained in further detail in the conference registration forms.
    • Any or all of the Data described in clause 1 above may be required by us from time to time in order to provide you with the best possible service and experience when using our Website and our Services. Specifically, Data may be used by us for the following reasons:
      • internal record keeping for committee / working group management, user management and accounting purposes;
      • to administer and protect our business and website and use data analytics to improve our website and member services and experience;
      • to improve our products / services;
      • to generate suggestions and recommendations in relation to our services which may be of interest to you;
      • transmission by email of invitations to meetings, conferences and events that may be of interest to you as part of your membership;
      • contact for market research purposes which may be done using email, telephoneor mail;
      • creating and maintaining your account if you become a registered member;
      • ensuring the security of your account and our business, preventing or detecting fraud or abuses of our website, for example, by requesting verification information in order to reset your account password;
      • to comply with applicable law, for example, in response to a request from a court or regulatory body, where such request is made in accordance with the law.
    • The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:
      • Performance of a contract with you: Where we need to perform the contract we are about to enter into or have entered into with you.
      • Legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and enable us to give you the best and most secure customer experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
      • Legal obligation: We may use your personal data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis.
    • Generally we do not rely on consent as a legal basis for processing your personal data by FIX Protocol Ltd. other than in relation to sending third party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.
    • We require all third parties with whom we share personal data (e.g. those sponsors and media partners of our events referred to at clause 2.2.2 above) to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. We have entered into specific data sharing or data processing agreements with each of these parties for these purposes.
    • We have set out below, in a table format, a description of all the ways we plan to use the various categories of your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.
PurposePersonal DataLegal Basis
Register your event passes
  • Contact Data
  • Membership Data
  • Profile Data
  • Marketing and Event Data
Contract – necessary to perform our contract with you
Manage your Membership
  • Contact Data
  • Membership Data
  • Payment information for processing invoices
Contract – necessary to perform our contract with you
Deliver the event and your event experience
  • Contact Data
  • Membership Data
  • Technical Data
  • Marketing and Event Data
Contract – necessary to perform our contract with you
Fulfil your requests made to us or via our websites
  • Contact Data
  • Membership Data
  • Profile Data
Legitimate Interests – necessary to provide you with personalised services and enhance your experience
Send you emails that are related to events you are attending or to your membership
  • Contact Data
  • Membership Data
  • Marketing and Event Data
Legitimate Interests – necessary to provide you with information relevant to your events and your membership
Respond to your enquiries or requests
  • Contact Data
  • Membership Data
  • Marketing and Event Data
Legitimate Interests – necessary to respond to and honour your requests
Send you emails about new events, offerings and services
  • Contact Data
  • Profile Data
  • Marketing and Event Data
Legitimate Interests – necessary to provide you with information relevant to your events and your membership
Share your details with third parties for the purposes of marketing
  • Contact Data
  • Profile Data
  • Marketing and Event Data
Consent – only where you have given your consent for us to do so
Engage with you for the purposes of market research
  • Contact Data
  • Profile Data
  • Marketing and Event Data
Legitimate Interests – necessary to conduct genuine market research
Provide you with bespoke membership benefits
  • Contact Data
  • Membership Data
  • Profile Data
Legitimate Interests – necessary to provide you with exclusive membership benefits and offers
Manage your communications preferences
  • Contact Data
  • Membership Data
  • Marketing and Event Data
Legitimate Interests – necessary to keep our records updated and ensure they reflect your preferences
Maintain our records
  • Contact Data
  • Membership Data
  • Profile Data
  • Technical Data
  • Marketing and Event Data
Legitimate Interests – necessary to ensure accurate information within our organisation and comply with legal and regulatory obligations
Evaluate, develop, and improve our relationship with you
  • Contact Data
  • Profile Data
  • Membership Data
  • Marketing and Event Data
Legitimate Interests – necessary to analyse your feedback and preferences to enhance our offerings
Improve our digital services
  • Technical Data
  • Usage Data
Legitimate Interests – necessary to help us deliver a better and more personalised digital services

Third Party Web Sites and Services

    • FIX Protocol Ltd. may, from time to time, employ the services of other parties for dealing with matters that may include, but are not limited to, search engine facilities, advertising and marketing.
    • Where we do not already have your valid consent in place in accordance with the law, we will obtain your express OPT-IN consent before we share your personal data with any company outside the FIX group of companies for marketing purposes.
    • The third party providers of services do not have general access to Data provided by users of this Website, but only to the specific categories of Data they require in order to provide the contracted services. Any Data used by such parties is used only to the extent required by them to perform the services that FIX Protocol Ltd. requests. Any use for other purposes is strictly prohibited. Furthermore, any Data that is processed by third parties must be processed within the terms of this Policy and in accordance with the Data Protection Act 2018 and the UK GDPR.

For how long will you use my personal data?

      •  
      • We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements, in accordance with FIX’s Data Retention Policy
      • To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Changes of Business Ownership and Control

    • FIX Protocol Ltd. may, from time to time, expand or reduce its business and this may involve the sale of certain divisions or the transfer of control of certain divisions to other parties. Data you provide will, where it is relevant to any division so transferred, be transferred along with that division and the new owner or newly controlling party will, under the terms of this Policy, be permitted to use the Data for the purposes for which it was supplied by you.
    • In the event that any Data you submit will be transferred in such a manner, where required by applicable law, you will be contacted in advance and informed of the changes.

Controlling Access to your Data

    • Wherever you are required to submit Data, you will be given options to restrict our use of that Data.
    • Where we are required to do so, FIX Protocol Ltd. will always seek your OPT-IN consent before sharing or otherwise processing your Data.

Your Right to Withhold Information 

    • You may access certain areas of the Website without providing any Data at all, except information pertaining to your IP address and the ones collected by the cookies we use, as described in this Policy. However, to use all Services and Systems available on the Website you may be required to submit Account information or other Data.
    • You may restrict your internet browser’s use of Cookies. For more information see clause 11 below. Should you elect to do so, certain capabilities of the Website may be rendered inoperable.

Your Legal Rights

    • You may access your Account at any time to view or amend the Data. You may need to modify or update your Data if your circumstances change. Your marketing preferences (i.e. whether you wish to receive event announcements) may also be stored and you may change this at any time.
    • You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is manifestly unfounded or excessive (including if it is repetitive). Alternatively, we may refuse to comply with your request in these circumstances. These requests should be sent to fix@fixtrading.org.
    • We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
    • You have a number of rights under data protection laws in relation to your personal data. You have the right to:
  • Request access to your personal data (commonly known as a "subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
  • Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
  • Request erasure of your personal data in certain circumstances. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
  • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your data (including carrying out profiling based on our legitimate interests). In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your right to object.
  • You also have the absolute right to object any time to the processing of your personal data for direct marketing purposes.
  • Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
  • Withdraw consent at any time where we are relying on consent to process your personal data (see the table above for details of when we rely on your consent as the legal basis for using your data). However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
  • Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in one of the following scenarios:
    • If you want us to establish the data's accuracy;
    • Where our use of the data is unlawful but you do not want us to erase it;
    • Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
    • You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
    • If you wish to exercise any of the rights set out above, please contact fix@fixtrading.org for subject access rights.

Security 

    • Data security is of great importance to FIX Protocol Ltd. and to protect your Data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure Data collected by us in relation to your use of the Website and any Services or Systems therein.
    • These measures are to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to those employees, agents, contractors and other third parties who have a legitimate reason for accessing such data and/or where your explicit consent has been obtained in advance.
    • We have put in place procedures to deal with any suspected personal data breach (e.g. accidental release or disclosure or authorised access) and will notify you and any applicable regulator of a breach where we are legally required to do so.

Transfers of your personal data

    • Sharing your personal data
      • Third Parties

There are a few data controllers (i.e. Zestia Ltd, Eventbrite, TicketTailor, Xero, SurveyMonkey) that your personal data may be shared with.

Your personal information may also be shared with any company that is a member of our group of companies, where necessary for internal administrative purposes, corporate strategy, auditing and monitoring and research and development. We may also share your personal information with our group companies where they provide products and services to us that help us to provide products and services to you as our customer.

  • Your personal data may also be shared with the following categories of third parties:
    • Dispute and complaints services, should we need to resolve a complaint with you
    • IT service providers, to enable us to manage and host our IT platforms
    • Social media platforms and management tools, to enable us to respond to any communications with you via our social media channels
    • Marketing and advertising agencies, to help us develop our marketing communications so that they are relevant for you
    • Survey hosting providers, to enable us to send out surveys to you so that we can learn from your feedback and improve our customer service
    • Industry regulators, legal and tax services, to help us comply with our legal and regulatory obligations
    • Sponsors of events organised by FIX Protocol Ltd. (see clause 2.2.2 above)
  • We will also disclose your personal data to third parties:
    • where it is in our legitimate interests to do so to run, grow and develop our business:
      • if we sell or buy any business or assets, we may disclose your personal data to the prospective seller or buyer of such business or assets;
      • if FIX Protocol Ltd. or substantially all of its assets are acquired by a third party, in which case personal data held by FIX Protocol Ltd. will be one of the transferred assets;
      • if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, any lawful request from government or law enforcement officials and as may be required to meet national security or law enforcement requirements or prevent illegal activity;
    • to enforce our contract with you, to respond to any claims, to protect our rights or the rights of a third party, to protect the safety of any person or to prevent any illegal activity; or
    • to protect the rights, property or safety of FIX Protocol Ltd., our employees, customers, suppliers or other persons.
  • We share your personal data within the FIX group of companies. These companies are within the UK or other countries that have laws that provide the same level of protection as UK law, namely, EEA countries as well as Andorra, Argentina, Faroe Islands, Guernsey, Isle of Man, Israel, Jersey, New Zealand, Switzerland and Uruguay (Adequate Countries).
  • Where you have given your consent, we may share your Data with third parties who are based outside the UK and outside other countries that have laws that do not provide the same level of data protection as the UK law. We may do this:
    • To third parties, where you have given your consent for us to share your Data for marketing purposes;
    • To third party service providers that carry out certain functions on our behalf.
  • Whenever we transfer your personal data out of the UK to such entities, we ensure a similar degree of protection is afforded to it by ensuring that the following safeguards are in place.
    • We will only transfer your personal data to Adequate Countries; or
    • We may use specific standard contractual terms approved for use in the UK which give the transferred personal data the same protection as it has in the UK, namely the International Data Transfer Agreement or The International Data Transfer Addendum to the European Commission’s standard contractual clauses for international data transfers. To obtain a copy of these contractual safeguards, please contact us at fix@fixtrading.org.
  • Save as expressly detailed above, we will never share, sell or rent any of your personal data to any third party without notifying you and/or obtaining your consent. Where you have given your consent for us to use your personal data in a particular way, but later change your mind, you should contact us and we will stop doing so.

Cookies 

    • FIX Protocol Ltd. may set and access Cookies on your computer. We use this information and Data to tailor the Website for our visitors, showing them content that they are likely to be interested in, and displaying it according to their preferences.
    • A Cookie is a small file that resides on your computer’s hard drive and often contains an anonymous unique identifier and is accessible only by the web site that placed it there, not any other sites. Cookies can be first party or third party cookies.  First party cookies – cookies that the website you are visiting places on your computer.  Third party cookies – cookies placed on your computer through the website but by third parties.
    • You may delete Cookies, however you may lose any information that enables you to access the Website more quickly.
    • Certain capabilities of the Website may be rendered inoperable should you elect to disable cookies. FIX Protocol Ltd. Shall have no obligation to restore such capabilities or to provide support in respect restoring such capabilities.
    • You can choose to enable or disable Cookies in your web browser. By default, your browser will accept Cookies, however this can be altered. For further details please consult the help menu in your browser. Disabling Cookies may prevent you from using the full range of Services available on the Website.
    • We use the following first and third party cookies on our website:
    • Strictly necessary cookies – These cookies are essential in order to enable you to move around the website and use its features. Without these cookies, services you have asked for cannot be provided.  They are deleted when you close the browser.  These are first party cookies.
    • Performance cookies – These cookies collect information in an anonymous form about how visitors use our website. They allow us to recognise and count the number of visitors and to see how visitors move around the site when they are using it and the approximate regions that they are visiting from.  These are first party cookies.
    • Functionality cookies – These cookies allow the website to remember choices you make (such as your user name, language or the region you are in) and provide enhanced, more personal features. These cookies can also be used to remember changes you have made to text size, fonts and other parts of web pages that you can customise. The information these cookies collect may be anonymised and they cannot track your browsing activity on other websites. These are first party cookies.
    • Targeting Cookies – These cookies are used to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. They are usually third party cookies, placed by advertising networks with the website operator’s permission. They remember that you have visited a website and this information is shared with other organisations such as advertisers. Quite often targeting or advertising cookies will be linked to site functionality provided by the other organisation.

Cookie consent and opting out 

    • To comply with current legislation, we need to ask for your consent to set cookies on your computer or device via our Web Site.
    • When you arrive on our Web Site a pop-up message will appear informing you that we would like to place cookies on your device. If you, or another user of your computer or device, wish to withdraw your consent at any time, you can do so by altering your browser settings. If you continue without changing your settings, we will assume that you are happy to receive cookies on our Web Site.  For more information please visit http://www.allaboutcookies.org/ and http://www.youronlinechoices.com/uk/. 

Last Updated: April 2026