Personal Data Processing Policy

General Provisions

This Personal Data Processing Policy (hereinafter, the “Policy”) establishes the procedure and conditions for the collection, storage, use, and processing of personal data by the Operator when providing access to the services of the website. The Operator processes personal data strictly in accordance with the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

Legal Basis for Personal Data Processing

The processing of personal data is carried out under the following legal grounds:

Consent from the data subject, where applicable;
Performance of a contract to which the data subject is party;
Compliance with legal obligations applicable to the Operator;
Legitimate interests pursued by the Operator or a third party, provided these interests do not override the rights and freedoms of the data subject, as stipulated in Article 6 of UK GDPR.

Categories of Personal Data Processed

The Operator may process the following categories of personal data:

Identification data (e.g., full name, date of birth);
Contact details (e.g., address, telephone number, email);
Financial information (e.g., payment details, transaction history);
Technical data (e.g., IP address, device information);
Verification documents (e.g., identification documents as required for regulatory compliance).

Purposes of Personal Data Processing

Personal data are processed solely for the following purposes:

Providing access to the website and its functionality;
Fulfilling contractual obligations to users;
Ensuring compliance with legal and regulatory requirements, including KYC (Know Your Customer) and AML (Anti-Money Laundering) procedures as mandated by GB law;
Maintaining the security and integrity of services;
Responding to user enquiries and requests;
Preventing fraud and other unlawful activities.

Methods of Personal Data Processing

The Operator processes personal data using automated, semi-automated, or manual methods, observing principles of lawfulness, fairness, and transparency. All processing is subject to appropriate technical and organisational measures to ensure data confidentiality and integrity.

Data Retention Period

Personal data are retained for the period necessary to achieve the purposes for which they were collected, or as required by applicable legal and regulatory obligations. Upon expiration of the retention period, personal data will be deleted or anonymised.

Disclosure and Transfer of Personal Data

Personal data may be disclosed solely in the following cases:

To regulatory authorities and competent government bodies in accordance with applicable law;
To third parties engaged by the Operator for the fulfilment of contractual and legal obligations, subject to data protection requirements;
To legal, financial, or other advisors, where necessary for compliance or assertion of legal claims.

Personal data may be transferred outside the UK only in accordance with the requirements and safeguards set forth in UK GDPR.

Rights of Data Subjects

Under UK GDPR, data subjects have the following rights with respect to their personal data:

Right to access personal data;
Right to rectification of inaccurate data;
Right to erasure (“right to be forgotten”);
Right to restriction of processing;
Right to data portability;
Right to object to processing;
Right not to be subject to automated decision-making, including profiling.

Requests to exercise these rights may be submitted to the contact details listed below. The Operator will respond in accordance with the statutory timeframes.

Security Measures

The Operator implements all appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, as required by the Data Protection Act 2018 and UK GDPR.

Contact Information

For enquiries regarding the processing of personal data or to exercise data subject rights, please contact the Data Protection Officer:

Data Protection Officer

The Data Protection Office

123 Fleet Street

London, EC4A 2BB

United Kingdom

Email: [email protected]

Telephone: +44 20 7123 4567

Amendment of the Policy

The Operator reserves the right to amend or update this Policy in accordance with changes in legislation or operational requirements. The current version of the Policy is always available on this page.

Date of last revision: 7 June 2024