Privacy Policy

Automatically Collected Data

Our systems automatically collect technical information to maintain security and improve our services. This includes your IP address, browser type, device information, operating system details, and usage patterns. We also track security events such as login attempts, failed authentication, and suspicious activity patterns to protect your account.

Location data may be collected when you access our services to verify legitimate access and detect potential fraud. This helps us identify unusual account activity and protect your financial information from unauthorised access.

Authorised Third Parties

We work with carefully selected partners including payment processors, security verification services, cloud hosting providers, and technical support vendors. These partners operate under strict confidentiality agreements and can only use your information for specified purposes related to our services.

Exercising Your Rights

To exercise any of these rights, contact our privacy team using the details provided below. We'll verify your identity and respond within 30 days. For complex requests, we may extend this period by up to 60 additional days and will explain any delays.

Please note that some rights may be limited by legal requirements for financial institutions. For example, we must retain certain transaction records for regulatory compliance even if you request deletion.

Technical Safeguards

All sensitive data is encrypted using industry-standard AES-256 encryption both in transit and at rest. Our systems use secure communication protocols, multi-factor authentication, and continuous monitoring to detect and prevent unauthorised access attempts.

We maintain secure data centres with physical security measures, environmental controls, and backup power systems. Regular penetration testing and vulnerability assessments help us identify and address potential security risks before they affect your data.

Retention Periods

Financial transaction records are typically retained for seven years to comply with UK financial regulations. Account information and identity verification documents are kept for the duration of your relationship with us plus five years. Marketing preferences and communication logs are retained for three years unless you request earlier deletion.

Technical logs and security monitoring data are usually retained for 12 months to maintain system security and detect fraud patterns. Some anonymised data may be retained longer for statistical analysis and service improvement purposes.

Transfer Safeguards

For transfers to countries outside the UK, we use standard contractual clauses approved by the UK Information Commissioner's Office. These contracts require recipients to maintain equivalent levels of data protection and provide you with enforceable rights regarding your personal information.

We regularly review the security and privacy practices of international partners to ensure ongoing compliance with UK data protection standards. Any changes to transfer arrangements will be communicated through updates to this privacy policy.