Privacy Policy

Definitions

In this policy, True Vestoworthen is the operator of this website and the platform; personal data means information relating to an identified or identifiable individual, such as your name, email address or phone number; processing means anything done with that information, including collecting, storing, reading, sharing and deleting it.

Personal data we collect

We collect the details you give us when registering and verifying an account: full name, email address, phone number, country of residence, and, as part of verification under our AML/KYC policy, an identity document and proof of address. Where a payment is made, we receive the payment reference and, for cards, the last four digits from the provider. If you write to support, the content of your messages is kept with your account record.

We collect nothing beyond what the service and our legal duties require, and we never buy personal data from brokers. If a field is optional, it says so at the point of collection.

Usage data

When you use the site, we record technical information necessary to run and secure it: IP address, browser type, pages visited and similar server log entries. This data keeps the service available, diagnoses faults and protects against abuse. The market ticker loads live prices for displayed instruments; it does not profile you.

Cookies

The site uses a small number of strictly necessary cookies to keep your session working and to remember choices such as a dismissed notice. Analytics cookies are used only in aggregate and, where required, with your consent; if a Google Analytics identifier is added later, it will be disclosed here before it is switched on. You can refuse or delete cookies in your browser settings; the strictly necessary ones cannot be refused without breaking the site.

Controller and processors

True Vestoworthen is the controller of the personal data described in this policy, deciding why and how it is processed. Certain providers act as processors, handling data on our documented instructions only: identity verification, IT and hosting, email delivery and payment providers. Each is bound by contract to process data solely for our stated purposes, with appropriate security.

Purposes and lawful bases

We process personal data for these purposes and on these bases: performing the service and the contract with you, including account creation, verification, support and withdrawals (performance of a contract); meeting legal obligations such as anti-money laundering checks and record keeping (legal obligation); keeping the platform secure and preventing fraud (legitimate interests); answering enquiries sent to us (legitimate interests); and, separately, sending marketing messages only where you have consented, with withdrawal of consent possible at any time through the link in any such message or by writing to us.

Data protection law

Processing follows the applicable United Kingdom data protection requirements, including the UK GDPR and the Data Protection Act 2018, which give you the rights listed later on this page. We apply the same standards to verification records described in the AML/KYC policy, which that page explains in detail.

How long data is kept

Retention follows purpose. Account and contract data: for the life of the account and up to seven years afterwards where required for legal and accounting purposes. Verification (KYC/AML) records: for the life of the account and the retention period required by anti-money laundering law, after which they are deleted or anonymised. Support correspondence: up to three years after the matter closes. Usage logs: up to twelve months, aggregated or deleted thereafter. Marketing consent records: for as long as the consent is active plus three years, to evidence its withdrawal.

Who data is disclosed to

Beyond those processors, data is shared only where there is a proper reason: with affiliated companies involved in providing the service, under the same confidentiality obligations; with regulators, law enforcement or other authorities where the law requires or permits disclosure; and with professional advisers under duty of confidence. We do not sell personal data or disclose it for anyone else's advertising.

International transfers

Where a provider processes data outside the United Kingdom, transfers take place only under an adequate legal mechanism, such as UK adequacy regulations or the international data transfer addendum. A list of current processing locations is available on request.

Security of your data

Data is encrypted in transit and at rest, access is limited to personnel who need it, and actions on records are logged. The Security page describes the measures in full. No system is perfectly secure, so we also maintain an incident process: if a breach affecting your rights ever occurs, affected users and the regulator will be notified as the law requires.

Your rights

You have the right to access the personal data we hold about you; to have inaccurate data corrected; to have data erased where no longer necessary, though legal duties such as AML retention can override erasure for specific records; to restrict or object to processing, including objecting to processing based on legitimate interests; to data portability for data you provided on a contractual basis; and to withdraw consent for marketing at any time. To exercise any right, write to [email protected]. We respond within the statutory period; identity verification applies to requests, precisely to protect your data from impersonators.

If you believe we have mishandled your data, you may complain to us through the complaints procedure and, in the United Kingdom, to the Information Commissioner's Office, whose details are available from official sources.

Children

The service is intended solely for adults. Accounts are not opened for anyone under eighteen, and if we learn that data has been provided by a minor, the account is closed and the data deleted, subject to any legal obligation to retain records of the event itself.

Links to other sites

Our pages occasionally link to external sites, for example payment providers' own help pages. Once you leave this site, your data is governed by the destination's policy, not this one; we link only to organisations we rely on, but we do not control their practices.

Changes to this policy

This policy may be updated to reflect changes in the service or the law. The revised version applies from its publication on this page; where a change materially affects you, we will also notify account holders by email before it takes effect. The version you agreed to when registering is available on request.

Contact

Privacy questions, requests and complaints about data handling: [email protected], Client Support & Compliance, Monday to Friday, 9:00–17:30 GMT. Postal address: London, United Kingdom.