Introduction

While you may already be aware of the General Data Protection Regulation (GDPR), we encourage you to review this privacy policy ("the Policy") to better understand how Your Consultants Ltd collects, uses, and shares the personal information you provide, as well as the data we collect about you in the course of our business operations (referred to as "Personal Data"). This Policy also outlines our use of cookies on our website and in communications with you.

In this Policy, references to “Your Consultants Ltd,” “we,” “us,” or “our” refer to Your Consultants Ltd. Our registered office is located at [address].

What Personal Data Do We Process?

Personal Data refers to any information that identifies or can be linked to you, and is under our control. Given the nature of our services, the types of personal data we process can vary widely and may include:

Information you provide to us:

• Personal details (e.g., name, date of birth, gender, employment details)

• Contact information (e.g., address, email, phone numbers)

• Identity details (e.g., nationality, passport information, driver’s license, National Insurance number)

• Bank details (e.g., account name, account number, sort code)

• Information regarding transactions with other foreign exchange providers you provide for comparison

Information we collect about you:

• Transactional data (e.g., account details, trades, payments, suspicious activities)

• Communication records (e.g., emails, phone conversations)

• Publicly available information (e.g., LinkedIn profiles)

• Data from investigatory agencies (e.g., anti-money laundering reports, credit checks)

• Risk ratings (e.g., credit risk, transactional behavior)

• Data collected from website usage

In rare cases, we may process sensitive Personal Data, such as health information, racial or ethnic origin, religious or political beliefs, or genetic data, in strict compliance with legal standards.

How Do We Collect Personal Data?

We may gather your Personal Data at different stages of our interaction, such as when you:

• Register with us online, subscribe to our services, complete forms, or correspond with us

• Provide feedback on our services or website

We may also collect data from third parties, including:

• Partners or clients who introduce you to us

• Credit reference and fraud prevention agencies

• Identity verification services

• Government or law enforcement agencies

How Do We Use Personal Data?

We use your Personal Data for the following purposes:

• To provide foreign exchange and related services

• For marketing and business development activities

• To fulfill legal and regulatory obligations

• To defend our legal rights and handle legal proceedings

• To monitor website usage for performance and marketing analysis

• To share with professional advisors or prospective buyers in the event of a business transaction

• For research and to manage website and business operations

• To address complaints and prevent fraud or illegal activities

We may also aggregate and share anonymized data for analytical purposes, ensuring that no individual can be identified.

Legal Basis for Processing Personal Data

We will only process your Personal Data when a lawful basis exists, including:

• Consent: When you have given consent, which you can withdraw at any time.

• Contractual necessity: To perform a contract with you or take steps before entering into a contract.

• Legitimate interests: For purposes related to providing services and conducting business activities.

• Legal compliance: To fulfill legal or regulatory obligations.

Sharing Personal Data with Third Parties

To deliver services and meet legal obligations, we may share your Personal Data with:

• Third-party agents, suppliers, or contractors bound by confidentiality

• Service providers, professional advisors, regulators, and governmental institutions

• Any party required by law, regulation, or court order

Transfers Outside the EEA

In some cases, your Personal Data may be transferred to countries outside the European Economic Area (EEA). When this occurs, we ensure compliance with GDPR data protection standards. Your data may be processed by staff located outside the EEA working for our suppliers. By submitting your Personal Data, you agree to such transfers, storage, or processing. We take all reasonable steps to ensure that your data remains secure.

Keeping Your Information Secure

While we strive to protect your Personal Data, internet transmission is not entirely secure. Any transmission is at your own risk. Once we receive your data, we apply strict security measures to prevent unauthorized access, in line with GDPR requirements.

Retention of Personal Data

We retain your Personal Data only for as long as necessary for the purposes for which it was collected. This duration depends on:

• The specific purpose of data collection (e.g., providing services)

• Legal obligations, such as requirements under the Money Laundering Regulations 2017 and the Companies Act 2006, which may mandate retaining data for up to six years after the end of our business relationship.

Once the retention period ends, we will delete or anonymize your Personal Data.

Your Rights

You have several rights concerning your Personal Data, including:

• Access: You can request access to your data via a Subject Access Request (SAR).

• Correction: You can ask for corrections if your data is inaccurate, outdated, or incomplete.

• Erasure: You can request the deletion of your data when it is no longer needed.

• Restriction: You can request a halt in processing if the accuracy or legality of processing is disputed.

• Withdraw consent: You may withdraw your consent to data processing at any time.

• Object to legitimate interest processing: You can ask us to stop processing your data based on legitimate interests.

• Marketing opt-out: You can opt out of marketing communications by adjusting your preferences in Your Account.

To exercise any of these rights, contact us. We may request proof of identity before proceeding with your request.

If we are unable to comply with your request, we will explain our reasons for refusal.