Data Privacy

We will provide structured training to ensure that all staff understand their obligations under data protection law, including GDPR and the UK Data Protection Act. Refresher sessions will be offered annually and whenever material changes occur.

A clear Data Privacy Policy will be created and made accessible to all staff so that responsibilities are well understood. We will also maintain a Data Processing Register documenting how customer and business data is collected, stored, and processed, in line with regulatory standards.

Customer data, including email and telephone records, will be securely collected, stored, and safeguarded in accordance with applicable legal and regulatory requirements. Where required by applicable regulatory obligations, relevant customer data will be retained for a minimum period of five years. Compliance will be reviewed through scheduled audits, with adjustments made where weaknesses are identified.

Training on AML, CTF, and data privacy will be mandatory each year, ensuring all team members remain up to date with their responsibilities. Additional workshops will be provided where new regulations or internal procedures require it.