Privacy notice.

1. Data controller

Uvistium Ltd
55 King William Street
London EC4R 9AD
United Kingdom
Email: [email protected]

2. What data we collect

We collect only the data required to deliver our service:

• Identification data (name, date of birth, address, National Insurance number)
• Contact data (email, telephone)
• Identity documents (as part of KYC verification, MLR 2017)
• Financial data (bank information for deposits and withdrawals)
• Platform usage data (login times, IP addresses, browsers used)
• Transaction data (as part of wealth management)

3. Legal bases for processing

• Contract performance: Article 6(1)(b) UK GDPR
• Legal obligation (MLR, FSMA, HMRC): Article 6(1)(c) UK GDPR
• Legitimate interests (security, fraud prevention): Article 6(1)(f) UK GDPR

4. Storage locations

Your data is stored exclusively on servers within the United Kingdom (data centres in London and Manchester, BS EN 50600-3 certified). No transfer to third countries without an adequacy decision under the UK GDPR.

5. Retention period

Client data is stored for the duration of the contractual relationship and the subsequent statutory retention periods (e.g. HMRC: 6 years for tax records; MLR 2017: 5 years for KYC records). After expiry, data is securely deleted.

6. Your rights as a data subject

• Access (Article 15 UK GDPR)
• Rectification (Article 16)
• Erasure (Article 17 — where no statutory retention obligation applies)
• Restriction of processing (Article 18)
• Data portability (Article 20)
• Objection (Article 21)
• Complaint to the supervisory authority (Article 77)

Supervisory authority: Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Website: ico.org.uk.

7. Data protection officer

Our data protection officer is reachable by email at [email protected]. Response time for UK GDPR requests: maximum 30 days from receipt.