Privacy Policy

Privacy Notice

Acetop Financial Limited (“Acetop”, “we”, “us” or “our”) is committed to protecting your personal data and respecting your privacy.

Acetop Financial Limited is the Data Controller for the purposes of UK data protection law, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

This Privacy Notice explains how and why we collect, use, store and protect your personal information when you use our website or apply for or hold an account with us.

 

1. The Personal Data We Collect

We collect personal data from clients and prospective clients in order to provide regulated financial services and comply with our legal and regulatory obligations.

Personal data may be collected when you:

• Visit our website;
• Complete an account application;
• Subscribe to communications;
• Correspond with us by email, telephone or other means;
• Use our trading platform.

The types of personal data we collect may include your name, residential address, contact details, date of birth, nationality, passport or identification details, tax identification number, employment information, financial information (including income, wealth and source of funds), trading history, and account balances.

We also collect technical data such as IP address, device information, browser type, login data and usage data to ensure the security and functionality of our systems.

Where required by regulation, we may collect information necessary to assess your knowledge and experience, financial situation and investment objectives.

We do not store full card payment details.

 

2. How We Use Your Personal Data

We process your personal data for the following purposes:

• To assess your application and determine whether our services are appropriate for you;
• To verify your identity and conduct customer due diligence checks;
• To comply with anti-money laundering, sanctions and regulatory requirements;
• To provide and administer your trading account;
• To monitor transactions and trading activity;
• To communicate with you regarding your account or our services;
• To manage complaints and disputes;
• To improve our services and website;
• To send marketing communications where permitted.

 

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process your personal data. We rely on the following legal bases depending on the purpose:

Performance of a contract – where processing is necessary to provide our services to you or to take steps prior to entering into a contract.

Legal obligation – where processing is required to comply with legal and regulatory requirements, including obligations under the Financial Conduct Authority rules, the Money Laundering Regulations 2017, sanctions legislation and other applicable laws.

Legitimate interests – where processing is necessary for our legitimate business interests, such as risk management, fraud prevention, security monitoring and service improvement, provided such interests do not override your rights.

Consent – where required, for example in relation to certain marketing communications. You may withdraw consent at any time.

 

4. Special Category Data

In limited circumstances, we may process special category data (for example, health-related information where relevant to vulnerability considerations). This is processed only where necessary to comply with regulatory obligations, to protect vulnerable clients, or where permitted under Schedule 1 of the Data Protection Act 2018.

We apply additional safeguards when processing such data.

 

5. Disclosure of Personal Data

We do not sell your personal data.

We may share your personal data where necessary with:

• Regulatory authorities, law enforcement agencies and governmental bodies where required by law;
• Professional advisers such as auditors, legal advisers and accountants;
• Service providers who support our business operations, including identity verification providers, technology providers, payment providers and hosting providers;
• Other entities within our corporate group where applicable.

All service providers are subject to contractual obligations to safeguard personal data and may only process data in accordance with our instructions.

 

6. International Transfers

In some cases, your personal data may be transferred outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place in accordance with UK data protection law. This may include reliance on an adequacy decision, the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate security measures.

 

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal and regulatory obligations.

In most cases, we retain client data for a minimum of five years following the end of the business relationship. Certain records, including recorded communications, may be retained for up to ten years where required by regulation.

Where personal data is no longer required, it will be securely deleted or anonymised.

 

8. Security of Your Information

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration.

Access to personal data is restricted to authorised personnel who require access to perform their duties. Staff receive appropriate training in data protection and confidentiality obligations.

 

9. Your Rights

Under UK data protection law, you have rights including:

• The right to access your personal data;
• The right to request rectification of inaccurate data;
• The right to request erasure in certain circumstances;
• The right to restrict processing;
• The right to object to processing;
• The right to data portability;
• Rights relating to automated decision-making.

You may exercise your rights by contacting us using the details below. We will respond within one calendar month, subject to statutory exceptions.

 

10. Automated Decision-Making

Where we use automated systems for identity verification, risk assessment or fraud prevention, you may request human review of any decision that has a significant effect on you.

 

11. Marketing Communications

You may opt out of receiving marketing communications at any time. Where you have opted out, we will retain your details on a suppression list to ensure we do not contact you in future.

 

12. Complaints

If you have concerns regarding how we process your personal data, please contact us in the first instance.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

 

13. Contact Details

Acetop Financial Limited
1st Floor, 13 St Swithin’s Lane
London EC4N 8AL
United Kingdom

Email: cs@acetop.uk

ICO Registration Number: ZA231375