Privacy Policy
This policy explains what personal data Vermögensaufbau collects, why we use it, how long we keep it and what choices you have. It applies to the Platform and to our communications with you.
1. Who we are
Vermögensaufbau is the controller of the personal data described in this policy. Our registered address is High Holborn 188, EC3M 4AJ Edinburgh, United Kingdom. You can contact us about privacy matters at [email protected] or by telephone at +44 20 7946 2839.
2. Data we collect
We collect information in the following categories:
- Identity and contact data, such as your name, email address, telephone number and date of birth.
- Account data, such as login credentials, security settings and preferences.
- Verification data, such as identity documents and proof of address, where required to comply with anti-money-laundering rules.
- Usage data, such as pages viewed, features used, device identifiers, IP address and approximate location.
- Transaction data, such as settings for automated functions, order history and dashboard activity.
- Communications data, such as messages you send to our support team.
3. How we use your data and our legal bases
We use personal data only where we have a lawful basis under the UK General Data Protection Regulation and the Data Protection Act 2018. We rely on performance of a contract to create and run your account and provide the Platform. We rely on legal obligation to meet anti-money-laundering, tax and record-keeping duties. We rely on legitimate interests to secure the Platform, prevent fraud and improve our services, always balancing those interests against your rights. Where we send marketing messages, we rely on consent or on the soft opt-in, and you can withdraw consent at any time.
4. Cookies and similar technologies
We use strictly necessary cookies to keep you signed in and protect the Platform. With your consent, we may also use analytics and preference cookies. You can manage non-essential cookies through the banner shown on your first visit or through your browser settings.
5. Sharing your data
We do not sell personal data. We may share it with carefully selected service providers who process data on our behalf, including hosting, customer support, identity verification, payment and analytics providers. We may also disclose data where required by law, by a court or regulator, or to protect our legal rights. Any provider we use is bound by written obligations of confidentiality and data security.
6. International transfers
Some of our service providers may process data outside the United Kingdom. Where this happens, we use mechanisms recognised under UK law, such as adequacy regulations or the International Data Transfer Agreement or Addendum, and we assess the protections in place for each transfer.
7. Retention
We keep personal data only for as long as necessary for the purposes described in this policy. Account data is generally retained for the life of your account and for a further period required by law. Verification and transaction records are kept for the minimum period required by anti-money-laundering and tax legislation. Usage logs are retained for a shorter period unless needed for security investigations.
8. Security
We apply appropriate technical and organisational measures, including encryption in transit, access controls, monitoring and staff training. No system is completely secure, so we cannot guarantee absolute security. You should use a strong, unique password and enable two-factor authentication.
9. Your rights
Subject to certain exemptions, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have data erased in certain circumstances;
- restrict or object to particular processing;
- receive your data in a portable format;
- withdraw consent at any time where processing is based on consent.
To exercise these rights, contact us using the details above. We will respond within one month, and we may need to verify your identity first.
10. Complaints
If you have a concern about how we handle your data, please contact us first so that we can try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.
11. Children
The Platform is not intended for anyone under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have done so, we will take steps to delete it.
12. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page, and we will indicate the date of the most recent revision. For material changes, we will notify you before they take effect where appropriate.