Privacy Policy
This policy explains what personal data Fexenvance collects, why we collect it, on what legal bases we process it, who receives it, how long we keep it, and the rights you can exercise over it at any time. It is written in full, not summarised, because privacy is one of the few areas where the fine print is the substance. The controller is Fexenvance, 4th Floor, 25 Canada Square, Canary Wharf, London E14 5LQ, United Kingdom, reachable at [email protected].
Definitions
"Personal data" means any information relating to an identified or identifiable person. "Processing" means anything we do with that data, including collecting, storing, reading, sharing and deleting it. "Controller" is the party deciding why and how data is processed; "processor" is a party processing it on the controller's instructions. You, as a user of the site, are the "data subject" whose data this policy describes.
Personal data we collect
We collect the data the service actually needs: first name and last name, telephone number, e-mail address, and the content of the enquiries and messages you send us. When you proceed to account verification we additionally collect your identity document, your proof of address and, where a check requires it, a selfie or liveness capture. When you transact, we collect the transaction records themselves: deposits, withdrawals, amounts, methods and statuses.
We do not collect special-category data beyond what verification law requires, we do not buy profiles from data brokers, and we do not ask for data the platform cannot use. If a field is not on the registration form, we do not need the answer.
Usage data
When you visit the site, standard technical information is generated: your IP address, the browser and device you use, the pages you open, the time of your visit and the address of the site that brought you here. This data keeps the service secure (it powers the login alerts and fraud detection described on the Security page), helps us fix errors, and shows which pages are useful. It is aggregated for statistics and does not identify you in the way your name and e-mail do.
Cookies
The site uses a small number of strictly necessary cookies and similar technologies: to keep you signed in, to remember your choices, and to protect forms against abuse. Where analytics or marketing cookies are ever used, they are loaded only with your consent through the consent banner, and you can change or withdraw that consent at any time from the same banner. We do not use cookies to build advertising profiles of visitors who have not consented.
Controller and processors
Fexenvance is the controller for the data described in this policy. Processors acting on our instructions include the identity-verification provider that checks your documents, the IT providers that host and back up the encrypted systems, and the support-tooling provider that handles our correspondence queue. Every processor works under a written contract that binds it to process data only for us, securely, and to delete or return it at the end of the engagement.
How the data is used
We use your data to: create and administer your account; verify your identity and meet anti-money-laundering obligations; provide, secure and improve the service, including the login alerts and monitoring that protect your money; answer your enquiries and provide support; send service communications; and, with your consent, send marketing you can unsubscribe from. Each use maps to a lawful basis in the next section, and we do not silently add new ones.
Legal bases and UK GDPR
Under the UK GDPR we rely on: contract, where processing is necessary to set up and run your account and execute your instructions; legal obligation, where we must verify identity, keep records and monitor transactions under anti-money-laundering law; legitimate interests, for site security, fraud prevention, record-keeping and service improvement, balanced against your expectations and rights; and consent, for marketing e-mails and any non-essential cookies, withdrawable at any time. Where we rely on legitimate interests, the interest is the secure, lawful operation of a financial service, and you may object as described under your rights below.
How long data is kept
Account and verification records are retained for the period UK anti-money-laundering law requires after the relationship ends, which for most records is five years. Transaction records follow the same schedule. Support correspondence is kept for up to three years after the last message, marketing consent records for as long as the consent is relevant, and usage statistics in aggregate form for up to 26 months. When a retention period expires, the data is deleted or anonymised; it is not kept "just in case".
Data sharing and disclosure
We share personal data only with: the licensed entity that executes transactions and holds client assets, to the extent the service requires; affiliated companies within our group where the platform's structure makes it necessary; IT and verification providers acting as processors; payment providers handling your deposits and withdrawals; and regulators, competent state authorities or courts, where a lawful request, a reporting duty or a legal order requires disclosure. We never sell your data, and we never share it for anyone else's advertising.
International transfers
Where a provider processes data outside the United Kingdom, the transfer is made only under safeguards the UK GDPR recognises: adequacy regulations, International Data Transfer Agreements, or the UK Extension to the EU Standard Contractual Clauses, together with supplementary measures where needed. A current list of the categories of recipients and their locations is available on request at the address above.
Security
Data is encrypted in transit and at rest, access is limited to the roles that need it, every access to verification records is logged, and sessions holding personal data expire automatically. The full set of technical and organisational measures is described on the Security page. If a personal-data breach ever occurs that poses a risk to you, we will notify the Information Commissioner's Office and, where the law requires, inform you directly without undue delay.
Your rights
You have the right to: access the personal data we hold about you and receive a copy; rectification of inaccurate data; erasure of data we no longer have a lawful reason to keep; restriction of processing while a dispute about accuracy or lawful basis is resolved; objection to processing based on legitimate interests, including profiling, and to direct marketing at any time; data portability, where processing is based on contract or consent, in a structured, machine-readable format; and to withdraw consent for consent-based processing without affecting what has gone before.
To exercise any right, write to [email protected]. We respond within one month, extended by two further months for complex requests, in which case we tell you within the first month why. Where verification law obliges us to keep certain records, erasure applies to everything else and the retained records are explained. You may also complain to the Information Commissioner's Office, the UK supervisory authority for data protection.
Service providers and analytics
The providers we rely on are chosen and reviewed for security and data protection as well as function: identity verification, hosting and backups, payment processing, e-mail delivery and support tooling. Any analytics used on the site runs either from our own logs or from privacy-respecting, aggregated tooling enabled only through consent, and its output is used to keep the site working, not to profile individuals.
Advertising and retargeting
We do not run retargeting or behavioural advertising on this site. If an advertising partner is ever engaged, their cookies load only after consent through the banner, the purposes are disclosed there, and refusing costs you nothing in site functionality. Our fraud warning additionally covers the fake advertisements that misuse brands like ours; we have no connection to them and never will.
Children's privacy
The service is directed at adults. Accounts are not offered to anyone under 18, and we do not knowingly collect data from children. If we learn that a minor has provided personal data, we delete it promptly and close any associated account. If you believe a child has given us data, contact [email protected] and it will be handled the same working day.
Changes and contact
This policy may be updated to reflect changes in law, technology or our services. The current version is always published on this page with its revision date below, and material changes affecting how your data is used are announced by e-mail before they take effect. For any question about this policy or your data, contact Client Support & Compliance at [email protected], 4th Floor, 25 Canada Square, Canary Wharf, London E14 5LQ, United Kingdom, during Monday to Friday, 9:00–17:30 UK time (excluding public holidays).
Current version: November 2026.