Privacy Policy | FXRates.uk

1. Who we are

FXRates.uk Ltd ("we", "us", "our") is a company registered in England & Wales. We are authorised and regulated by the Financial Conduct Authority (FCA). Our registered office is in London, UK.

We act as the data controller for personal data collected through our website and services. If you have any questions about this policy, contact us at privacy@fxrates.uk.

2. What data we collect

We may collect the following categories of personal data:

Identity data: name, date of birth, national insurance number, passport or driving licence details.
Contact data: email address, telephone number, postal address.
Financial data: bank account details, transaction history, source of funds information.
Technical data: IP address, browser type, device identifiers, cookies and usage data.
Marketing data: your preferences for receiving communications from us.

3. How we use your data

We use your personal data to:

Provide and manage your account and currency exchange services.
Comply with FCA regulatory and AML/KYC obligations.
Process payments and verify transactions.
Detect and prevent fraud and financial crime.
Send you service communications and, where you have consented, marketing updates.
Improve our website, platform, and services.

4. Legal basis for processing

We process your personal data on the following legal bases:

Contract: to perform the currency exchange services you have requested.
Legal obligation: to comply with FCA, HMRC, and anti-money laundering regulations.
Legitimate interests: fraud prevention, security, and improving our services.
Consent: for marketing communications (which you may withdraw at any time).

5. Data sharing

We do not sell your personal data. We may share it with trusted third parties including payment processors, identity verification providers, banking partners, and regulatory authorities as required by law.

6. Data retention

We retain personal data for as long as necessary to provide our services and meet our legal obligations. Financial transaction records are retained for a minimum of 5 years as required by FCA rules.

7. Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data (subject to legal obligations).
Object to or restrict processing.
Request data portability.
Withdraw consent for marketing at any time.

To exercise any of these rights, contact us at privacy@fxrates.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use cookies to improve your experience on our website. For full details, please read our Cookie Policy.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The date at the top of this page shows when it was last revised.

10. Contact us

For any privacy-related questions or requests, contact our Data Protection Officer at privacy@fxrates.uk or write to FXRates.uk Ltd, London, UK.