Privacy Policy

1. Introduction

This Privacy Policy explains how Vonix Financial Group Ltd (Vonix, we, us) collects, uses, shares and protects personal data when you visit our website, use the Vonix App or interact with our support teams. Vonix is the controller of the personal data described in this policy, except where a regulated Partner processes your data as an independent controller for the product it provides.

We are registered in England and Wales under company number 17311588 with our registered office at 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom. We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the data-protection laws of the countries in which we offer the Services.

2. Personal data we collect

We collect the following categories of personal data:

• Identity data: name, date of birth, nationality, identity document details and images, photographs and liveness data captured during verification, tax identification numbers where required;
• Contact data: email address, telephone number, residential or registered address;
• Business data (business profiles): company name, registration number, directors, beneficial owners, nature of business and expected activity;
• Financial and transaction data: balances, payments, transfers, card transactions, currency conversions, digital-asset activity, beneficiary details, source-of-funds information;
• Device and usage data: IP address, device identifiers, operating system, app version, log data, approximate location, and information collected through cookies and similar technologies as described in our Cookie Policy;
• Communications: messages, emails and call recordings with our support teams, and your marketing preferences;
• Information from third parties: results of identity, sanctions, politically-exposed-person and fraud checks, data from credit-reference and verification agencies, Partners, card networks and public registers.

3. How we use personal data and our lawful bases

We use personal data for the following purposes:

Where we rely on legitimate interests we have balanced those interests against your rights and freedoms. You can object to processing based on legitimate interests at any time; see section 8.

4. Who we share personal data with

We share personal data only where necessary and in accordance with law, with:

• Regulated Partners that provide accounts, payments, cards, currency exchange or digital-asset services. Partners act as independent controllers for those products and their privacy notices apply;
• Verification, fraud-prevention and screening providers, credit-reference agencies and public registers;
• Card schemes, banks and payment networks involved in executing your transactions;
• Service providers that support our operations, such as cloud hosting, customer-support tools, communications, analytics and security, acting as processors under contract;
• Regulators, law-enforcement and tax authorities, courts and other bodies where required by law or to protect our rights or the rights of others;
• Professional advisers and, in the event of a merger, acquisition or sale of assets, prospective purchasers.

We do not sell personal data.

5. International transfers

Because we serve customers in the United Kingdom, the European Economic Area and Latin America and work with Partners and providers in several countries, personal data may be transferred to and processed outside the country in which you live. Where we transfer personal data outside the UK or the EEA we rely on adequacy regulations, the International Data Transfer Agreement or Standard Contractual Clauses, together with additional safeguards where appropriate. You can request a copy of the relevant safeguards by contacting us.

6. Retention

We keep personal data only for as long as necessary for the purposes described above. Identity, transaction and compliance records are generally retained for at least five years after the end of our relationship with you, as required by anti-money-laundering and financial-services regulations, and longer where a legal claim or regulatory investigation requires it. Marketing data is kept until you withdraw consent or object. Usage and device data is retained for shorter periods defined in our internal retention schedule, after which it is deleted or anonymised.

7. Security

We apply technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure, including encryption in transit and at rest, access controls, logging and monitoring, secure development practices and staff training. No system is completely secure, and you also play a role by keeping your credentials private and your devices up to date.

8. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you and receive a copy;
• rectify inaccurate or incomplete data;
• erase your data in certain circumstances, noting that we must keep some records to comply with legal obligations;
• restrict or object to certain processing, including processing based on legitimate interests and direct marketing;
• data portability, receiving data you provided to us in a structured, machine-readable format;
• withdraw consent at any time where processing is based on consent;
• not be subject to solely automated decisions with legal or similarly significant effects, except where permitted by law. Some verification and fraud-prevention decisions are automated to meet legal obligations; you may request human review of such a decision.

To exercise your rights, contact us at support@getvonix.com. We will respond within one month, extendable where requests are complex. We may need to verify your identity before acting on a request.

9. Children

The Services are not intended for anyone under 18 and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can delete it.

10. Cookies and similar technologies

Our website and App use cookies and similar technologies. Details of what we use and how to manage your preferences are in our Cookie Policy.

11. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top shows when it was last revised. For material changes we will notify you through the App or by email.

12. How to contact us and how to complain

Data protection contact: support@getvonix.com
Postal address: Vonix Financial Group Ltd, 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom

If you are not satisfied with how we handle your personal data you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or with the supervisory authority in the country where you live or work. We would appreciate the opportunity to address your concerns first.