Privacy Policy

Your personal data and your assets are our highest priority. We are fully committed to safeguarding them.

Greymont Finova collects and stores data essential to your trading activities. How we collect and store this information is explained in the Privacy Policy below.

Our policy is underpinned by the following principles:

• To provide complete transparency about how we collect and store your personal data:

Our aim is to ensure you understand how we collect and process data, so you can make informed decisions. We follow clear guidelines and processes for handling data on this website. Our policy sets out the specific methods we use, providing clear and concrete information on its use. You are in the driver's seat.

We will always share information promptly when we determine you need to be informed. Transparency is fundamental to our approach.

Our trained staff are always on hand to answer any questions you may have about any aspect of our processes, including our obligations under United Kingdom law. You can contact us at: info@greymont-finova.com

• We do not use personal data for any purpose other than as set out in our Privacy Policy.

We may process personal data for the following purposes: to ensure the proper functioning of Greymont Finova services and to connect trader members with third-party trading platforms. We may also use it to maintain and enhance website features and services, protect our rights, and meet regulatory or other legal obligations. Finally, where necessary to deliver administrative and other business functions related to the Services we provide to you, the client.

To provide better services tailored to your preferences and needs, Greymont Finova processes personal data.

• To ensure you are able to use essential tools to protect your personal data and safeguard your rights in this regard:

At any time, you can contact us to access all of your personal data. We can also update or delete it as required. Furthermore, we can facilitate requests to transfer that data to you or to a nominated third party. We provide these services to help you better exercise your rights to privacy and control.

• Safeguard your personal data:

Our security systems are of the highest quality, employing bank‑grade security measures. While a 100% guarantee is not possible, we remain committed to continually upgrading our systems to the highest standards and strengthening the measures we already have in place.

We maintain a detailed and comprehensive privacy policy and state-of-the-art security systems.

1. The Scope?

This policy sets out our procedures for the collection, processing, and sharing of all personal data we handle relating to natural persons.

Our policy terms apply to all natural persons who are identifiable or already identified. This specifically includes any individual who can be identified, or has already been identified, using data entrusted to us or data we can access and/or combine.

As defined in the Privacy Policy, data processing specifically refers to the storage, management and organisation of personal data.

We do not collect, or seek to collect, any information about individuals under 18. We also do not permit individuals under 18 to utilise our platform for any purpose. If we discover any user or any information relating to someone under 18, we will delete it immediately.

2. What personal data do we retain?

When you register with us, we collect the personal data needed to enable you to use our services. Where required, we may also request additional personal data to verify account ownership, for example during security checks. To maintain and enhance the quality of our services, we collect and analyse data about how you use our platform and those of our third-party partners.

3. You are under no obligation to provide the company with your personal data at any time.

While you are under no obligation to provide your data, choosing not to do so may limit our ability to deliver certain services and features to you. It may also mean you are restricted from using our platform.

4. What personal data do we collect? When you visit our website, we may collect the following personal data:

We do not collect data that can personally identify you. However, we do collect information such as your account activity, IP addresses, and the dates and times of access. For maintenance, security and support services, we retain system crash reports, browser information, and the type of device used to access your account. We also record the language associated with your account.

Regarding personal data collection, we only collect and retain the information you consent to provide when you connect to a third-party trading platform through us.

The personal data you have provided to third-party platforms may include: your full name, address, telephone number and email address.

5. Why does the company need my personal data, and is it lawful for them to collect it?

The company collects, stores, and processes your personal information solely for the purposes set out in this Policy. All such uses and processing comply with the relevant laws of United Kingdom.

The company will not handle, process, or transmit your data except in accordance with the applicable laws in United Kingdom. The following are the legal bases for doing so:

• You have agreed to allow the company to store and process your personal data. By submitting your information to the company, you authorise us to transfer it to the relevant third-party trading platform. You have consented to the processing of your personal data for one or more specified purposes.
• To improve services, pursue legitimate interests, and establish or defend legal claims, among other purposes, the company may need to store and process your personal data.
• Data processing is necessary to comply with legal obligations.

If you would like more information about the data processing the company is required to undertake, please contact us by email.

Below you will find a list of the specific purposes for which we may process your personal data, together with the lawful basis.

6. Sharing of Personal Data with Third Parties

For storing and processing IP addresses, conducting user surveys and analysis, and providing other related services, the company may share anonymised personal data with third-party service providers.

At your request, we will share specific personal data you provide with third-party services. In such cases, your data will be used in accordance with those companies’ privacy policies. This may include multiple digital trading platforms.

To enhance the services we provide to clients and improve overall quality, the company may share personal information with its affiliates and partner companies.

Where required by law or to protect the company’s rights and assets, as well as those of third-party partners, we may disclose data to the relevant legal or regulatory authorities.

In the event of a significant business transaction, such as the sale of the company or seeking investment or a loan, relevant data may be shared in a lawful and appropriate manner. This also applies to any company merger, restructuring, consolidation, or bankruptcy, in accordance with the law.

7. Cookies and Third-Party Service Providers

For site analytics and in collaboration with advertising partners, we may use cookies and similar technologies, in accordance with the law and standard practice.

Cookies - small pieces of data stored on your device when you visit a website - help us collect information about browsing behaviour, preferences, and more. They are used to personalise and enhance your experience. They allow us to remember your settings and preferences, and to tailor our services accordingly. These cookies are also used for site analytics and statistical reporting for strategic planning.

Broadly speaking, the site uses two types of cookies. Session cookies are stored only for the duration of your visit and are deleted when you close your browser. The others are persistent cookies, which remain in your browser even after your session ends. These help the site recognise you as a returning visitor and make it easier for you to use the site.

Types of cookies:

Cookies may be used where necessary, in line with their intended purpose:

Cookies are blocked or deleted

To delete or block cookies, you will need to use your browser settings. Follow the links below for step-by-step instructions for the most popular browsers.

• firefox
• Microsoft Edge
• Google Chrome
• safari

Blocking cookies will prevent some functions and site features from working as expected.

ONLINE TRACKING NOTICE

Your personal data will be retained for as long as necessary to carry out the operations described elsewhere in this policy. It may be kept for longer where required by applicable laws, regulations, or company policies.

Your personal data will be shared, at your request and discretion, with third-party trading platforms for a period of 12 months. Upon the expiry of those 12 months, and with your consent, your data will be shared for a further 12 months.

Our processes include the regular review of all personal data to determine whether it remains necessary.

9. Transfers of personal data to third countries or international organisations

When required to deliver our services and/or for security reasons, we may transfer personal data to third countries (countries other than your own) and to international organisations under strict security protocols. We apply the highest standards of data security to protect your data and ensure you have access to legal remedies and rights in all circumstances.

All residents within the EEA (European Economic Area) are protected by data protection laws and safeguards.

• All data transfers are carried out under the EU’s legal jurisdiction and competence, in line with the data protection standards set out in Article 45(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”)
• All data transfers between public bodies or authorities comply with Article 46(2). They are governed by a legally binding and enforceable agreement.
• The European Commission’s Standard Contractual Clauses, adopted under Article 46(2)(c) of the GDPR, set out the conditions for data transfers, which are carried out in accordance with them. The Clauses are available at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

For details about the specific security measures the company uses to safeguard your personal data during third-country transfers, please email your request to info@wealthwaydigital.uk

10. Protection of Personal Data

Personal data is safeguarded using the highest standards of technical and organisational measures, aligned with industry best practice. These measures are designed to prevent the unlawful or accidental destruction, loss, or alteration of data.

While we exercise the utmost care and apply gold-standard data protection procedures, as required by law, it is not possible to guarantee under all circumstances that your personal data will remain accurate and entirely error-free. Accordingly, we cannot be held liable for any disclosure of personal data, or for any incidental, intangible, indirect, or consequential loss or damage arising from such events. This includes circumstances beyond our control, such as disclosure arising from transmission errors, unauthorised third-party access, service interruptions, or any other similar cause.

In response to legally binding requests from regulators or other legal authorities, we may be obliged to disclose your personal data to those authorities. Once disclosed under a legal obligation, we cannot control how those authorities handle, store or protect your data.

Anything sent over the internet, including personal information, carries a certain risk of interception and is not completely secure in transit. The Company cannot guarantee the security of any data transmitted online at all times.

11. Hyperlinks to third-party websites

On this website, you may encounter links to third-party applications and websites. Please note that these are neither affiliated with nor controlled by our company, and our privacy policy does not apply to them. They have their own policies and procedures for the collection and processing of personal data, and we are not responsible for such activities. Use at your own discretion.

Always review a company or service’s privacy policy when visiting their website before providing any personal data. Make sure their data collection, use and processing practices align with your preferences and priorities. Any data you choose to share should be provided directly to the service provider.

12. Policy Amendments

We reserve the right to update or amend this policy at any time. We will notify you of any changes via the website and other appropriate channels. The updated privacy policy will be posted on the website and will take effect immediately upon publication, unless stated otherwise.

13. Your data protection rights

You retain complete control and the final say over how your personal data is used, including the right to verify its accuracy, correct any errors, and choose to delete it or limit the scope and nature of any processing undertaken by us.

This page contains information relevant to residents of the EEA:

Your personal data is protected by the rights set out herein. By emailing the address below, you may exercise those rights immediately.

Accessing Your Rights

You may access the personal data you have provided to us at any time to verify whether it is accurate. Any of your personal data that we process is available to you and therefore verifiable.

You may request your personal data for verification at any time, and it will be supplied to you in electronic format. If you request additional copies of the personal data being processed, beyond the initial copy provided to you, a reasonable fee may be charged

Rights granted by law and under the privacy policy must not infringe the rights of others. The company may refuse or limit access to personal data where such access would infringe the rights and freedoms of others.

Right to Rectify Errors

Any inaccuracies in your personal data, whether by omission or incorrect information, may be corrected by you or the Company to ensure it can be processed correctly.

Erasure Rights

You have the right to request the deletion of your personal data in the following circumstances: 1) it has been processed without your consent or outside lawful parameters; 2) you request its removal and the Company has no legal obligation to retain it; 3) you object to any processing by us, even if lawful and based on our legitimate interests or those of a third-party provider; and 4) we are required by law to delete your data.

The right to erasure may be overridden by legal obligations under EU or Member State law. Similarly, it does not apply where the data is required for the exercise or defence of legal claims.

Right to Restrict Data Processing

You have the right to request a restriction of processing of your personal data where you believe it contains inaccuracies.

If you request that the use of your personal data be restricted, it will be deleted except in the following circumstances: 1) where laws of the European Union or any Member State prevent this. 2) With your consent, where it is necessary to establish, exercise or defend legal claims. 3) To protect another individual’s rights.

The Right to Data Portability

You have the right to access and review any personal data you have provided, where you have consented in any form to its collection and it is processed by automated systems.

You have the right to request the transfer of your personal data to another company or organisation, where technically feasible. This does not affect your right to have your data deleted. This right does not apply where its exercise would infringe the rights or freedoms of another individual.

Right to object to data processing

Notwithstanding the Company’s right to pursue its legitimate interests, or those of a third‑party service provider, you may object to the processing and request that it cease. This right does not apply where there are compelling legal grounds to continue processing, such as to establish, exercise or defend legal claims. In such circumstances, we may continue to process your personal data.

You may at any time request that your personal data not be processed for any direct marketing purposes.

Right to Withdraw or Refuse Consent

You have the right to withdraw your consent to our processing of your personal data at any time and, where possible, with immediate effect. This will not apply retroactively to any processing carried out before your consent was withdrawn.

If you are dissatisfied for any reason, you have the right to lodge a complaint with any legal, regulatory or other supervisory authority.

If you believe your rights and freedoms have been violated in relation to the processing of your personal data, EU Member States have established regulatory and supervisory authorities to address such matters. You may lodge a complaint with these authorities at your discretion.

Section 13 sets out circumstances in which your personal data rights may be limited under European Union law or the laws of its Member States.

Once we receive your request about your personal data and how it is processed, we will give you access to the information you have asked for, as set out in Section 13 of this policy. We may extend this timeframe by up to two months, depending on the volume of requests and the nature of your enquiry. If an extension is required, we will notify you within one month of receiving your request.

We will provide the requested information electronically and free of charge, unless doing so would breach the law or the provisions of Section 13. We reserve the right to charge a reasonable fee, or decline a request, where it is considered unfounded, excessive, or repetitive.

We reserve the right to request further proof of identity where there is any reasonable doubt about the individual making a personal data request, to ensure data protection and security.