Privacy and Data Protection Policy

Albion Credmere treats the responsible handling of personal information as a core priority. We use your data openly, for defined purposes and in line with applicable requirements, including the UK GDPR. This policy sets out what we obtain, the reasons for processing it, how long it may be kept and the safeguards used to protect it.

1. Who controls your data

For the purposes of the UK GDPR, responsibility for controlling your personal information rests with the site operator and the Albion Credmere platform. The legal notice on this website contains relevant contact information and further details. Privacy enquiries may also be directed to our data protection officer.

2. Information we obtain

We gather and use only information needed to deliver the service, meet our legal duties and keep the platform secure. This may include:

Personal identity information: given name and family name, plus date of birth for age and identity checks.
Contact information: email address, telephone number if supplied, country of residence and, where relevant, postal address.
Account and transaction records: payment information, deposits, withdrawals and your transaction history.
Device and activity information: IP address, browser details, device data, login times and connection records.
Verification material: identity evidence, proof of address or other documentation needed for KYC/AML checks where legislation requires it.

As a rule, we do not seek special-category information, such as medical details or religious views, unless the law requires it or you have given clear consent.

3. Sources of your information

We receive information through a range of protected sources:

Information you provide: for instance, during registration, profile changes, document submission or contact-form enquiries.
Information collected automatically: such as cookie data, server records, analytics information and device technical details generated while you use the platform.
Information supplied by other organisations: including payment services for deposits and withdrawals, KYC/AML verification providers or social sign-in services where you authorise their use.

4. Why we process information

Personal information is handled only for clear, lawful and specific purposes, including the following:

Creating, administering and delivering your account and the platform tools available to you.
Managing and safeguarding payment activity, including deposits and withdrawals.
Offering tailored support and responding to your questions or requests.
Meeting statutory and regulatory duties, including KYC, AML and tax-related requirements.
Maintaining technology security and preventing fraud, misuse and attempted attacks.
Improving usability and continuing to enhance the platform.
Sending marketing or service information only where you have expressly agreed to receive it.

5. Our lawful grounds for processing

To perform a contract or take steps requested before entering one (Article 6(1)(b) UK GDPR).
To satisfy legal duties (Article 6(1)(c) UK GDPR), including obligations relating to anti-money laundering.
For our legitimate interests (Article 6(1)(f) UK GDPR), such as maintaining platform reliability and security.
Where you have provided explicit permission (Article 6(1)(a) UK GDPR), for example for marketing or non-essential functions.

6. When information is shared

Information is disclosed only when necessary and only to selected service providers or other recipients:

Banks and payment processors involved in handling deposits and withdrawals.
Qualified service providers that perform KYC and AML verification.
Technology and cloud suppliers operating under appropriate data-processing agreements.
Analytics and security services that, where practicable, use anonymised or pseudonymised information.
Professional advisers, such as solicitors or tax specialists, when needed to meet legal requirements.
Public authorities or courts when disclosure is legally required or needed to pursue, establish or defend legal claims.

We do not sell or provide your personal information to third parties for their commercial use.

7. Transfers outside the UK

Some suppliers, including cloud-hosting or analytics providers, may operate outside the UK or European Economic Area. Where information is transferred in this way, we use suitable safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, binding corporate rules or recognised adequacy arrangements, to maintain appropriate protection.

8. Keeping data secure

We use a combination of technical and organisational controls to help keep your information safe:

Protected data transfers using up-to-date security standards, such as TLS 1.3 or later.
Robust encryption for sensitive information stored on our systems, such as AES-256.
Routine security assessments, penetration tests and independent expert reviews.
Ongoing system observation to identify unusual behaviour and attempted intrusions.
Controlled access, with permissions assigned according to team roles.
Client money maintained in segregated accounts with regulated partners.

No technical system can promise complete protection from every threat, but these controls are designed to reduce the associated risks.

9. How long we retain information

We keep personal information only for the time needed for the purposes described here or for any period imposed by law:

Throughout the period your account remains open and the contractual relationship continues.
Following closure, for as long as applicable law requires, such as 5–10 years for tax or regulatory records.
Where processing relies on consent, such as marketing, until you revoke that permission.

When retention is no longer justified, we securely remove or anonymise the relevant information.

10. Your data protection rights

Data protection law gives you several rights in relation to your information. These include the right to:

Ask what personal information we hold about you.
Ask us to correct wrong information or fill in missing details.
Ask for deletion where no statutory retention duty applies.
Ask us to limit processing in circumstances permitted by law.
Obtain your information in a structured, widely used and machine-readable form for portability.
Revoke consent at any point for processing that takes place afterwards.
Complain to the appropriate data protection regulator.

11. Cookies and related tools

Cookies and comparable technologies help the website operate, understand how it is used and improve the experience. Necessary cookies remain active, whereas analytics and advertising cookies are used only after you agree. Please see our separate cookie policy for more detail.

12. Updates to this policy

We may amend this policy from time to time to reflect legal or regulatory developments and changes to our features. The current edition is published on our website. Where an update is material, we will communicate it by email or within the platform.

13. Privacy contact details

For questions about this policy, privacy matters or exercising your rights, contact us at $site_gmail or through the website contact form. Our data protection officer will consider your enquiry and aim to reply without undue delay.

By using Albion Credmere, you confirm that you have reviewed this privacy policy and accept its provisions.