Privacy Policy

“Investa”, “we”, “us” and “our” means Investa Markets LTD. Investa is authorised and regulated by the Financial Conduct Authority (FRN: 1037289) and registered as a data controller with the Information Commissioners Office.

For the purposes of data protection law, we are a controller in respect of your personal data. Investa is committed to protecting your privacy and ensuring you are fully aware of the information we may hold on you and how that information might be used while providing services to you. This notice together with our Terms of Service explains how we collect and safeguard your personal data. Please take the time to read and understand this notice.

This Privacy Notice applies to you if you are:

• you are an individual client of Investa; or 
• you are a prospective client of Investa

‍

1. Personal data we collect or generate about you

a) Information that you provide to us 

We collect personal data as part of our due diligence process on both existing and prospective clients. The process includes the collection of electronic forms of identity and address verification such as copies of passports, driving license or other legal documents from you. Please note that providing certain personal data is a statutory and contractual requirement. If you choose not to provide this information, we will be unable to onboard you or provide our services to you.

The information collected—either directly from you or via our appointed third-party processors—may include your name, address, email address, phone number, financial information, holdings, transactions, and data on real assets or other relevant personal details necessary for our onboarding and ongoing review processes.

We actively avoid requesting or holding special categories of personal data (racial or ethnic origin; political opinions; religious beliefs; trade union membership; physical or mental health conditions; sexual orientation) or personal data relating to criminal convictions or offences, except where strictly necessary to comply with our statutory obligations. This includes special category biometric data processed by us or our third-party providers for Anti-Money Laundering (AML), Counter-Terrorist Financing (CTF), and Know Your Customer (KYC) compliance, such as Politically Exposed Person (PEP) status and international sanctions screening. This information is gathered for reasons of substantial public interest for preventing financial crime and fraud. By sharing these details with us or our designated verification partners, you confirm that you are entitled to share this personal data.

‍

b) Information we collect or generate about you

We may monitor or record phone calls, video calls, emails and chat applications in case we need to check we have carried out your instructions correctly, to resolve queries or issues, for regulatory purposes, to help improve our quality of service, and to help detect or prevent fraud or other crimes. Conversations may also be monitored or reviewed for staff training purposes.

‍

c) Information we gather from other sources

In the process of gathering information on you as a prospective client or providing services to you we will obtain information from third parties such as credit and fraud prevention agencies to gather relevant data about you and your circumstances, as well as gathering intelligence from publicly available sources. These agencies may also give us additional details and information from the Electoral Register to aid identify verification.

‍

d) How we use your information

We will continually review and assess the quality and quantity of personal data we hold and observe your rights under applicable privacy and data protection laws. Where we provide investment services, you agree and acknowledge personal data may be shared on an ongoing basis with our third party partners such as your custodian for services such as execution, clearing, settlement and custody.

Information you give us may be used in the following ways:

• to provide you with information (by various means including but not limited to post, email, chat services, and phone), products and services that you have requested from us or which we may reasonably believe would be of interest to you;
• to carry out our obligations as a result of any contracts entered into between you and us, and any investments entered into through us;
• to comply with our legal and regulatory obligations;
• for research and development of products and services;
• to ensure that content of our website in the most efficient manner for you and your computer;
• to notify you about changes to our website or policies and;
• to allow you to participate in any interactive website or mobile application features, which we may make available, should you choose to do so.
• to optimise our client support and administrative workflows using secure productivity and artificial intelligence tools (such as utilising internal language models to summarise client correspondence or synthesise operational data)

We utilise enterprise-grade productivity suites and artificial intelligence utilities, specifically Google Workspace and Google Gemini. These tools process data solely within our restricted company domain under strict confidentiality agreements. In accordance with our enterprise safeguards, your personal data is entirely protected from external human review and is never used by third parties to train public generative AI models. We do not use artificial intelligence tools, including Google Gemini, to make solely automated decisions that carry legal or similarly significant consequences for you (such as automated client onboarding rejections). All AI utilities are utilised strictly as internal co-pilots to assist our staff and data processors, ensuring that final oversight, review, and decisions are always executed by a human team member ("human-in-the-loop").
‍

We are entitled to use your personal data in these ways because:

• we need to process your personal data to enter a contract with you;
• we have legal and regulatory obligations that we must discharge; 
• we may need to so we can establish, exercise or defend our legal rights or for the purpose of legal proceedings; or
• the use of your personal data as described is necessary for our legitimate business interests (or the legitimate interests of one or more of our affiliates), such as maintaining our client records;

You may be able to exercise your right to prevent such processing by checking certain boxes on our application we use to collect your data. You may also be able to exercise this right at any time by contacting us.

‍

e) When we disclose your personal data

We may disclose your personal data to our third party partners  in the circumstances detailed below to ensure the delivery of products or services to our clients. We will take steps to ensure that the personal data is accessed only by employees of such partners  that have a need to do so for the purposes described in this notice. We may also share your personal data outside of Investa:

• to perform our obligations under our agreement with you, including by sharing your personal data with our third-party vendors.
• to third party agents or contractors (for example, the providers of our electronic data storage services) for the purposes of providing services to us. These third parties will be subject to confidentiality requirements, and they will only use your personal data as described in this privacy notice. 
• if we are under a duty to disclose or share your personal data to comply with any legal obligation, or to enforce or apply our Terms of Service and other agreements or to protect the rights, property, or safety of Investa, our clients, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction, or with law enforcement or regulatory agencies and to comply with any legal obligation, establish, exercise or defend our legal rights. 
• if we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
• if Investa or substantially all its assets are acquired by a third party, as the personal data we hold about our customers will be one of the transferred assets.
• with our auditors, advisors and our regulator, the Financial Conduct Authority (FCA) in the course of their normal duties.

‍

f) Transfers outside the European Economic Area and/or the UK

We may disclose your personal data to third parties, located anywhere in the EEA (European Economic Area) and/or UK due to equivalency standards. Your personal data may also be disclosed to our service providers outside the EEA/UK or be processed by staff operating outside of the EEA who work for our partners  or for one of our suppliers. 

Where we transfer your personal data outside the EEA/UK, we will ensure that it is protected in a manner that is consistent with how your personal data will be protected by us in the EEA/UK. This can be done in several ways, for instance:

• the country that we send the data to might be approved by the UK Government; or
• the recipient might have signed up to a contract based on UK International Data Transfer Agreements or the UK Addendum to the EU Standard Contractual Clauses.

In all cases, however, we will ensure that any transfer of your personal data is compliant with data protection law. 

You can obtain more details of the protection given to your personal data when it is transferred outside the EEA/UK (including a copy of the standard data protection clauses which we have entered with recipients of your personal data) by contacting us in accordance with the “Contact details” section below.

‍

2. Cookies

Our websites use cookies to distinguish you from other users of our web site. This allows us to improve our site and provide an enhanced experience for our clients. For detailed information on the cookies we use and purposes for which we use them, please refer to our cookie policy which can be found on our website.

‍

3. Your rights

You have several legal rights in relation to the personal data that we hold about you. These rights include:

a) Right to be informed

You have the right to know how, why, and for how long your data is processed.
‍

b) Right of access

You have the right to obtain information regarding the processing of your personal data and access to the personal data which we hold about you. 

c) Right to rectification

If you believe the data we hold is inaccurate or incomplete you are entitled to have this rectified. 

d) Right to erasure

You have the right to request that we erase your personal data in certain circumstances. Please note that there may be circumstances where you ask us to erase your personal data but we are legally entitled to retain it.
‍

e) Restriction on and objection to processing

You have the right to object to, and the right to request that we restrict, our processing of your personal data in certain circumstances. Again, there may be circumstances where you object to, or ask us to restrict, our processing of your personal data but we are legally entitled to continue processing your personal data and / or to refuse that request.
‍

f) Right to data portability

In some circumstances, you have the right to receive your personal data in a structured, commonly used and machine-readable format and/or request that we transmit those data to a third party where this is technically feasible. Please note that this right only applies to personal data which you have provided to us.

‍

4. Complaints

If you believe that we have processed your data in a way that does not comply with the GDPR you have the right to complain directly to the Information Commissioners Office (ICO). See the ICO’s website at 

www.ico.org.uk/concerns or telephone on 0303 123 1113. 

If you have a complaint for Investa you can find our complaints procedure on our website under “disclosures.”

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates (`Third Party Sites’). If you follow a link to any of these Third-Party Sites, please note that these Third-Party Sites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these Third-Party Sites.

‍

5. Retention period

How long we hold your personal data for will vary. The retention period will be determined by various criteria including:

• the purpose for which we are using it – we will need to keep the data for as long as is necessary for that purpose; and
• legal obligations – laws or regulation may set a minimum period for which we have to keep your personal data.

‍

6. Changes to the notice

Any future changes to our Privacy Notice or to other policies found on this site will be posted to the relevant pages, and where appropriate, notified to you by email. We know that you are concerned with how your personal data is dealt with, and this Privacy Notice sets out our current policies and demonstrates our commitment to your financial privacy.

‍

7. Contact details

Questions, comments and requests regarding this Privacy Policy are welcomed and should be addressed via email to the Data Protection Officer at data@investa.co.uk.