Categories of Personal Data Collected and Lawful Basis
Transparency regarding why information is gathered and the legal justification under UK statutory law.
| Data Category | Elements Included | Lawful Basis under UK GDPR | Retention Period |
|---|---|---|---|
| Identity & KYC Data | Full legal name, date of birth, passport/national ID copy, proof of residential address | Compliance with UK Money Laundering Regulations 2017 (Legal Obligation) | 5 years following cessation of business relationship (HMRC requirement) |
| Order & Delivery Data | Consignment delivery address, authorized recipient name, phone contact, signature proof | Performance of Contract (Insured precious metals delivery) | 7 years (Statutory UK accounting and audit requirements) |
| Financial & Settlement Data | Bank wire remittance details, masked card tokens, digital wallet transaction IDs | Performance of Contract & Prevention of Fraud | 7 years (HMRC financial compliance) |
| Technical & Telemetry Data | IP address, session identifiers, browser fingerprint, device security posture | Legitimate Interest (Network defense, DDoS mitigation, fraud prevention) | 30 to 90 days rolling log cycle |
Your Statutory Rights
You hold the right to request access to your records (Subject Access Request), request rectification of inaccuracies, and request data erasure subject to mandatory statutory HMRC anti-money laundering record retention schedules.
Carrier Data Masking
When dispatching bullion consignments, courier systems receive only masked recipient destination parameters. Product descriptions and asset valuation metadata are never shared with shipping handlers.
Data Protection Officer
For privacy inquiries, rights execution, or data disclosures, contact our designated Data Protection Officer directly at [email protected] or write to our Covent Garden, London registered office.