Privacy Policy

Effective Date: 24 June 2025

Who We Are

Thwaytes Capital Group Ltd is a UK-based financial services firm offering international payment solutions, currency risk management, and tokenisation services. We are registered in England and Wales and operate underregulated partnerships (Currency cloud and GC Partners Ltd), both of which are authorised and regulated by the Financial Conduct Authority (FCA).

Information We Collect

We may collect and process the following types of personal data:

a. Information you provide to us:
- Full name, email address, phone number
- Company name, business address, job title
- Bank account details (for payments)
- Identification documents (e.g., passport, utility bill)
- Communications (emails, forms, calls)

b. Information we collect automatically:
- IP address, browser type, operating system
- Site usage data (pages viewed, time on site)
- Cookies and similar technologies

c. Information from third parties:
- Credit reference agencies
- KYC/AML compliance providers
- Public sources (e.g., Companies House)

How We Use Your Information

We use your data to:
- Deliver our FX and international payment services
- Conduct identity checks and comply with financial regulations
- Communicate regarding your account or enquiries
- Improve our website and services
- Send marketing updates (with consent)
- Meet legal and regulatory obligations

Legal Basis for Processing

Under UK GDPR, our legal bases include:
- Contractual necessity – to deliver our services
- Legal obligation – for compliance and reporting
- Legitimate interests – for operational efficiency and communications
- Consent – for optional marketing (which you can withdraw anytime)

Sharing Your Information

We only share data where essential, including:
- Our regulated partners: Currencycloud and GC Partners Ltd
- Compliance and identity verification services
- Legal and professional advisers
- Regulators and authorities, when legally required

We do not sell your data to third parties.

International Transfers

Where data is transferred outside the UK or EEA, we apply adequate safeguards such as standard contractual clauses or rely on adequacy decisions to ensure it remains protected.

Data Retention

We keep your data only as long as necessary:
- To deliver services and meet contractual obligations
- To comply with legal and regulatory requirements (typically 5–7 years)
- To resolve disputes or enforce agreements

Your Rights

You have the right to:
- Access your data
- Request correction or deletion
- Object to or restrict processing
- Withdraw marketing consent
- Lodge a complaint with the ICO (www.ico.org.uk)

To exercise your rights, email: privacy@thwaytescapitalgroup.co.uk

Cookies

We use cookies to enhance functionality and analyse traffic. You may adjust your browser settings to refuse some or all cookies. For more detail, please see our separate Cookie Policy.

Data Security

We use appropriate security measures to protect your personal data, including encryption, secure servers, and limited access. However, no system is completely secure and you share data at your own risk.

Updates to This Policy

We may revise this policy periodically. Changes will be posted on this page and, where appropriate, notified via email.

Last updated: 24 June 2025

Contact Us

Thwaytes Capital Group Ltd
27 Bush Lane, London EC4R 0AA
Tel: 0203 089 4377
Email: privacy@thwaytescapitalgroup.co.uk
Website: www.thwaytescapitalgroup.co.uk