Privacy Policy
Last update: 04.03.2026
We (also known as "We", "Us" or "Our") are committed to protecting your personal data and privacy.
This Privacy Policy explains how we collect and store the information you provide through our website Elm Vaultstead (the "Website").
We uphold the following principles:
To be transparent about how we process and collect your personal information:
We want you to have the information you need to make informed decisions about how your Personal Data is used and processed. That's why we've created this website. We use various methods to keep you informed about Personal Data handling.
If you need specific details, we'll provide information at the appropriate time.
We're happy to answer any questions and offer clarification on any legal limitations that may apply. You can reach us by email at: info@elmvaultstead.com
Your personal data will only be used for the purposes outlined in this Policy.
Personal Data may be processed by us for various purposes, including providing the website and connecting you with third-party trading platforms (the 'Services'), improving the site, protecting our rights and interests, maintaining and delivering the Services, meeting regulatory and legal obligations, and conducting administrative and business activities. We also process your Personal Data to better understand your preferences and needs.
Personal Data are also processed by us in order to better comprehend your preferences and needs.
To use essential tools that protect your rights regarding Personal Data:
To help you exercise your rights, we have substantial resources available. Contact us at any time to request your personal data or to exercise your data rights. We can modify or delete your information, cease using it for specific or general purposes, or transfer it to you or a third party. We're committed to accommodating your requests promptly.
Protect Your Personal Information
While we cannot guarantee absolute security of your Personal Data, we're committed to employing a range of methods and techniques to keep your information protected.
Our Privacy and Security Policy is comprehensive.
1. The Scope?
This policy outlines the types of personal data we collect from individuals and how we process, share, and protect it. Personal data refers to information relating to an identified or identifiable natural person—someone who can be directly identified or identified through a combination of information we hold or can access. "Processing" encompasses any operation involving personal data, including collection, management, structuring, and storage. Our services are intended for general audiences and are not designed for anyone under 18 years of age. We do not knowingly collect information from minors, nor do we permit them to use our services. Should we become aware of personal data belonging to a child, we will delete it as promptly as possible.
2. What Personal Data Do We Hold About You?
When you access our service and channels, or visit our website, we collect your Personal Data. We may request your Personal Data in certain circumstances, or we may collect it by analysing your use of our services and channels, or by receiving information from our third-party partners.
3. There is no requirement to disclose personal information to the company, and you won't face any consequences for choosing not to.
However, you're not required to provide us with any personal data. In certain circumstances, if you choose not to supply us with personal data, we may be unable to deliver our services or allow you to access the website.
4. What Personal Data Do We Collect? When you visit our website, we gather the following personal information about you:
This includes information about your online activity log, data about your traffic (including IP address, date of access, time of access, and browser type), the language you used, software crash logs, device information, and similar technical details. The information we collect is not personally identifiable and cannot be used to identify you.
Personal Data We Receive From You: any personal information you voluntarily provide when you connect with a third-party online trading platform through us.
Personal Information You Provide to Third-Party Platforms: this information includes your full name, address, phone number, and email address to facilitate trading transactions.
5. Legal Basis and Reasons for Processing Personal Data
Your Personal Data is processed by the company for the purposes outlined in this section, in accordance with the applicable legal basis.
The company cannot process your Personal Data without a valid legal basis. The legal grounds on which the company may process your Personal Data are:
- You've consented to the processing of your personal data for one or more purposes. This includes when you submit personal information through the Website so we can transfer it to a third-party trading platform.
- The Company or a third party may need to process your information to pursue their legitimate interests. For example, this might include improving our services or defending legal claims.
- Processing must comply with legal obligations.
Contact us via email for further details about the processing required to protect our legitimate interests.
Below is a list of the reasons and legal grounds we may use your personal data for.
Scope
Legal Basis
To share your personal information with third parties upon your request for access to digital trading
If you ask us to, we may collect Personal Data from you to pass on to third-party companies.
You've consented to the processing of your personal data for one or more of the reasons outlined above.
2. To address your requests, questions or concerns
We need your Personal Data to help us respond to any enquiries you may have about our Services.
We need to process your personal information to protect the legitimate interests of the Company or those of a third party.
We process your Personal Data to comply with legal obligations and meet administrative, judicial, or other legal requirements.
To meet legal requirements, processing is necessary.
4. To enhance Our Services Personal
Data may be used by us to improve the quality of Our Services. This includes, among other things, crash reports and malfunction data we collect in relation to the Services.
We need to process personal information to protect the legitimate interests of the Company or a third party.
5. To prevent fraud and misuse of our services
We need to process personal information to protect the legitimate interests of the Company or a third party.
6. To perform and manage actions in accordance with the requirements of Our Services
This includes back-office functions, business development activities, strategic decision-making, oversight mechanisms, and similar activities.
We may need to process your data to protect the legitimate interests of the Company or a third party.
7. To conduct analysis, such as statistical analysis
We employ various analytical techniques, including statistical methods, to inform our decision-making across different issues.
The Company or a third party has a legitimate interest that requires the processing of your information.
8. To protect our assets, rights and interests, as well as those of third parties, we have developed HTML0 to establish and defend legal claims
We may process your Personal Data to safeguard our rights, interests and assets, or those of third parties, in accordance with applicable laws, regulations, agreements, and our terms and conditions.
We need to process personal data to protect the legitimate interests of the Company or a third party.
6. Transfer of Personal Data to Third Parties
The Company may share your Personal Data with third-party service providers such as hosting, storage, and analytics companies to support our operations and improve user experience.
You can request that we share your Personal Data with third-party trading platforms. When you authorise this, we will provide your information to the relevant trading platforms in accordance with their privacy policies. Your Personal Data may be shared with multiple trading platforms at your request.
The Company may also share Personal Data with related entities and business partners to enhance and improve the products and services we offer.
We may disclose Personal Data to regulatory authorities, local government bodies, and other official agencies when required to protect the rights of third parties or safeguard assets.
Additionally, we may share Personal Data with potential investors, buyers, lenders, or other entities within our corporate group in connection with business transactions, including asset transfers or the sale of company assets, as well as in the event of any merger, restructuring, consolidation, or insolvency involving the Company or any other entity within our group.
7. Third-party cookies and services
Third-party services, such as advertising and analytics providers, may be used on our website. These companies may also use cookies or similar technologies.
Cookies are small text files placed on your device each time you visit our website. We use them to gather information about your preferences and browsing habits to enhance your user experience, remember your settings, and personalise the products and services we offer. Cookies are also used for statistical and analytics purposes.
Some cookies we use are session cookies. These are temporarily stored on your device and expire when you close your browser. Other cookies are persistent—they remain on your device for a period of time after you close your browser. Persistent cookies help us recognise you as a returning visitor and allow you to return to the website more easily.
Types of Cookies:
They may be used by us based on their purpose:
The type of cookie
Cookies are essential
Scope
These cookies are essential for you to access the features you've requested and navigate our website. We use them to deliver the information, products, and services you've asked for.
They're required for your device to download and stream data, allowing you to move around the site, use its features, and return to pages you've visited before.
Additional Information
Cookies collect personal data, such as your username and last login date, to confirm that you're logged in to the site. They're automatically erased once you close your web browser (session cookies).
The type of cookie
Functionality Cookies
Scope
Cookies help us recognise you when you visit our site and allow us to save your preferences.
Additional Information
Cookies collect Personal Data, such as your username and last login date, to confirm you're logged in to the site. They're automatically deleted when you close your web browser (session Cookies).
The type of cookie
Cookies for performance
Scope
We use cookies to collect statistical data about how our site performs and to help us improve it. They also enable us to analyse your experience on our website.
Additional Information
Cookies store anonymous data that isn't linked to any identifiable person. Some cookies are removed when you close your browser, whilst others remain active indefinitely.
Cookies are blocked, or removed
To block or remove cookies, you'll need to adjust your browser settings. Below are links to help you through the process for some of the most popular browsers.
- Firefox
- Microsoft Edge
- Google Chrome
- Safari
However, be aware that certain features or the entire Website may not function as expected if this occurs.
ONLINE TRACKING NOTICE
This service does not currently support do-not-track signals.
8. Retention of your personal data
The Company will retain your Personal Data for as long as necessary to fulfil the purpose of processing described in this Policy, or for longer periods as permitted by law, regulations, and applicable orders.
We'll share your information with third-party trading platforms for a period of 12 months. If you consent to this, we'll continue sharing your data for a further 12 months.
We regularly review the Personal Data we hold to ensure it's no longer required.
9. Transfers of personal information to a third-party country or to an international organisation
Your personal information may be transferred to other countries—that is, your personal data may be sent to a third country (any country other than where you live) or to international organisations and jurisdictions. We take all necessary steps to protect your personal data and ensure that data users can exercise their rights and access effective legal remedies.
These protections and safeguards are available to all residents of the EEA (European Economic Area).
- Transfer to a third country or international organisation that the EU Commission has determined provides adequate protection of Personal Data, as stipulated in Article 45(3) of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (the "GDPR").
- The transfer is made under a legally binding and enforceable agreement between public entities or authorities in accordance with Article 46(2)(a).
- The transfer was completed in accordance with the standard contractual clauses approved by the EU Commission under Article 46(2)(c) of the GDPR. You can view the clauses approved by the EU Commission at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.
The Company can provide information about the security measures it uses to protect your Personal Data when transferred to third-party countries or international organisations. Contact us by email at info@wealthwaydigital.uk for further details.
10. Security of Personal Data
We have implemented appropriate organisational and technical safeguards to protect your Personal Data, including measures to prevent accidental or unlawful destruction, loss, or alteration. We cannot guarantee that your Personal Data will remain secure without error. We are not liable for any indirect, incidental, or consequential damages arising from the use or disclosure of your Personal Data, including situations where Personal Data is compromised due to transmission errors, unauthorised third-party access, or circumstances beyond our control. Where required by law or other obligations beyond our control, we may be compelled to disclose your Personal Data to third parties, such as government authorities. In these circumstances, we cannot control how third parties secure your Personal Data. No data transmission over the internet is completely secure. We cannot guarantee the security of Personal Data you transmit to us online.
11. Hyperlinks to third-party websites
The website contains links to third-party sites and applications that operate independently of the Company. We are not responsible for how these external sites or apps collect or process your Personal Data. This Policy does not apply to any actions you take through third-party platforms.
Before accessing or using any third-party website or app, we recommend reviewing their privacy policies. We also encourage you to exercise caution when sharing your Personal Data with these external services.
12. Changes to this Policy
When you visit any third-party websites or apps we recommend, we encourage you to read their privacy policies before deciding to access or use them. We also suggest exercising caution when sharing any Personal Data with these services.
13. Your rights regarding your personal information
You are entitled to request verification that your Personal Data is being collected and processed accurately, to rectify any inaccuracies, and to delete Personal Data that we no longer require. You may also restrict how we process your personal information.
If you are an EEA resident, please refer to this page:
These rights apply to the information you provide in relation to your Personal Data. You may exercise these rights by submitting a written request to the address below.
Access rights
You have the right to verify that your Personal Data is being processed accurately. If confirmed, you can access your Personal Data.
We will provide an electronic copy of the Personal Data we currently hold and process. We may charge a reasonable fee for additional copies. The data will be supplied electronically if you request it.
Your right to access Personal Data must not conflict with the rights and freedoms of others. If your request could negatively affect another person's rights or freedoms, we may refuse to comply with the request or limit how we fulfil it.
Right to rectification
You are entitled to request that we correct any inaccurate or incomplete Personal Data about you, taking into account the reason for processing.
Right to erasure
The following circumstances apply: (a) Personal Data are no longer needed for the purpose they were collected for; (b) You withdraw consent and there is no other legal basis for processing; (c) You object at any time, based on your specific situation, to processing of Personal Data based on legitimate interests pursued by us or a third party; (e) Personal Data are processed unlawfully; or (f) Personal Data must be deleted to comply with a legal obligation.
This right does not apply if processing is necessary (a) to fulfil an obligation under European Union or Member State law; or (b) to establish, exercise or defend legal rights.
Processing restrictions
If you have concerns about the accuracy of your Personal Data, you may request that we limit how it is processed.
If you request that Personal Data be restricted, it may only be retained with your consent or to establish, exercise or defend legal rights, or to protect the rights of another person, or where there is a significant public interest within the European Union or a Member State.
Right to data portability
If processing is carried out by automated means and is based on your consent or a contract you are party to, you have the right to access your Personal Data in a structured format.
You may request that we transfer your Personal Data directly to another controller, where technically feasible. Exercising your right to data portability does not affect your right to erasure. The right to transfer data does not interfere with the rights or freedoms of others.
Right to object
You have the right at any time to object to processing of your Personal Data based on legitimate interests pursued by us or a third party, including profiling. If we can demonstrate compelling legitimate grounds for processing, we may continue unless you can show that your rights, freedoms or interests outweigh ours, or the processing is necessary to establish, exercise or defend legal rights.
Regarding direct marketing, you have the right to object to processing of your Personal Data at any time.
Right to withdraw consent
You may withdraw your consent for us to process your Personal Data at any time. This will not affect the lawfulness of processing carried out before you withdrew your consent.
You are entitled to lodge a complaint with the supervisory authority in your jurisdiction.
You may lodge a complaint with a supervisory authority in your Member State to protect fundamental rights concerning Personal Data processing within the European Union.
The laws of the European Union and Member States may limit your rights in relation to your Personal Data, as outlined in this section.
We will provide the information you request pursuant to your rights within one month of receiving your request. This timeframe may be extended by up to two months if needed, depending on the complexity and volume of your request. We will notify you of any extension and the reasons within one month of receiving your request.
Unless contrary to applicable law, information you request under your rights in this section will be provided free of charge. If your request is unjustified, excessive or repeated, we may charge a reasonable fee to cover our administrative costs. We may also decline to respond.
If we have doubts about your identity, we may ask for further information to verify the person making the request.