Privacy Policy

Your personal data and assets are our highest priority. We are fully committed to safeguarding them.

Stone Credholm collects and stores data necessary for your trading activities. Details of how we collect and store this information are set out in the Privacy Policy below.

The following principles underpin our policy:

• To ensure complete transparency about how we collect and store your personal data:

Our aim is to be transparent about how we collect and process your data, so you can make informed choices. We follow clear procedures for handling information on this website, and our policy sets out the methods we use in detail, providing straightforward, reliable guidance on how it is used. You remain in control.

Whenever we consider it important to keep you informed, we will provide updates without delay. Transparency is at the heart of what we do.

Our team is on hand to answer any questions about our processes, including our obligations under the laws of United Kingdom. Please contact us at info@stone-credholm.com

• We do not use personal data for any purpose other than as set out in our Privacy Policy.

We may process personal data for a number of purposes: to ensure the proper operation of Stone Credholm services and to connect trader members with third-party trading platforms; to maintain and improve our website and services; to protect our rights; and to comply with regulatory and other legal obligations. We may also process personal data where needed to provide administrative support and other business functions related to the Services we deliver to you.

To offer services better tailored to your preferences and needs, Stone Credholm processes personal data.

• To access the essential tools for protecting your personal data and exercising your rights:

You can contact us at any time to access your personal data. We can also correct or delete it where appropriate. We will support requests to transfer your data to you or to a nominated third party. We provide these services to help you exercise your rights to privacy and control over your data.

• Keep your personal data safe:

Our security systems meet the highest standards, with bank‑level safeguards. While no system can ever be guaranteed 100% secure, we continually improve our defences and strengthen the controls we have in place.

We have a comprehensive privacy policy and security measures that meet the highest standards.

1. The Scope?

This policy sets out our procedures for the collection, processing and sharing of personal data.

This policy applies to any living individual who is identifiable. It covers anyone who can be, or has already been, identified from data entrusted to us, or from data we hold and/or may combine with other information.

Data processing, as defined in the Privacy Policy, means the storage, management and organisation of personal data.

We neither collect nor seek to collect any information about anyone under 18. We also do not allow individuals under 18 to use our platform for any purpose. If we become aware of a user who is under 18, or of any information relating to someone under 18, we will delete that information immediately.

2. What personal data do we hold?

When you register, we collect the personal data we need to provide our services. Where necessary, we may also request additional information to verify account ownership. To maintain and improve service quality, we collect and analyse data about your use of our platform and our third-party partners' services.

3. You are under no obligation to provide your personal data to the company.

You are under no obligation to provide your data. If you choose not to, this may limit the services we can offer and could restrict your use of our platform.

4. What personal data do we collect? When you visit our website, we may gather the following types of personal data:

We do not collect information that directly identifies you. We do collect details of account activity, IP addresses, and the dates and times you access your account. For maintenance, security and support, we retain system crash reports, browser details and the type of device used to access your account. We also collect information about your account’s language setting.

Regarding personal data, we only collect and store the information you explicitly agree to share with us when you use our service to connect to a third-party trading platform.

Personal data you have provided to third-party platforms may include your full name, postal address, telephone number and email address.

5. Why does the company need my personal data, and is it lawful for them to collect and use it?

The company collects, stores and processes your personal information solely for the purposes set out in the Policy. All such activity complies with the relevant laws of United Kingdom.

The company will not handle, process or transmit your data other than in accordance with the applicable laws in United Kingdom. We rely on the following legal bases:

• You have consented to the company storing and processing your personal data. When you submit your personal data to the company, you authorise us to transfer it to the relevant third-party trading platform. You have given consent for your personal data to be processed for one or more purposes.
• The company may need to store and process your personal data to improve services, pursue legitimate interests, and establish or defend legal claims, among other purposes.
• Processing data is necessary to comply with legal obligations.

For more information about the data processing the company is obliged to carry out, please contact us by email.

The list below sets out the specific purposes for which we may process your personal data, along with the associated legal bases.

6. Disclosure of Personal Data to Third Parties

Where necessary to store and process IP addresses, conduct user surveys and analysis, and provide other related services, the company may share anonymised personal data with third-party service providers.

At your request, we will share certain personal data you have provided with third-party services. In such cases, the use of your data will be governed by that company's privacy policy. This may include sharing with several digital trading platforms.

To improve the service we provide to our clients and the quality of our services overall, the company may share personal data with its affiliates and partner companies.

When required by law, or to safeguard our rights and assets and those of our third‑party partners, we may disclose data to the relevant legal or regulatory authorities.

In connection with a significant corporate transaction, such as the sale of the company or seeking investment or funding, we may share relevant data in a lawful and appropriate manner. This also applies in the event of any merger, restructuring, consolidation or corporate insolvency, in accordance with applicable law.

7. Cookies and services from third parties

We may use cookies and similar technologies for website analytics and when working with our advertising partners, in line with applicable law and standard practice.

Cookies are small text files stored on your device when you visit our website. We use them to understand your browsing behaviour and preferences, so we can personalise and enhance your experience. They help us remember your settings and tailor our services accordingly. We also use cookies for website analytics and to compile statistics for strategic planning.

This site uses two main types of cookies. Session cookies are stored in your browser only for the duration of your visit and are removed when you close the browser. Persistent cookies stay on your browser after your session ends; they help the site recognise you when you return and make it easier to use.

Types of cookies:

We may use cookies where necessary and for their intended purposes:

Cookies are disabled or have been cleared

If you wish to delete cookies or stop them being set, you’ll need to do this via your browser settings. For step-by-step instructions, see the links below for the most popular browsers.

• firefox
• Microsoft Edge
• Google Chrome
• safari

If you block cookies, some parts of the website will not work as intended.

ONLINE TRACKING NOTICE

Your personal data will be retained for as long as is necessary to fulfil the purposes set out elsewhere in this policy. It may be held for longer where required by applicable laws and regulations, or in accordance with our company policies.

At your request and solely at your discretion, we will share your personal data with third-party trading platforms for 12 months. When that period ends, and with your consent, we will share it for a further 12 months.

As part of our operations, we regularly review all personal data to assess whether it remains necessary.

9. Transfers of personal data to third countries or international organisations

Where necessary to deliver our services or for security purposes, we may transfer personal data to third countries (countries other than your own) and to international organisations, using robust security protocols. We maintain data security at the highest possible level to protect your information and ensure you have access to legal rights and remedies in all cases.

Across the European Economic Area (EEA), all residents are protected by data protection laws and safeguards.

• Data transfers are carried out in accordance with applicable data protection laws and recognised safeguards, including adequacy decisions and other standard transfer mechanisms where appropriate.
• All transfers of data between public bodies or authorities are carried out in accordance with applicable data protection law. These arrangements are legally binding and enforceable.
• International transfers of personal data are carried out in line with Standard Contractual Clauses approved by the relevant authority, which provide appropriate safeguards and set the conditions for such transfers. The current clauses are available from the issuing authority’s official website.

For further details of the security measures we have in place to protect your personal data during transfers to countries outside the UK, please email info@wealthwaydigital.uk.

10. Protection of Personal Data

Personal data is protected using the highest standards of technical and organisational measures, in line with recognised best-practice procedures. These safeguards help prevent unlawful or accidental destruction, as well as the loss or alteration of data.

Although we apply rigorous safeguards and comply with legal standards for data protection, it is not possible to guarantee that your personal data will always be entirely free from error. As such, we cannot accept liability for any disclosure of personal data or for incidental, intangible or consequential loss or damage. This includes situations beyond our control, such as transmission errors, unauthorised third-party access, or other similar causes.

If we receive a legally binding request from a regulator, court or other public authority, we may be obliged to share your personal data. Once disclosed as required by law, we cannot control how those authorities handle, store or protect it.

Information sent over the internet, including personal data, may be intercepted and cannot be guaranteed to be entirely secure. The Company cannot guarantee the security of any data you transmit online.

11. Links to third-party websites

On this website you may find links to third-party applications and websites. Please note that these are neither affiliated with nor controlled by the company, and our privacy policy does not apply to them. They have their own arrangements for collecting and processing personal data, and we are not responsible for those activities. Use at your own discretion.

Before providing any personal data, always read the privacy policy on the website of the company or service. Check that their policies on data collection, use and processing align with your preferences and priorities. If you decide to share information, do so directly with the service provider.

12. Policy Amendments

We may update or amend this policy at any time. We will announce any changes on the website and via other appropriate channels. The updated privacy policy will be posted on the website and, unless we state otherwise, will take effect immediately upon publication.

13. Your rights in relation to your personal data

You remain in full control of your personal data, including the right to verify its accuracy, request corrections, and choose to delete it or restrict the scope and nature of our processing.

This page contains information for residents of the EEA:

Your personal data is protected by the rights set out in this notice. You can exercise these rights immediately by emailing the address below.

Accessing Your Rights

If the personal data you have provided to us is accurate, you may access it at any time. Any of your personal data that we process is accessible to us and can therefore be checked and verified.

You can request access to your personal data at any time for verification, and we will provide it in electronic form. If you request further copies of the data we process, in addition to the initial copy, we may charge a reasonable fee.

Your statutory rights and this privacy policy do not override the rights of other individuals. We may refuse or restrict access to personal data where doing so would adversely affect the rights and freedoms of others.

Right to Rectification

If your personal data includes errors or omissions, you or the Company may correct it so that it can be processed properly.

Erasure Rights

You have the right to request the deletion of your personal data in the following circumstances: 1) if it has been processed without your consent or otherwise unlawfully; 2) if you ask us to remove it and the Company has no legal obligation to retain it; 3) if you object to any further processing by us, even where lawful and based on our legitimate interests or those of a third-party provider; and 4) if we are required by law to delete your data.

The right to erasure may be restricted where we are required to retain data to comply with applicable legal obligations. Similarly, it does not apply where the data is needed for the exercise or defence of legal claims.

Right to restrict the processing of your data

You have the right to request that the processing of your personal data be restricted where you believe it is inaccurate.

If you ask us to restrict our use of your personal data, we will delete it unless one of the following applies: 1) we are required by law to retain it; 2) with your consent, where this is necessary to establish, exercise or defend legal claims; 3) it is needed to protect the rights of another individual.

Your right to data portability

You have the right to access and review any personal data you have provided where you have given consent for its collection and it is processed by automated means.

You have the right to ask us to transfer any or all of your personal data to another company or organisation, where this is technically feasible. This does not affect your right to have your data erased. This right does not apply where doing so would infringe the rights or freedoms of another individual.

Your right to object to the processing of your personal data

Even where we rely on our legitimate interests, or those of a third-party service provider, you have the right to object to the processing and ask us to stop. This right may not apply if there are compelling legal grounds for the processing to continue, including the establishment, exercise or defence of legal claims. In such circumstances, we may continue to process your personal data.

You have the right to object at any time to the processing of your personal data for direct marketing purposes.

Your Right to Refuse or Withdraw Consent

You can withdraw your consent to our processing of your personal data at any time and, where practicable, with immediate effect. This will not affect the lawfulness of any processing carried out before your consent was withdrawn.

If you are dissatisfied for any reason, you have the right to lodge a complaint with the relevant legal, regulatory or supervisory authority.

If you believe your rights and freedoms have been infringed in relation to the processing of your personal data, you may raise the matter with the relevant data protection supervisory authority. You can submit a complaint to that authority if you wish.

Section 13 sets out the circumstances in which your rights in relation to your personal data may be restricted under applicable law.

Once we receive your request about your personal data and its processing, we will provide access to the information you have asked for, as set out in Section 13 of this policy. We may extend the response time by up to two months, depending on the volume of requests and the nature of your request. If more time is required, we will inform you within one month of receiving your request and confirm the extended deadline.

We will provide the requested information electronically at no cost, unless this would conflict with applicable law or the provisions of Section 13. We may charge a reasonable fee or refuse to act on a request that is manifestly unfounded, excessive or repetitive.

If we have reasonable grounds to question the identity of the individual submitting a personal data request, we reserve the right to ask for further proof of identity to protect data and maintain security.