Privacy Policy

Protecting your personal data and assets is our highest priority. We are fully committed to keeping them secure.

Cresthill Valtor collects and stores data essential to your trading activities on this trading platform. The methods we use to collect, use, and store this information are set out in the Privacy Policy below.

The following principles underpin our policy:

• To ensure complete transparency about how we collect and store your personal data:

Our aim is to ensure you understand how we collect and process your data, so you can make informed decisions. We follow clear guidelines and processes for handling information across this official website. This policy explains how it works, setting out the specific methods we use so you have clear, transparent information about data use at every stage. You remain in control.

If we determine that you need to be informed, we will provide the relevant information promptly. Transparency is fundamental to how we operate.

Our support team is always on hand to answer any questions you may have about our processes, including our obligations under United Kingdom law. You can contact us at: info@cresthill-valtor.com

• We will not use personal data for any purpose other than as set out in our Privacy Policy.

We may process personal data to operate and deliver Cresthill Valtor services, including connecting trader-members with third-party trading platforms. We also process data to maintain and enhance functions on our official website and services, protect our rights, and comply with regulatory or other legal obligations. In addition, we process data where necessary to provide administrative and other business functions related to the Services we provide to you as a client.

To deliver better services tailored to your preferences and needs, Cresthill Valtor collects and processes personal data.

• To enable you to use essential tools that protect your personal data and safeguard your rights:

At any time, you can contact us to request access to your personal data. We can also rectify or delete it where appropriate. In addition, we can facilitate requests to transfer your data to you or to a nominated third party. We provide these services and support to help you exercise your rights to privacy and control.

• Keep your personal data secure:

We employ bank‑grade security measures and follow industry best practice. While no system can be guaranteed 100% secure, we continuously upgrade our systems and reinforce the protections we have in place.

We have a detailed and comprehensive privacy policy and the highest levels of security.

1. The Scope?

This policy sets out how we collect, process and share all data relating to natural persons.

The provisions of this policy apply to all identifiable natural persons. This includes any individual who can be, or has been, identified in connection with data entrusted to us, or data we are able to access and/or combine.

Data processing, as set out in the Privacy Policy, specifically refers to the storage, management and organisation of personal data.

We do not knowingly collect, and do not seek to collect, information about anyone under the age of 18. We also do not permit individuals under 18 to access or use our platform for any purpose. If we become aware of a user who is under 18, or of any data relating to someone under 18, we will delete that information immediately.

2. What personal data do we hold?

When you register with us, we collect the personal information needed to enable access to our services. Where necessary, we may also request additional details to verify account ownership. To maintain and improve service quality, we collect and analyse data on how you use our platform and the services of our third-party partners.

3. You are under no obligation to provide the company with your personal data.

While you are not obliged to share your data, withholding it may limit the services we can provide and could restrict your access to our platform.

4. What personal data do we collect? When you visit our website, we may collect the following personal data:

We do not collect information that personally identifies you. However, when you use our official website, we collect details such as your account activity, IP address, and the date and time of access. For maintenance, security and support, we retain system crash reports, browser details, and the type of device used to access your account. We also record your account language settings.

We collect and retain only the personal data you consent to share with us when you use our service to connect to a third-party trading platform.

The personal information you’ve provided to third-party platforms may include your full name, address, telephone number and email address.

5. Why does the company need my personal data, and is it lawful for them to collect and process it?

The company collects, stores, and processes your personal information solely for the purposes set out in this Policy. All such activities comply with applicable laws in United Kingdom.

The company will only collect, process, or disclose your data in line with applicable laws in United Kingdom. We rely on the following legal bases:

• You consent to the collection, storage and processing of your personal data by the company. By submitting your details to us, you also authorise us to transfer that data to the relevant third-party trading platform. Your consent covers the processing of your personal data for one or more specified purposes.
• To improve its services, establish or defend legal claims, and pursue its legitimate interests, among other purposes, the company may need to store and process your personal data.
• We process your data to comply with our legal obligations.

If you would like more information about the data processing the company is required to undertake, please contact us by email.

Below is a list of the specific purposes for which we may process your personal data, together with the corresponding legal bases.

6. Disclosure of Personal Data to Third Parties

To store and process IP addresses, conduct user surveys and analysis, and deliver other related services, the company may share anonymised personal data with third-party service providers.

At your request, we may share certain personal data you provide with third-party services. In such cases, your data will be processed in accordance with those companies' privacy policies. This may include one or more digital trading platforms.

To enhance the services we provide to clients and improve our overall service quality, the company may share personal data with its affiliates and partner companies.

Where required by law, or to protect the company’s rights and assets and those of its third‑party partners, we may disclose data to the relevant legal or regulatory authorities.

In connection with major corporate transactions, such as the sale of the company or the pursuit of investment or financing, we may share relevant data in a lawful and appropriate manner. This also applies in the event of any merger, restructuring, consolidation, or bankruptcy, in accordance with applicable law.

7. Cookies and Third-Party Services

We may use cookies and similar technologies for site analytics and in collaboration with advertising partners, in accordance with applicable laws and standard industry practice.

Cookies are small data files stored on your device when you visit a website. We use them to collect information about your browsing behaviour and preferences, with the aim of personalising and enhancing your experience. Cookies enable us to remember your settings and tailor our services accordingly. They are also used for website analytics and to compile statistics that inform strategic planning.

Generally, this site uses two types of cookies: session cookies, which are stored only for the duration of your visit and deleted when you close your browser; and persistent cookies, which remain in your browser after your session ends. Persistent cookies help the site recognise you when you return and make it easier for you to use the site.

Types of cookies:

We may use cookies where necessary, in line with their intended purposes:

Cookies are blocked or have been deleted

To delete or block cookies, change your browser settings. Follow the links below for step-by-step instructions for the most popular browsers on their official websites.

• firefox
• Microsoft Edge
• Google Chrome
• safari

Blocking cookies will prevent some site functions and features from working as intended.

ONLINE TRACKING NOTICE

Your personal data will be retained for as long as necessary to perform the activities described in this policy. We may keep it for longer where required by applicable laws and regulations, or under our internal policies.

Your personal data will be shared with third-party trading platforms, only at your request and at your discretion, for a period of 12 months. Upon expiry of that period, and with your consent, it may be shared for a further 12 months.

As part of our operations, we regularly review all personal data to determine whether it is still required.

9. Transfers of personal data to third countries or international organisations

Where necessary to deliver our services and/or for security purposes, we may transfer personal data to third countries (i.e. outside your home country) and to international organisations, using robust security protocols. We apply safeguards at the highest level to protect your data and to ensure that, in all cases, you have access to legal remedies and rights.

Across the EEA (European Economic Area), all residents are protected by data protection laws and safeguards.

• All data transfers are conducted under the EU’s legal jurisdiction and competence, in accordance with the data protection standards set out in Article 45(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”).
• All data transfers between public bodies or authorities are conducted in accordance with Article 46(2) and are governed by a legally binding and enforceable agreement.
• Data transfers are carried out in accordance with the European Commission’s Standard Contractual Clauses, adopted under Article 46(2)(c) of the GDPR, which set out the conditions for international data transfers. You can review these Clauses on the European Commission’s official website: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

For details of the safeguards we use to protect your personal data during transfers to third countries, please email your request to info@wealthwaydigital.uk.

10. Protection of Personal Data

We protect personal data using the highest standard of technical and organisational measures, following gold‑standard procedures. These safeguards help prevent the unlawful or accidental destruction, loss, or alteration of that data.

Although we apply the highest levels of care and best-practice procedures for data protection as required by law, it is not possible to guarantee that your personal data will always remain completely free from error. Accordingly, we cannot accept liability if personal data is disclosed or suffers loss or damage of an incidental, intangible, or consequential nature. This includes situations beyond our control, such as disclosure arising from transmission errors, unauthorised third-party access, or similar causes.

If we receive a legally binding request from regulatory or legal authorities, we may be required to disclose your personal data to those bodies. Once disclosed in compliance with a legal obligation, we cannot control how those authorities handle, store, or protect your data.

Any information sent over the internet, including personal data, carries a risk of interception and cannot be guaranteed to be completely secure. The Company cannot guarantee the security of data transmitted online.

11. Links to third-party websites

Throughout this website you may encounter links to third-party applications and websites. These are not affiliated with us and are not under our control, and our privacy policy applies only to this official website. Such third parties have their own policies and practices for collecting and processing personal data, for which we accept no responsibility. Please use your own judgement when accessing or using third-party services.

Always review a company’s privacy policy on its official website before sharing any personal data. Ensure their data collection, use, and processing practices align with your preferences and priorities. Only provide information directly to the service provider.

12. Policy Amendments

We may update or amend this policy at any time. We will notify you of any changes via the official website and other appropriate channels. The revised privacy policy will be published on the website and, unless stated otherwise, will take effect immediately upon posting.

13. Your rights in relation to your personal data

You have full control and the final say over the use of your personal data, including the right to verify its accuracy, correct errors, and choose to delete it or restrict the scope and nature of our processing.

This page contains information relevant to residents of the EEA.

Your personal data is protected by the rights described herein. You may exercise these rights immediately by emailing the address below.

Accessing Your Rights

Provided the personal data you have supplied to us is accurate, you may access it at any time. All personal data we process is within our control and can therefore be verified.

You can request access to your personal data at any time for verification, and we will provide it in electronic form. If you ask for additional copies of the data we are processing, beyond the first copy, a reasonable fee may apply.

Legal rights and those set out in this privacy policy must not be exercised in a way that infringes the rights of others. The company may refuse or restrict access to personal data where providing it would compromise the rights and freedoms of other individuals.

Right to Correct Inaccuracies

Any inaccuracies in your personal data, whether through omission or incorrect details, may be corrected by you or by the Company to ensure it can be processed properly.

Erasure Rights

You have the right to request the deletion of your personal data in the following circumstances: 1) if it has been processed without your consent or otherwise unlawfully; 2) if you ask us to delete it and we have no legal obligation to retain it; 3) if you object to our processing—even where lawful and based on our legitimate interests or those of a third-party provider—and there are no overriding grounds to continue; and 4) if we are required by law to erase your data.

Your right to deletion may be overridden by legal obligations under EU or any member state law. The same applies where the data is required for the establishment, exercise, or defence of legal claims.

Right to Restrict Data Processing

You have the right to request a restriction on the processing of your personal data if you believe it contains inaccuracies.

If you request that the use of your personal data be restricted, it will be deleted except in the following cases: 1) where deletion is prevented by the laws of the European Union or any Member State; 2) with your consent, where retention is necessary for the establishment, exercise, or defence of legal claims; 3) where necessary to protect the rights of another natural person.

Your Right to Data Portability

You have the right to access and review any personal data you have provided, as long as you have consented in any form to its collection and it is processed by automated means.

You have the right to request the transfer of any and all of your personal data to another company or organisation, provided this is technically feasible. This does not affect your right to have your data erased. This right cannot be exercised where doing so would infringe the rights or freedoms of another individual.

Right to object to data processing

Although the Company may process personal data to pursue its legitimate interests or those of a third-party service provider, you have the right to object and request that such processing cease. This right does not apply where there are compelling legal grounds to continue, including for the establishment, exercise, or defence of legal claims. In such circumstances, we may continue to process your personal data.

You may object at any time to the processing of your personal data for direct marketing purposes.

Your Right to Withhold or Withdraw Consent

You have the right to withdraw your consent to our processing of your personal data at any time and, where practicable, with immediate effect. This does not apply retrospectively and will not affect the lawfulness of any processing carried out before your withdrawal of consent.

If you are dissatisfied for any reason, you have the right to lodge a complaint with the appropriate legal, regulatory, or other supervisory authority.

If you believe your rights and freedoms have been infringed in relation to the processing of your personal data, each European Union Member State has a designated supervisory authority for this purpose. You may lodge a complaint with the relevant authority if you wish.

Section 13 sets out the circumstances in which your rights in relation to personal data may be limited under European Union law or the laws of its Member States.

Once we receive your request about your personal data and how it is processed, we will provide access to the information you have requested, as set out in Section 13 of this policy. We may extend the response period by up to two months, depending on the volume of requests and the complexity of yours. If an extension is required, we will inform you within one month of receiving your request.

We will send the requested information to you electronically, free of charge, unless doing so would contravene applicable law or the provisions of Section 13. We reserve the right to charge a reasonable fee, or refuse to act on requests that are unfounded, excessive, or repetitive.

We reserve the right to ask for further proof of identity if we have reasonable doubts about the identity of the person making a personal data request, in order to protect data and maintain security.