Privacy Policy
Last update: 21.09.2026
We are committed to protecting your Personal Data and your privacy.
This Privacy Policy explains how we collect and store the information you provide through the website Zephyr Vestmatic (the "Website").
The following principles apply:
We are committed to being transparent about how we collect and process your personal information:
We want you to make informed decisions about how your Personal Data is used and processed. To support this, we use a range of methods to keep you informed about how your Personal Data is handled.
Where specific information is relevant to you, we will provide it at the appropriate time.
We welcome any questions you may have and are happy to clarify any limitations imposed by law. You can reach us by email at: info@zephyrvestmatic.com
Your personal data will only be used for the purposes set out in this Policy.
We process your personal data for a range of purposes: to provide the website and connect you with third-party trading platforms (the 'Services'); to improve the site; to protect our rights and interests; to support the maintenance and delivery of the Services; to meet regulatory and legal obligations; and to carry out administrative and business activities related to the Services.
We also process your personal data to better understand your preferences and needs.
To exercise your rights in relation to your Personal Data, you have access to the following tools:
To exercise your rights regarding your personal data, contact us at any time. You may request access to your personal data, have it corrected or deleted, restrict or stop its use for specific or general purposes, or have it transferred to you or a third party. We will accommodate your request accordingly.
Protect Your Personal Data:
While we cannot guarantee the absolute security of your Personal Data, we are committed to employing a range of methods and techniques to keep it protected.
Our Privacy and Security Policy is complete.
1. The Scope?
This Policy describes the types of personal data the Company collects about natural individuals, and how that data is processed, shared with third parties, and secured. This Policy applies to information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified directly, or through a combination of information the Company holds or can reasonably access. For the purposes of this Policy, "processing" refers to any operation involving personal data, including its collection, organisation, storage, and management. Our services are intended for users aged 18 and above. We do not knowingly collect personal data from individuals under 18, and we do not permit such individuals to use our services. If we become aware that personal data belonging to a person under 18 has been collected, we will delete it promptly.
2. What Personal Data Do We Hold About You?
When you access our services, channels, or website, we collect personal data. This may occur directly — when you provide it to us — or indirectly, through analysis of how you use our services and channels, or via information received from our third-party partners.
You are not required to share personal information with us. However, choosing not to do so may limit our ability to provide our Services or grant you access to the website.
Providing personal data is not mandatory. However, choosing not to share it may prevent us from delivering our Services or restrict your access to the website.
4. What Personal Data Do We Collect? When you visit our website, we collect the following personal data:
This includes technical data about your online activity, such as your IP address, access dates and times, language settings, browser type, software crash logs, and device information. This data is non-personal and cannot be used to identify you.
Personal Data We receive from you: any personal data you voluntarily provide when connecting to a third-party online trading platform through Us.
Personal information you provide to third-party platforms to facilitate trade: this includes your full name, address, phone number, and email address.
5. Legal Basis and Reasons for Processing Personal Data We process your personal data on the following legal grounds: a) Performance of a contract or pre-contractual steps — where processing is necessary to provide our Services or to take steps at your request before entering into a contract. b) Legal obligations — where processing is required to comply with applicable legal requirements. c) Legitimate interests — where processing serves our legitimate business interests, provided those interests are not overridden by your rights and freedoms. d) Consent — where you have given explicit consent for a specific processing purpose. The purposes for which we process personal data include: — Providing, managing, and improving our Services — Verifying your identity and ensuring platform security — Communicating with you regarding your account or our Services — Complying with applicable legal and regulatory obligations — Analysing usage to enhance user experience — Preventing fraud and unauthorised access Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Where providing personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, failure to provide such data may prevent us from delivering our Services or granting you access to the website.
Your personal data is processed by the Company for the purposes described in this section, under the applicable legal basis.
The Company cannot process personal data concerning you without a valid legal basis. The legal grounds on which the Company relies to process your personal data are:
- By submitting personal data through this Website, you consent to its processing for one or more specified purposes, including its transfer to a third-party trading platform.
- In some cases, we or a third party may need to process your data to pursue legitimate interests — such as improving our Services or defending legal claims.
- Processing is required to comply with a legal obligation.
For more details on how we process personal data to protect legitimate interests, please contact us by email.
Below is a list of the purposes and legal grounds under which we may use the personal data you provide.
Scope
Legal Basis
At your request, we may collect and share your personal data with third-party companies to facilitate access to digital trading.
You have consented to the processing of your personal data for one or more purposes.
2. To respond to your requests, questions, or concerns
Personal data is necessary to address any questions you may have about the Services.
Processing is required to support the legitimate interests of the Company or a third party.
Personal data is processed to meet applicable legal, administrative, or judicial obligations.
Processing is required to meet legal obligations.
4. To Improve Our Services
We may use personal data to improve Our Services, including crash reports and malfunction data collected in connection with the Services.
Processing must serve the legitimate interests of the Company or a relevant third party.
To prevent fraud and misuse of our Services
Processing must serve the legitimate interests of the Company or a third party.
6. To carry out and manage activities required to deliver Our Services
This includes back-office operations, business development, strategic decision-making, and oversight functions.
Processing of personal data may also be necessary to serve the legitimate interests of the Company or a third party.
7. To conduct statistical and other analysis
We use a range of analytical techniques, including statistical methods, to support decision-making across different areas.
Processing of personal data may be required to serve the legitimate interests of the Company or a third party.
8. Protecting Our Assets, Rights, and Interests — and Those of Third Parties We may process your personal data to protect our rights, interests, and assets, or those of third parties, in accordance with applicable laws, regulations, agreements, and any relevant terms, conditions, or policies.
Processing data is necessary to serve the legitimate interests of the Company or a third party.
6. Transfer of Personal Data to Third Parties We may share your personal data with third parties in the following circumstances: Service Providers: We work with trusted third-party service providers who assist in operating our platform and delivering our services. These parties are granted access to personal data only to the extent necessary to perform their functions and are bound by confidentiality obligations. Legal and Regulatory Obligations: We may disclose personal data to regulatory authorities, law enforcement agencies, or other government bodies where required by applicable law or in response to a lawful request. Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the relevant third party as part of that transaction. You will be notified of any such transfer and any material changes to how your data is handled. Third-Party Partners: Where you have given your consent, we may share personal data with selected third-party partners for purposes disclosed at the time of collection. All third parties receiving your personal data are required to handle it in accordance with applicable data protection standards and to use it solely for the purposes for which it was shared. We do not sell your personal data to third parties.
We may share your Personal Data with third-party service providers — including hosting and storage providers — for purposes such as infrastructure support and user experience analysis.
At your request, we may also share specific Personal Data with third-party trading platforms. In such cases, your Personal Data will be disclosed to those platforms and will be subject to their respective privacy policies. Your Personal Data may be shared with more than one trading platform.
We may share Personal Data with affiliated entities or business partners where doing so supports the development and improvement of our products and services.
Where necessary to protect the rights or assets of third parties, we may disclose Personal Data to regulatory, local, or other competent authorities.
We may also share your Personal Data with prospective investors, buyers, or lenders — whether in relation to the Company or any entity within its group — in connection with a transaction involving the transfer or sale of assets, or as part of any merger, restructuring, consolidation, or insolvency proceedings affecting the Company or any group entity.
7. Cookies and Third-Party Services We use cookies and third-party services on our website. Some of these are essential for the site to function; others help us analyse usage, improve your experience, or deliver relevant content. Third-party providers we work with may set their own cookies or collect data independently, subject to their own privacy policies. We have no control over and take no responsibility for the data practices of these third parties. By continuing to use our website, you consent to the use of cookies in accordance with our Cookie Policy. You can manage or withdraw your cookie preferences at any time through your browser settings or our cookie preference centre. Withdrawing consent may affect certain features or functionality.
We may work with third-party service providers, including advertising networks and analytics companies, which may also use cookies or similar tracking technologies on our website.
Cookies are small text files placed on your device when you visit our website. They collect information about your browsing habits and preferences to improve your experience, remember your settings, and tailor the products and services shown to you. Cookies are also used for analytics and statistical purposes.
We use two types of cookies. Session cookies are temporary and are deleted from your device when you close your browser. Persistent cookies remain on your device after your browser is closed and help the website recognise you as a returning user, allowing for a more seamless experience on future visits.
Types of Cookies:
We may use them based on their purpose.
Types of Cookies
Essential cookies only
Scope
These cookies are necessary to access the features you've requested and navigate our website. They enable your device to download and stream data, deliver the information, products, and services you've asked for, and allow you to return to pages you've previously visited.
Additional Information
Cookies collect personal data — such as your username and last login date — to verify your active session. They are automatically deleted when you close your browser (session cookies).
Types of Cookies
Functionality Cookies
Scope
Cookies help us recognise you on each visit and remember your saved preferences.
Additional Information
Cookies collect personal data — such as your username and last login date — to verify your active session. They are deleted automatically when you close your browser (session cookies).
Types of Cookies
Cookies for performance
Scope
We use cookies to collect site performance data and support ongoing improvements to our website.
Additional Information
Cookies store anonymous data not linked to any identifiable individual. Session cookies are removed when you close your browser; others remain valid indefinitely.
To block or remove cookies, adjust your browser's settings. Use the links below for step-by-step guidance on the most widely used browsers.
- Firefox
- Microsoft Edge
- Google Chrome
- Safari
Please note that disabling certain features may cause some or all Website functions to behave unexpectedly.
ONLINE TRACKING NOTICE
This service does not currently support do-not-track signals.
8. Retention of Your Personal Data
We retain your personal data for as long as necessary to fulfil the purposes described in this Policy, or for longer periods where permitted by applicable law, regulations, or orders.
We share your information with third-party trading platforms for a period of 12 months. With your consent, we will continue sharing your data for a further 12 months.
We regularly review the personal data we hold to confirm it is no longer required.
Transfers of Personal Information to a Third-Party Country or to an International Organisation
Your personal data may be transferred to other countries or shared with international organisations outside your country of residence. The Company takes all necessary steps to protect your personal data and ensure that you retain the right to assert your rights and access effective legal recourse.
These protections apply to all individuals residing in the EEA (European Economic Area).
- Transfers to a third country or international organisation are made where the European Commission has determined, under Article 45(3) of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (the "GDPR"), that the recipient country or organisation provides an adequate level of protection for personal data.
- This transfer is made under a legally binding and enforceable agreement between public entities or authorities, pursuant to Article 46(2)(a).
- This transfer was carried out in accordance with standard contractual clauses adopted by the EU Commission under Article 46(2)(c) of the GDPR. These clauses are available at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.
We can provide details on the security measures used to protect your personal data when transferred to third-party countries or international organisations. To request this information, contact us at info@wealthwaydigital.uk
10. Security of Personal Data We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or damage. Where we have provided you with a password — or where you have chosen one — to access certain parts of our platform, you are responsible for keeping that password confidential. Do not share your password with anyone. Data transmission over the internet is inherently not fully secure. While we do our best to protect your personal data, we cannot guarantee the security of any data you transmit to us. Any transmission is at your own risk. Once we receive your data, we apply strict security procedures and features to prevent unauthorised access.
We have taken appropriate organisational and technical measures to protect personal data, including against accidental or unlawful destruction, loss, or alteration.
We cannot guarantee that the security of your personal data will be maintained without error, nor can we be held liable for any indirect, incidental, or consequential damages arising from the use or disclosure of personal data. This includes, but is not limited to, disclosures resulting from transmission errors, unauthorised third-party access, or other causes beyond our control.
Where required by legal or other obligations beyond our control, we may be required to disclose your personal data to third parties, including public authorities. In such circumstances, we have no control over the security measures applied by those third parties.
Personal data cannot be transmitted over the internet with complete security. We cannot guarantee the security of personal data you transmit to us online.
11. Hyperlinks to Third-Party Websites
Our website contains links to third-party websites and applications. These sites and apps are not operated or supervised by the Company, and we are not responsible for how they collect or process Personal Data. This Policy does not apply to any actions taken through third-party sites or apps.
Before accessing or using any third-party website or application, we strongly recommend reading its privacy policy carefully before sharing any Personal Data with them.
12. Modifications to This Policy We may update this Policy from time to time. When we do, we will revise the date at the top of this page. If changes are material, we may notify you by email or through a prominent notice on our platform. Your continued use of our services after any update constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of any changes.
Before visiting any third-party website or app, read their privacy policy carefully. Only share your personal data with them once you are satisfied with how it will be handled.
13. Your rights regarding your personal information Depending on your location and applicable law, you may have certain rights regarding the personal information we hold about you. These rights may include: - The right to access the personal information we hold about you and to request details about how it is used and shared. - The right to request correction of inaccurate or incomplete personal information. - The right to request deletion of your personal information, subject to certain legal exceptions. - The right to object to or restrict our processing of your personal information in certain circumstances. - The right to data portability, where applicable, allowing you to receive your personal information in a structured, commonly used format. - The right to withdraw consent at any time where processing is based on your consent, without affecting the lawfulness of processing carried out prior to withdrawal. To exercise any of these rights, please contact us using the details provided in this policy. We will respond to your request within the timeframe required by applicable law. Please note that some rights are not absolute. In certain circumstances, we may be unable to fulfil a request — for example, where doing so would conflict with a legal obligation or adversely affect the rights of another person. Where we are unable to comply with a request, we will explain the reason. If you are dissatisfied with how we have handled your personal information, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
You have the right to request that we verify the accuracy of Personal Data collected about you, correct any inaccuracies, and delete any Personal Data we no longer require. You may also restrict the scope or type of processing applied to your Personal Data.
If you are a resident of the EEA, please refer to this page:
These rights apply to the Personal Data you provide to us. To exercise any of these rights, please submit your request by email to the address below.
Access Rights
We can verify whether your Personal Data is being processed. If it is, you may access that Personal Data.
We will provide an electronic copy of your Personal Data currently being processed and may charge a reasonable fee for additional copies. Data will be provided electronically upon request.
The right to access Personal Data must not conflict with the rights and freedoms of others. If a request would be detrimental to another person's rights or freedoms, we may decline or limit our response.
Right to Rectification
We will correct inaccurate Personal Data upon request. You may also request that incomplete Personal Data be completed, taking into account the purpose for which it is processed.
Right to Erasure
This right applies where: (a) the Personal Data is no longer necessary for the purpose for which it was collected or processed; (b) you withdraw consent and no other legal basis for processing exists; (c) you object to processing based on legitimate interests pursued by us or a third party; (e) the Personal Data has been unlawfully processed; or (f) the Personal Data must be erased to comply with a legal obligation.
This right does not apply where processing is necessary (a) to comply with a legal obligation under European Union or Member State law, or (b) to establish, exercise, or defend legal claims.
Restriction of Processing
If you have concerns about the accuracy of your Personal Data, you may request that we restrict its processing.
Where processing is restricted, Personal Data may only be retained with your consent, or for the establishment, exercise, or defence of legal claims, for the protection of another person's rights, or on grounds of substantial public interest within the European Union or a Member State.
Right to Data Portability
Where processing is carried out by automated means and is based on your consent or a contract to which you are a party, you have the right to receive the Personal Data you have provided to us in a structured, commonly used format.
You may request that your Personal Data be transferred directly to another controller where technically feasible. Exercising your right to data portability does not affect your right to erasure, and must not adversely affect the rights or freedoms of others.
Right to Object
You have the right to object at any time to the processing of Personal Data concerning you that is based on legitimate interests pursued by us or a third party, including profiling based solely on those interests. Where we cannot demonstrate compelling legitimate grounds that override your rights, freedoms, or interests, or where processing is not necessary for the establishment, exercise, or defence of legal claims, we will cease processing.
You have the right to object at any time to the processing of your Personal Data for direct marketing purposes.
Right to Withdraw Consent
You may withdraw your consent to our processing of your Personal Data at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.
You have the right to lodge a complaint with the relevant supervisory authority.
You may submit a complaint to a supervisory authority established by a Member State to protect the fundamental rights of individuals in relation to the processing of Personal Data within the European Union.
European Union and Member State laws may limit the rights described in this section 13 as they relate to your Personal Data.
We will respond to requests made under section 13 within one month of receipt. Where necessary, this period may be extended by up to two months depending on the complexity and volume of requests. We will notify you of any extension within one month of receiving your request, along with the reasons for the delay.
Unless otherwise provided under section 13, information provided in response to requests made under section 13 will be supplied free of charge. If a request is manifestly unfounded or excessive, in particular due to its repetitive nature, we may charge a reasonable administrative fee or decline to act.
If we have reasonable doubts about the identity of the person submitting a request, we may ask for additional information to verify identity before proceeding.