Privacy and Personal Information Notice

Noblefundaven treats the responsible handling of personal information as a core duty. We process data openly, for clear purposes and in accordance with applicable requirements, including the UK GDPR. This notice sets out what we gather, why it is used, how long it is kept and the safeguards applied.

1. Who is responsible for your information

For UK GDPR purposes, the website operator and the Noblefundaven platform are responsible for controlling your personal data. Our legal notice contains the applicable contact details and further information. Privacy enquiries may also be directed to our data protection officer.

2. Information we collect

We obtain and process information needed to provide the service, meet legal requirements and safeguard the platform. This can include:

Identity information: your given name, family name and date of birth, used to establish your identity and check your age.
Contact information: your email address, telephone number if supplied, country of residence and, where relevant, your postal address.
Account and payment information: payment details, deposits, withdrawals and records connected with transactions.
Technical and activity information: IP address, browser and device details, sign-in times and connection records.
Verification information: identity documents, proof of address and other evidence needed for KYC/AML procedures where the law requires them.

We normally do not seek special-category information, such as health details or religious beliefs, unless the law requires it or you have clearly authorised its use.

3. Sources of your information

Your information may reach us from several safeguarded sources:

Information you provide: for instance, during registration, profile updates, document submission or correspondence with us.
Information collected automatically: such as cookies, server records, analytics data and technical details generated while you use the platform.
Information from other organisations: including payment services supporting deposits or withdrawals, KYC/AML screening providers and social sign-in services where you permit access.

4. How we use information

We process personal information for specified lawful reasons, including the following where applicable:

To open, administer and maintain your account, including the platform tools made available to you.
To handle and secure payment operations, including deposits and withdrawals.
To provide appropriate support and respond to your enquiries, requests and reported issues.
To meet statutory and regulatory duties, including KYC, AML and taxation requirements.
To protect our systems and identify or stop fraud, misuse and attempted unauthorised entry.
To improve the experience and develop the platform's functionality over time.
To deliver service messages or promotional communications when you have chosen to receive them.

5. Lawful bases for processing

To fulfil our contract with you or take steps you request before entering into one (Article 6(1)(b) UK GDPR).
To meet legal obligations (Article 6(1)(c) UK GDPR), including anti-money-laundering duties.
For legitimate interests (Article 6(1)(f) UK GDPR), including platform security, business continuity and reliable service delivery.
On the basis of your clear consent (Article 6(1)(a) UK GDPR), for example for marketing or non-essential functionality.

6. When information may be shared

Information is shared only when necessary, with selected recipients and service providers such as:

Banks and payment services that accept deposits or support withdrawals.
Specialist organisations carrying out KYC and AML checks.
Cloud hosting and technology providers operating under suitable data-processing arrangements.
Analytics and security suppliers, with anonymised or pseudonymised information used where reasonably practicable.
Professional advisers, including solicitors and tax specialists, when legal or compliance guidance is needed.
Courts and public authorities where disclosure is legally required or necessary to pursue, establish or defend legal claims.

We do not sell personal information or provide it to third parties for their own independent commercial use.

7. Transfers outside the UK

Some suppliers, including hosting and analytics providers, may operate outside the UK or European Economic Area. Where information crosses borders, we use appropriate protections, which can include the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, binding corporate rules or a recognised adequacy decision, to maintain an appropriate level of protection.

8. Information security controls

A combination of technical protections and organisational controls is used to help keep your personal information safe:

Secured connections using up-to-date protocols, including TLS 1.3 or later.
Robust encryption for sensitive information stored in our systems, including AES-256 where suitable.
Scheduled security checks, penetration tests and reviews conducted by independent experts.
Ongoing monitoring designed to identify unusual behaviour and attempted intrusions.
Access permissions allocated in line with each team member's duties and responsibilities.
Client money maintained in segregated accounts through regulated service providers.

No internet-based service can remove every possible security risk, but these controls are designed to limit reasonably foreseeable threats.

9. How long we retain information

Personal information is kept only for as long as needed for the purposes described here or for the period required by law:

While your account remains open and our contractual relationship continues.
Following closure, for the period prescribed by applicable requirements, which may be 5–10 years for tax or regulatory documentation.
Where consent provides the legal basis, such as marketing, until you withdraw that consent.

When information is no longer required, we securely remove it or anonymise it.

10. Rights relating to your privacy

Data protection law gives you a range of rights in relation to your personal information, including the right to:

Ask us to confirm whether we hold or process personal information about you.
Ask us to correct inaccurate details or complete information that is missing.
Request deletion where there is no lawful basis for retaining the information.
Ask us to limit processing in circumstances provided for by law.
Obtain your information in a structured, widely used, machine-readable format for transfer to another provider.
Withdraw consent at any time where processing relies on your consent.
Complain to the appropriate data protection supervisory authority.

11. Cookies and related tools

Cookies and related tools help the website operate, show us how visitors use it and inform service enhancements. Necessary cookies are enabled by default; analytics and advertising cookies are used only with your permission. Our separate cookie notice provides further details.

12. Updates to this notice

We may update this notice from time to time to reflect legal, regulatory or platform developments. The current version will be posted on our website. Where an amendment is material, we will inform you by email or via the platform.

13. Contacting us about privacy

For privacy questions, information about this notice or requests to exercise your rights, contact $site_gmail or use the website contact form. Our data protection officer will assess your message and aim to reply within a reasonable timeframe.

When you use Noblefundaven, you confirm that you have reviewed this notice and accept its provisions.