Personal Data Policy

National Financial Access Programme regards the careful management of your personal information as a fundamental responsibility. We explain how your data is used and collect it only for specified purposes, in accordance with applicable requirements, including the GDPR. This policy describes the information we obtain, why we need it, how long we retain it and the measures used to safeguard it.

1. Data responsibility

For GDPR purposes, the website operator and the National Financial Access Programme platform are responsible for handling your personal data. The legal notice published on this website provides the applicable contact details and additional information. You may also send privacy-related questions to our data protection officer.

2. Data we collect

We collect and process only the information necessary to provide our services, comply with legal obligations and protect the platform. This can include:

Identity information: first name, surname and birth date, used to confirm your age and identity.
Contact details: email address, telephone number if provided, country of residence and, where applicable, postal address.
Account and transaction information: payment details, deposits, withdrawals and transaction history.
Technical and usage data: IP address, browser type, device information, sign-in times and connection logs.
Verification documents: proof of identity, address evidence and other records required for KYC/AML checks when the law calls for them.

We generally avoid collecting special-category information, such as health or religious details, unless legislation requires it or you have provided explicit consent.

3. Sources of information

We obtain information through several secure channels, including:

Details you provide: for example, when opening an account, updating your profile, completing verification or contacting us through a form.
Data gathered automatically: such as cookies, server logs, analytics information and device data created during platform use.
Data received from other organisations: including payment providers, KYC/AML screening services or social login providers where you authorise their involvement.

4. Purposes of processing

We process personal information only for lawful, transparent and clearly defined purposes, including:

Opening, operating and supporting your account and providing access to platform features.
Processing and protecting payment-related activity, including deposits and withdrawals.
Offering relevant support and dealing with your questions or requests.
Observing legal and regulatory responsibilities, including KYC, AML and tax requirements.
Strengthening security and detecting fraud, improper use and harmful attacks.
Improving the platform and making the user experience clearer and more effective.
Providing marketing or service-related messages only where you have actively agreed to receive them.

5. Legal bases

Performing a contract or taking requested steps before a contract is made (Article 6(1)(b) GDPR).
Complying with legal duties (Article 6(1)(c) GDPR), including applicable anti-money-laundering requirements.
Pursuing legitimate interests (Article 6(1)(f) GDPR), including platform security, stability and dependable operation.
Acting on your consent (Article 6(1)(a) GDPR), for example where marketing or optional features are involved.

6. Information disclosure

We share information only where necessary, and only with appropriate providers or other authorised recipients, such as:

Banks and payment providers involved in supporting deposits and withdrawals.
Selected specialist providers that assist with KYC and AML checks.
Cloud and technology providers operating under suitable data-processing agreements.
Analytics and security providers that use anonymised or pseudonymised data where reasonably possible.
Professional consultants, such as solicitors and tax advisers, where their assistance is needed for legal compliance.
Courts or public bodies where disclosure is required by law or needed to establish, exercise or defend legal claims.

We do not sell personal information or share it with third parties so they can use it for their own commercial marketing.

7. International transfers

Certain providers, including cloud and analytics suppliers, may be based outside the European Economic Area. In those cases, we rely on approved safeguards, including EU standard contractual clauses, binding corporate rules or European Commission adequacy decisions, to preserve an appropriate level of data protection.

8. Information security

We apply a range of technical and organisational safeguards to help protect your information, including:

Information moving between systems is secured using current encryption standards, including TLS 1.3 or a later version.
Sensitive data held on our systems is protected with robust encryption, including AES-256 where suitable.
We conduct regular security reviews, penetration tests and assessments by independent specialists.
Our infrastructure is monitored on an ongoing basis for suspicious activity and attempted unauthorised access.
Staff permissions are restricted according to responsibilities and operational need.
Customer money is held in separate accounts through regulated service providers.

Although no technology can eliminate every security threat, these safeguards are intended to limit exposure and help us respond to potential risks.

9. Data retention

We retain personal information only as long as needed for the relevant purpose or as required by applicable legal rules:

For as long as your account and contractual relationship continue.
After your account closes, for the period required by law, which may include 5–10 years for tax or regulatory records.
Where consent is the legal basis, such as for marketing, until you withdraw that consent.

Once information is no longer required for a valid purpose, we securely delete it or convert it into anonymised data.

10. Your privacy rights

Data protection legislation provides you with a number of rights regarding your personal information, including the ability to:

Request confirmation of whether we hold personal information about you and ask to see it.
Request corrections to inaccurate information or completion of incomplete records.
Request deletion of your information where no legal retention obligation applies.
Request limits on processing in circumstances recognised by law.
Receive your information in a structured, commonly used, machine-readable format, including for transfer to another provider.
Withdraw your consent to future processing at any time.
Make a complaint to the relevant data protection supervisory authority.

11. Cookies and similar technology

Cookies and similar technologies allow the website to function, show us how it is used and support improvements to the experience. Essential cookies operate by default, while analytics and advertising cookies are used only after you consent. Further information is available in our separate cookie policy.

12. Changes to this policy

We may revise this policy periodically to reflect changes in legislation, regulatory guidance or platform functionality. The latest version will be published on our website, and significant changes may be notified by email or through the platform.

13. How to contact us

If you have questions about this policy, privacy issues or your data rights, email us at $site_gmail or use the contact form on the website. Our data protection officer will review your request and respond within a reasonable timeframe.

By accessing or using National Financial Access Programme, you acknowledge that you have read this policy and agree to its terms.