We are committed to protecting the privacy and security of your personal data. This Privacy Policy explains how Niyamo collects, uses, and protects your personal data when you use our investment website and services. As an investment platform operating in the UK, Niyamo is a "data controller" for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This means we are responsible for deciding how we hold and use personal information about you. We are registered with the Information Commissioner's Office (ICO).
We may collect, use, store, and transfer different kinds of personal data about you. We may also process "special categories" of personal data, such as information about your health, if this is relevant to your financial situation or is necessary to provide a specific service. We will only do so with your explicit consent or where it is necessary for a substantial public interest, such as for the purposes of preventing and detecting financial crime.
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality. We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. As a financial services firm, we are subject to specific regulatory requirements for data retention, which may require us to keep certain data for up to seven years after our relationship with you has ended.