Privacy Policy
This policy explains how SunpharmaInvest collects and uses personal data when you visit our website or use our Platform, and what choices you have over that data.
1. Who we are
SunpharmaInvest is the data controller for personal data processed through this website and our Platform. Our registered address is Fenchurch Street 233, EC4N 7BJ London, United Kingdom. You can contact us at [email protected] for any privacy questions.
2. Personal data we collect
Depending on how you interact with us, we may collect:
- Identity and contact data, such as your name, email address, telephone number and date of birth;
- Verification data, such as identity documents and proof of address, where required for account approval;
- Account and usage data, such as login times, device identifiers, settings for Automated Tools and features you use;
- Technical data, such as IP address, browser type and operating system;
- Communications data, such as messages you send to our support team.
We do not intentionally collect special category data. Please do not send us information that is not needed for the purposes described here.
3. How we use your data and our legal bases
We process personal data only where we have a lawful basis under the UK General Data Protection Regulation ("UK GDPR"). We rely on performance of a contract to provide your Account and Platform features; on compliance with legal obligations, including anti-money laundering and identity checks; on our legitimate interests in securing and improving the Platform; and, where required, on your consent, for example for optional marketing communications, which you may withdraw at any time.
4. Cookies and similar technologies
We use cookies and similar technologies to operate the website, remember your preferences and understand how the Platform is used. Full details, including how to manage your choices, are set out in our Cookie Policy. Where a cookie is not strictly necessary, we will ask for your consent before setting it.
5. Sharing your data
We do not sell your personal data. We may share it with carefully selected service providers acting on our behalf, such as hosting, analytics, identity verification and customer support providers. We may also disclose data where required by law, by a court order or by a competent regulator, or to protect the rights, safety and property of our users and the public.
6. International transfers
Some of our service providers may be located outside the United Kingdom. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as UK-approved international data transfer agreements or adequacy regulations, as required by UK data protection law.
7. Retention
We keep personal data only for as long as necessary for the purposes for which it was collected. Account and transaction records are generally retained for at least five years after the relationship ends, to meet legal, regulatory and accounting obligations. Marketing preferences are kept until you opt out. We then securely delete or anonymise data where we no longer need it.
8. Security
We use technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration and disclosure. These include encryption in transit, access controls and staff confidentiality obligations. No system is completely secure, so we cannot guarantee absolute security, and you should keep your login details confidential.
9. Your rights
Under UK data protection law you have the right to:
- request access to the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- request erasure in certain circumstances;
- restrict or object to certain processing;
- request portability of data you provided to us; and
- withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at [email protected]. We may need to verify your identity first. We normally respond within one month.
10. Children
The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can delete it.
11. Complaints
If you have concerns about how we handle your data, please contact us first so that we can address them. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
12. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page, with the date of the last update shown at the top. Material changes will be notified to you where appropriate.