This Privacy Policy explains how Kinetic Exchange Limited (“we”, “us”, or “our”) collects, uses, and protects personal data when you use our website and services.
1. Summary
Data we collect automatically
When you visit www.kinetic-exchange.com, we automatically collect certain data, including usage data, device information, trackers, city-level location data, country calling codes and similar technical identifiers. Trusted third parties assist us in processing this data.
How we use automatically collected data:
- Platform services and hosting
- Tag management
- Spam and bot protection
- Traffic optimization and content distribution
Data you provide to us
We collect personal data that you voluntarily provide while using our services, including contact and location details such as city, postcode, and country. Trusted third parties may assist us in processing this data.
Client onboarding and financial data
The payment, FX, and corporate and commercial finance services we arrange are provided by our regulated partners, including Ebury Partners UK Limited, Currency Cloud Limited, Equals Money Plc, and Sciopay Ltd. As a condition of accessing these services, our partners require us to collect certain personal and financial data from clients on their behalf. This is a legal requirement under Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations, and we have no discretion to waive it.
2. Owner and Data Controller
Kinetic Exchange Limited
124 City Road, London, England EC1V 2NX
Contact email: info@kinetic-exchange.com
Kinetic Exchange Limited is registered with the Information Commissioner’s Office (ICO) as a Data Controller.
3. Types of Data Collected
This website may collect the following types of personal data:
- Usage data
- Device information
- Trackers
- City, ZIP/Postal code, state, province, county, country
- IP address
- Browser, operating system, and language
- Page views, scrolling behavior, clicks
For client onboarding, we may also collect identity documents, KYC information, financial account details, corporate documentation, beneficial ownership information, and communications relating to your account.
4. Mode and Place of Processing
We take appropriate security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. Data processing is carried out using IT-enabled tools and organizational procedures strictly related to the stated purposes.
Personal data is processed at our operating offices and at locations where our service providers are based. Where we use third-party service providers based outside the UK or EEA, we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent mechanisms.
To comply with the legal obligations of our regulated e-money partners, we retain your personal data and transaction records for a minimum of five years following the termination of our business relationship or the completion of a transaction.
5. Purposes of Processing
We collect and process personal data in order to:
- Provide and maintain our services
- Comply with legal obligations
- Respond to lawful requests
- Protect our rights and interests
- Detect and prevent fraud, spam, and malicious activity
- Collect KYC and AML data on behalf of our regulated partners
- Execute transactions and manage client accounts
- Communicate with clients regarding their accounts
6. Data Processors
Key processors and regulated providers include:
- Hostinger UK Limited (platform hosting)
- Cloudflare, Inc. (bot management and traffic distribution)
- Google LLC (tag management)
- Ebury Partners UK Limited
- Currency Cloud Limited
- Equals Money Plc
- Sciopay Ltd
7. Data Security
The security measures we have in place include:
- Encryption of sensitive data in transit (TLS) and at rest
- Role-based access controls
- Secure, UK-hosted infrastructure for our primary systems
- Data Processing Agreements with all third-party processors
- Regular review of our information security practices
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay where required.
8. Cookie Policy
This website uses cookies and other trackers to provide and optimize the service. Users can control or disable cookies through their browser settings.
9. GDPR User Rights
Users have the right to:
- Withdraw consent at any time
- Object to processing
- Access their personal data
- Request correction or deletion
- Restrict processing
- Receive and transfer their data
- Lodge a complaint with a supervisory authority
Requests can be submitted via the contact details above and will be addressed within one month. To lodge a complaint with the UK supervisory authority, contact the ICO at ico.org.uk.
10. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. Users are encouraged to review this page regularly. Where required, new consent will be obtained.
11. Definitions
Personal Data: any information that identifies or can identify a natural person.
Usage Data: information collected automatically through this website.
Data Controller: Kinetic Exchange Limited.
Cookie / Tracker: technologies used to track user activity.