Best Foreign Exchange privacy policy

Privacy Notice

Privacy Policy

Thomas Exchange Global Ltd is concerned and committed to protect the personal data of all our customers and information from third parties and treats your privacy rights very seriously.

Who is the Data Controller?

The Data Controller is Thomas Exchange Global Ltd.

402, Strand,

Tel: 020 7183 4197 / 020 7240 1214
Fax: 020 3475 5049

Representative: Co-representative:
Sakthi Ariaratnam
402, Strand,
402, Strand,
Email: Email:
Tel: 020 7183 4197 / 020 7240 1214 Tel: 020 7183 4197 / 020 7240 1214
Fax: 020 3475 5049 Fax: 020 3475 5049

What formation or data do we collect?

Information about an individual that is personally identifiable, such as your name, address, email address, telephone number, details of your financial affairs and their KYC (Know Your Customer) such as documents of identity, proof of address, bank statement, invoices and any documentary evidence for the underlying transaction and source of funds.

We also collect personal data from publicly available sources (Eg internet) which is lawfully obtained and are available with permission to process.

For what purpose do we use the information?

Your personal data is used in the performance of the contractual obligations in a business relationship with you.

As a financial institution, we are required to conform to all laws of United Kingdom, HMRC Guidelines and EU regulations (wherever applicable) in relation to Anti Money Laundering, Terrorist Financing and Financial Crime and follow best industry practices. Further, we are guided by the regulatory bodies such as HMRC, the Financial Conduct Authority (FCA) and the Information Commissioner`s Office (ICO). As such, processing and screening is carried out for identity verification, anti-fraud, anti -terrorist financing and anti-money laundering measures and preventing crimes.

CCTV surveillance to gather evidence in the event of a robbery or financial crime, prevent financial crime and monitor health and safety considerations.

For use as evidence in a legal claim or as a defence in the event of a litigation.

Measures to control admission to the premises.

In addition to the above personal information provided by you will only be used by us to provide you with further news and information about the services and initiatives that are available.

Any statutory obligations for you to provide personal data:

The money laundering and terrorist financing laws require us to verify your identity and further obtain any “Know Your Customer” - KYC documents that are necessary as the case may be before carrying out a transaction or entering in to a business relationship. We also record your name, address, telephone and e-mail. In order for us to comply with this statutory obligation you need to provide us with the necessary information and documents. If you do not provide us with the necessary information and documents we will not be allowed to carry out any transactions with you and also establish a business relationship.

How is your personal data secured?

We are much focused on securing your personal data and give priority in protecting your privacy. This is being achieved through the following:

  • Effective controls in storing and maintaining personal data
  • Secured in soft form protected by firewall, VPN Network, encryption and virus guard protection and internet security.
  • Training of all staff on the confidentiality and handling of personal data
  • Controls on staff access to personal data
  • Having in place a business continuity and disaster recovery plan
  • 24 hour 7 day remote offshore CCTV surveillance on all branches monitoring the security of premises and to safeguard against trespassers
  • Admission of staff and authorised persons to all our branches is strictly on Identity issued by us and identity provided by the outside authorised persons.
  • The information and documents are stored on secured severs which is accessible to only designated staff.

Details of transfer to third country and safeguards

We have an offshore company fully owned by Thomas Exchange Global Ltd outside EU carrying out surveillance using CCTV cameras on the activities of all our branches. We have protected your data by entering in to an agreement with EU Model Contractual Clauses between the two companies and the staff of the offshore company are obligated to comply with the data protection standards in Europe with a declaration.

Disclosure and with whom we share your information:

We do not share your information with outsiders other than the following:

With our trusted “Processors” who provide services such as back up and server hosting, website hosting IT Software and maintenance and back office

Reputed and trusted regulatory risk verification institutions to carry out regulatory compliance checks to conform to anti-money laundering, anti- fraud and anti-terrorist financing measures

Statutory authorities such as HMRC, the FCA, the NCA and the ICO

Our legal and professional advisers and auditors

When courts and other statutory crime detection and crime prevention authorities request for information

For use as evidence in a legal claim or as a defence in the event of a litigation

Any personal information provided via this website will be held by us and not sell, rent or loan any identifiable information regarding its website visitors to any third party

Retention Period of information and documents or criteria for retention:

We store your personal data as long as it is necessary for the performance of our contractual and statutory obligations. All data no longer required for the performance of our contractual and statutory obligations, are regularly securely deleted and securely destroyed.

In compliance with HMRC (Her Majesty Revenue and Customs) MLR guidelines 2017, we retain the documents for a period of 5 years, from the date of transaction or from the date of ceasing the business relationship, unless required by the regulatory authorities, the court of law or as evidence for any investigation or court proceedings.

Destruction or deletion of documents:

When the personal data reaches the end of its retention period or Thomas Exchange Global Ltd identifies that the personal data is no longer required, they are securely deleted.

All physical documents are disposed of by shredding by a reputed institution under the supervision of our staff and a certificate is obtained from them.

What rights do you have?

You have a right of access, a right to rectification, a right to erasure (right to be forgotten), a right to restriction of processing, a right to object and a right of portability.

However, there rights would be subject to any statutory restriction placed on us.

You have the right to withdraw your consent to the processing of personal data at any time. However, this withdrawal will take effect only in the future and all processing carried out before the withdrawal shall not be affected.

You could exercise your right by e-mailing to us on

Do we carry out "profiling"?

As required by law data evaluations are carried out on your personal data automatically using systems of reputed regulatory risk verification institutions to conform to anti-money laundering, anti- fraud and anti-terrorist financing measures.

Apart from this we do not carry out any profiling.

Can you lodge a complaint with a supervisory authority?

You have the right to lodge a complaint with our supervisory authorities. The authority for data security is the Information Commissioner`s Office.

Information Commissioner`s Office - Customer Contact:

Information Commissioner's Office
Wycliffe House
Water Lane

Tel: 030 3123 1113


The laws we are governed by and the regulatory authorisations:

We are governed by the anti- money laundering and anti-terrorist financing laws of UK and GDPR (General Data Protection Regulations) and the Data Protection Act of 2018, along with other applicable laws.

We are registered in United Kingdom as a private limited company under number 2866549 and an Authorised Payment Institution authorised and regulated by FCA (Financial Conduct Authority) Registered No: 568115), HMRC (Her Majesty Revenue and Customs) Registered No: 12113089 and Information Commissioner`s Office No: Z107815X


We not deal with children under the age 16 years and request children under this age not to use our websites.

How to contact us:

Thomas Exchange Global Ltd
402, Strand,

Tel: 020 7183 4197 / 020 7240 1214
Fax: 020 3475 5049

Changes to this Privacy Policy

This Privacy Policy was last updated on 18th May 2018

This Privacy Policy may be updated from time to time without notice to incorporate any major changes. You should check this page from time to time to ensure that you are happy with any changes.