Thomas Exchange Global Ltd is concerned and committed to protect the personal data of all our customers and information from third parties and treats your privacy rights very seriously.
Who is the Data Controller?
The Data Controller is Thomas Exchange Global Ltd.
Tel: 020 7183 4197 / 020 7240 1214
Fax: 020 3475 5049
| Sakthi Ariaratnam
|Email: firstname.lastname@example.org||Email: email@example.com|
|Tel: 020 7183 4197 / 020 7240 1214||Tel: 020 7183 4197 / 020 7240 1214|
|Fax: 020 3475 5049||Fax: 020 3475 5049|
What formation or data do we collect?
Information about an individual that is personally identifiable, such as your name, address, email address, telephone number, details of your financial affairs and their KYC (Know Your Customer) such as documents of identity, proof of address, bank statement, invoices and any documentary evidence for the underlying transaction and source of funds.
We also collect personal data from publicly available sources (Eg internet) which is lawfully obtained and are available with permission to process.
For what purpose do we use the information?
Your personal data is used in the performance of the contractual obligations in a business relationship with you.
As a financial institution, we are required to conform to all laws of United Kingdom, HMRC Guidelines and EU regulations (wherever applicable) in relation to Anti Money Laundering, Terrorist Financing and Financial Crime and follow best industry practices. Further, we are guided by the regulatory bodies such as HMRC, the Financial Conduct Authority (FCA) and the Information Commissioner`s Office (ICO). As such, processing and screening is carried out for identity verification, anti-fraud, anti -terrorist financing and anti-money laundering measures and preventing crimes.
CCTV surveillance to gather evidence in the event of a robbery or financial crime, prevent financial crime and monitor health and safety considerations.
For use as evidence in a legal claim or as a defence in the event of a litigation.
Measures to control admission to the premises.
In addition to the above personal information provided by you will only be used by us to provide you with further news and information about the services and initiatives that are available.
Any statutory obligations for you to provide personal data:
The money laundering and terrorist financing laws require us to verify your identity and further obtain any “Know Your Customer” - KYC documents that are necessary as the case may be before carrying out a transaction or entering in to a business relationship. We also record your name, address, telephone and e-mail. In order for us to comply with this statutory obligation you need to provide us with the necessary information and documents. If you do not provide us with the necessary information and documents we will not be allowed to carry out any transactions with you and also establish a business relationship.
How is your personal data secured?
We are much focused on securing your personal data and give priority in protecting your privacy. This is being achieved through the following:
- Effective controls in storing and maintaining personal data
- Secured in soft form protected by firewall, VPN Network, encryption and virus guard protection and internet security.
- Training of all staff on the confidentiality and handling of personal data
- Controls on staff access to personal data
- Having in place a business continuity and disaster recovery plan
- 24 hour 7 day remote offshore CCTV surveillance on all branches monitoring the security of premises and to safeguard against trespassers
- Admission of staff and authorised persons to all our branches is strictly on Identity issued by us and identity provided by the outside authorised persons.
- The information and documents are stored on secured severs which is accessible to only designated staff.
Details of transfer to third country and safeguards
We have an offshore company fully owned by Thomas Exchange Global Ltd outside EU carrying out surveillance using CCTV cameras on the activities of all our branches. We have protected your data by entering in to an agreement with EU Model Contractual Clauses between the two companies and the staff of the offshore company are obligated to comply with the data protection standards in Europe with a declaration.
Disclosure and with whom we share your information:
We do not share your information with outsiders other than the following:
With our trusted “Processors” who provide services such as back up and server hosting, website hosting IT Software and maintenance and back office
Reputed and trusted regulatory risk verification institutions to carry out regulatory compliance checks to conform to anti-money laundering, anti- fraud and anti-terrorist financing measures
Statutory authorities such as HMRC, the FCA, the NCA and the ICO
Our legal and professional advisers and auditors
When courts and other statutory crime detection and crime prevention authorities request for information
For use as evidence in a legal claim or as a defence in the event of a litigation
Any personal information provided via this website will be held by us and not sell, rent or loan any identifiable information regarding its website visitors to any third party
Retention Period of information and documents or criteria for retention:
We store your personal data as long as it is necessary for the performance of our contractual and statutory obligations. All data no longer required for the performance of our contractual and statutory obligations, are regularly securely deleted and securely destroyed.
In compliance with HMRC (Her Majesty Revenue and Customs) MLR guidelines 2017, we retain the documents for a period of 5 years, from the date of transaction or from the date of ceasing the business relationship, unless required by the regulatory authorities, the court of law or as evidence for any investigation or court proceedings.
Destruction or deletion of documents:
When the personal data reaches the end of its retention period or Thomas Exchange Global Ltd identifies that the personal data is no longer required, they are securely deleted.
All physical documents are disposed of by shredding by a reputed institution under the supervision of our staff and a certificate is obtained from them.
What rights do you have?
You have a right of access, a right to rectification, a right to erasure (right to be forgotten), a right to restriction of processing, a right to object and a right of portability.
However, there rights would be subject to any statutory restriction placed on us.
You have the right to withdraw your consent to the processing of personal data at any time. However, this withdrawal will take effect only in the future and all processing carried out before the withdrawal shall not be affected.
You could exercise your right by e-mailing to us on firstname.lastname@example.org.
Do we carry out "profiling"?
As required by law data evaluations are carried out on your personal data automatically using systems of reputed regulatory risk verification institutions to conform to anti-money laundering, anti- fraud and anti-terrorist financing measures.
Apart from this we do not carry out any profiling.
Can you lodge a complaint with a supervisory authority?
You have the right to lodge a complaint with our supervisory authorities. The authority for data security is the Information Commissioner`s Office.
Information Commissioner`s Office - Customer Contact:
Information Commissioner's Office
Tel: 030 3123 1113
The laws we are governed by and the regulatory authorisations:
We are governed by the anti- money laundering and anti-terrorist financing laws of UK and GDPR (General Data Protection Regulations) and the Data Protection Act of 2018, along with other applicable laws.
We are registered in United Kingdom as a private limited company under number 2866549 and an Authorised Payment Institution authorised and regulated by FCA (Financial Conduct Authority) Registered No: 568115), HMRC (Her Majesty Revenue and Customs) Registered No: 12113089 and Information Commissioner`s Office No: Z107815X
We not deal with children under the age 16 years and request children under this age not to use our websites.
How to contact us:
Thomas Exchange Global Ltd
Tel: 020 7183 4197 / 020 7240 1214
Fax: 020 3475 5049