Who we are
DeFi Gateway is a digital asset investment firm based at 1 Victoria Road, Glasgow G58 8QC, United Kingdom. We are the controller of the personal data described in this policy, which explains what we collect, why we collect it and the choices you have under the UK General Data Protection Regulation and the Data Protection Act 2018.
Data we collect
We collect the details you give us when you make an enquiry, open an account or speak to an adviser. This includes your name, email address, phone number, postal address, date of birth and any messages you send. When you invest, we also collect information about your investment goals, your experience with digital assets and the products you choose.
Identity and anti money laundering checks
Before we can open an account, we must verify your identity and the source of your funds. We may ask for a copy of your passport or driving licence, proof of address and information about where your money comes from. We may use third party identity verification providers and screen names against sanctions lists. These checks help prevent financial crime, and we keep the records for as long as the law requires.
Financial and wallet data
We hold records of your deposits, withdrawals, holdings, transactions and charges, along with any bank account details and blockchain wallet addresses you provide. Public blockchains are visible to anyone, so transactions linked to wallet addresses may be seen by third parties outside our control.
How we use your data
We use your information to respond to enquiries, open and run your account, carry out identity checks, produce your reports, process withdrawals, meet our legal and tax obligations and contact you about your account. With your consent, we may also send occasional updates about our products, and you can opt out at any time. Our lawful bases are performance of a contract, legal obligation, legitimate interests and, where relevant, consent.
Sharing your data
We share personal data only where needed: with identity verification providers, custody and technology suppliers, professional advisers, and public authorities such as HMRC where the law requires it. We do not sell your personal data. Where data is transferred outside the UK, we use appropriate safeguards such as approved contract clauses.
Cookies
Our website uses cookies and similar technologies. Please see our Cookie Policy for details of the types we use and how to manage them.
How long we keep data
We keep account and transaction records for as long as you are a client and for a period afterwards to meet legal, tax and anti money laundering requirements, typically at least five years after our relationship ends. Enquiry data from people who do not become clients is deleted once it is no longer needed.
Keeping data secure
We use access controls, encryption and staff training to protect your information. Only people who need your data to do their job can see it.
Your rights
You have the right to access your personal data, to ask us to correct it, to ask us to delete it or restrict its use, to object to certain processing, to data portability and to withdraw consent where we rely on it. Some rights are limited where we must keep records by law. You can also complain to the Information Commissioner's Office at ico.org.uk, though we would welcome the chance to resolve your concern first.
Changes to this policy
We may update this policy from time to time. The latest version will always be published on this page.
Contact us
For any privacy question or to exercise your rights, email us at hello@defigateway.co.uk.