Notice on Privacy and Personal Data

Nationalfinancialinclusionprogramme regards the careful treatment of personal information as a fundamental responsibility. We handle data transparently, for defined reasons and in line with relevant obligations, including the UK GDPR. This notice explains what we collect, the purposes for using it, retention periods and the protections we put in place.

1. Responsibility for your personal data

Under the UK GDPR, the website operator and the Nationalfinancialinclusionprogramme platform act as controllers of your personal data. The legal notice provides the relevant contact details and additional information. You may also send privacy-related queries to our data protection officer.

2. Personal data collected

We collect and use the information required to operate the service, fulfil legal duties and protect the platform. This can include:

Identity details: your first name, surname and date of birth, used to confirm who you are and verify your age.
Contact details: your email address, telephone number where provided, country of residence and, if applicable, postal address.
Account and payment details: payment information, records of deposits and withdrawals, and data connected with transactions.
Technical and usage data: IP address, browser and device information, login timestamps and connection logs.
Verification material: identity documents, address evidence and other records required for KYC/AML screening when legally applicable.

We generally avoid collecting special-category data, including health information or religious beliefs, unless the law requires it or you have expressly permitted its use.

3. Where your information comes from

We may receive your information through a number of protected sources, including:

Details you submit: for example, when registering an account, changing your profile, uploading documents or contacting us.
Data gathered automatically: including cookies, server logs, analytics information and technical data created as you interact with the platform.
Data supplied by other organisations: such as payment providers supporting deposits or withdrawals, KYC/AML screening services and social login providers where you allow access.

4. Uses of personal information

Where relevant, we use personal information for defined and lawful purposes, such as:

Creating, operating and maintaining your account, together with the platform features available to you.
Handling and protecting payment activity, including deposits and withdrawals.
Offering suitable assistance and dealing with your questions, requests and reported problems.
Fulfilling legal and regulatory duties, including KYC, AML and taxation requirements.
Securing our systems and detecting or preventing fraud, misuse and attempted unauthorised access.
Improving the user experience and developing the platform’s features over time.
Sending operational updates or marketing messages where you have opted to receive them.

5. Legal grounds for processing

Performing our agreement with you or taking requested steps before an agreement is made (Article 6(1)(b) UK GDPR).
Complying with legal duties (Article 6(1)(c) UK GDPR), including anti-money-laundering requirements.
Pursuing legitimate interests (Article 6(1)(f) UK GDPR), such as protecting the platform, ensuring business continuity and delivering a dependable service.
Acting on your explicit permission (Article 6(1)(a) UK GDPR), for example for marketing or optional features.

6. Circumstances for sharing information

We disclose information only where necessary and to selected recipients or providers, including:

Banks and payment providers that process deposits or facilitate withdrawals.
Specialist providers performing KYC and AML verification.
Cloud hosting and technical suppliers working under appropriate data-processing agreements.
Analytics and security providers, using anonymised or pseudonymised data where reasonably possible.
Professional consultants, including legal and tax advisers, where compliance or legal support is required.
Courts and public authorities where disclosure is required by law or needed to bring, pursue or defend legal proceedings.

We do not sell personal data or disclose it to third parties for their separate commercial purposes.

7. Transfers of data outside the UK

Certain providers, such as hosting and analytics suppliers, may be based outside the UK or European Economic Area. For international transfers, we apply suitable protections, which may include the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, binding corporate rules or an applicable adequacy decision, so that an appropriate standard of protection is maintained.

8. Measures used to protect information

A mix of technical measures and internal procedures helps us protect your personal information:

Protected connections using current security protocols, including TLS 1.3 or a later release.
Strong encryption for sensitive data held in our systems, including AES-256 where appropriate.
Planned security checks, penetration testing and reviews conducted by independent experts.
Continuous monitoring intended to spot unusual activity and attempted security breaches.
Access rights assigned according to each team member’s responsibilities and role.
Client funds held in segregated accounts via regulated service providers.

Online services cannot eliminate every security threat, but these measures are intended to reduce reasonably predictable risks.

9. Personal data retention periods

We retain personal information only for the period necessary for the purposes described in this notice or required by law:

For as long as your account is active and our contractual relationship remains in place.
After closure, for the time required by relevant law, which may be 5–10 years for tax or regulatory records.
Where consent provides the legal basis, such as marketing, until you revoke that consent.

Once data is no longer needed, we securely delete it or convert it into anonymous information.

10. Your privacy rights

Data protection legislation provides several rights concerning your personal information, including the right to:

Find out whether we hold or use personal information about you.
Have incorrect information amended or incomplete details supplemented.
Seek erasure where there is no valid legal reason to continue keeping the information.
Ask us to restrict processing in situations allowed by applicable law.
Receive your data in a structured, commonly used, machine-readable format so it can be transferred to another provider.
Revoke consent at any time when consent is the basis for processing.
Raise a concern with the relevant data protection supervisory authority.

11. Cookies and similar technologies

Cookies and similar technologies allow the website to function, show us how visitors interact with it and guide improvements. Essential cookies operate by default, while analytics and advertising cookies are placed only with your consent. Please see our separate cookie notice for more detail.

12. Changes to this privacy notice

This notice may be revised periodically to reflect changes to law, regulation or the platform. We will publish the latest version on our website. If a change is significant, we will email you or display a notification within the platform.

13. Privacy contact details

For privacy queries, questions about this notice or requests to use your rights, contact $site_gmail or submit the website contact form. Our data protection officer will review your enquiry and seek to respond within a reasonable period.

By using Nationalfinancialinclusionprogramme, you acknowledge that you have read this notice and agree to its terms.