Privacy Policy

We (referred to as “We”, “Us”, or “Our”) are committed to protecting your personal data and safeguarding your privacy.

This Privacy Policy sets out how we collect and store the information you provide via Whitehall Bitnova (the “website”).

We are committed to upholding these principles:

• To ensure transparency about how we collect and process your personal information:

We want you to be able to make informed decisions about how your personal data is used and processed. That's why we've created this official website. We use a range of methods and procedures to provide relevant information about the use of personal data and explain how it works.

If we determine you need specific details, we'll provide them to you at the appropriate date and time.

We are happy to answer any questions and provide clarification on any limitations imposed by law. You can reach us via email at: info@whitehall-bitnova.com

• Personal data will be used solely for the purposes set out in this policy.

Personal Data may be processed by Us for various purposes, including providing the website and connecting you with third-party trading platforms (the 'Services'); improving the site; protecting our rights and interests; facilitating the maintenance and provision of the services; complying with legal or regulatory obligations; and undertaking administrative and business activities to support the delivery and use of the services.

We also process personal data to better understand your preferences and needs.

• To access key tools for protecting your personal data rights:

To help you exercise your rights, we have dedicated resources in place. Contact Us at any time to request access to your personal data. We can modify or delete it, stop using it for certain purposes or altogether, and transfer your information to you or to an outside party. We will accommodate your requests.

• Protect your personal data:

Although we can’t guarantee the absolute security of your personal data, we will continue to apply a range of measures and safeguards to help keep it protected.

Our privacy and security policy is comprehensive.

1. The Scope?

This policy outlines the types of personal information the company collects from natural persons and explains how it is processed, shared with third parties, secured, and otherwise managed.

This Policy covers information relating to an identified or identifiable natural person. An identifiable natural person is someone who can be identified directly, or indirectly through other information we hold or can access.

This Policy defines “processing” as any activity that involves the use or collection of personal data. It includes the management, structuring, and storage of personal data.

Our services, including our official website, are intended for a general audience and are not designed for individuals under 18 years of age. We do not knowingly collect information from anyone under 18 or permit them to use our services. If we become aware that we hold any information about a child, we will delete it as soon as reasonably practicable.

2. What personal information do we hold about you?

When you access our services and channels, or visit our official website, we may collect personal data. This may include information you provide directly, data gathered by analysing how you use our services and channels, and information we receive from our third-party partners.

3. You are not required to disclose personal information to the company, and there are no consequences for choosing not to.

You aren't obliged to provide us with any personal data. However, in some circumstances, choosing not to do so may limit our ability to provide certain services or limit user access to the website.

4. What types of personal information do we collect? When you visit our website, we collect the following personal information:

This includes details from your online activity log, traffic data (such as IP address and the date and time of access), the language you use, software crash logs, the type of browser, and information about the device you use. This information is not personal and cannot be used to identify you.

Personal Data We receive from you: Any personal data you choose to provide to Us when you connect to a third-party online trading platform through Us.

Personal information you provide directly to third-party platforms to facilitate trading includes your full name, address, phone number and email address.

5. Legal basis and purposes for processing personal data

The company processes your personal data for the purposes set out in this section and in accordance with the applicable legal basis.

Without a lawful basis, the company cannot use your personal data. The legal grounds on which the company may process your personal data are:

• You have provided your consent for us to process your personal data for one or more purposes. This includes when you submit personal information through the website so we can transfer it to a third-party trading platform.
• The Company or a third party may require Processing to pursue their legitimate interests, for example to improve our services or to defend against legal claims.
• Processing is necessary to comply with a legal obligation.

Please contact us by email for further details about the processing required to protect legitimate interests.

Below is a list of the reasons and legal bases on which we may use the personal data you provide to us.

6. Transfer of Personal Data to Third Parties

The company may also share personal data with third-party companies that provide services to us, including hosting and storage, processing IP address information, and analysing user experiences.

You may also request that we share specific personal data about you with third-party trading platforms. In these cases, we will provide the personal data you have given us to those third-party platforms. Their use of your personal data is governed by their own privacy policies. Your personal data may be shared with multiple trading platforms.

The Company may share personal data with affiliated entities or trusted business partners. This enables the Company to access the resources needed to enhance and improve the products and services it offers to its customers.

Where necessary to protect the rights of third parties or assets, the Company may disclose personal data to regulatory, local, or other official authorities.

We may also share your personal data with potential investors or buyers, or with lenders to the company or any other company within the group, if such a transaction occurs (including the transfer or sale of assets belonging to the company or any other group company), or as part of any merger, restructuring, consolidation, or bankruptcy of the company or any other business within the group.

7. Cookies and third-party services

We may use third-party services, including advertisers on our website and analytics companies. These partners may also use cookies or similar tracking technologies.

Cookies are small text files stored on your device when you visit or access our official website. We use cookies to collect information about your preferences and browsing behaviour to enhance your experience, remember your settings, and customise the products and services you may find relevant. Cookies are also used for statistical and analytics purposes.

Some of the cookies we use are session cookies. These are stored on your device temporarily and expire when you close your browser. Others are persistent cookies, which remain on your device for a set period after you close your browser. They help the website recognise you as a returning user and make it easier to return to the website.

Types of cookies:

Depending on their purpose, we may use them as follows:

Cookies are blocked or have been removed.

To block or delete cookies, change your browser's settings. Below are links to instructions for several popular browsers.

• firefox
• Microsoft Edge
• Google Chrome
• safari

However, please note that some or all of the website's features may not work as expected if this occurs.

ONLINE TRACKING NOTICE

The Company will retain your personal data for as long as needed to fulfil the purposes described in this policy, or for longer where permitted or required by applicable laws, regulations, policies, or orders.

We will share your information with third-party trading platforms for 12 months. If you consent, we will continue sharing your data for a further 12 months.

We routinely review the Personal Data we hold to determine whether it is still required.

9. Transfers of personal information to overseas jurisdictions or international organisations

Your personal information may be transferred to other countries (that is, to a third country other than the one in which you reside) or to international organisations or jurisdictions. The Company takes all necessary steps to protect the personal data you provide and ensures that users can exercise their rights and access effective legal remedies.

These protections and safeguards are available to all residents of the EEA (European Economic Area).

• Transfer to a third country or an international organisation that the European Commission has determined provides an adequate level of protection for personal data transferred to it, in accordance with Article 45(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”).
• The transfer is made pursuant to a legally binding and enforceable agreement between public entities or authorities under Article 46(2)(a).
• The transfer was carried out in line with the standard data protection clauses adopted by the European Commission under Article 46(2)(c) of the GDPR. You can view the Commission’s adopted clauses on its official website at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

The Company can provide details of the security measures it uses to protect your personal data when it is transferred to third countries or international organisations. Please email info@wealthwaydigital.uk.

10. Personal Data Security

We have implemented appropriate organisational and technical measures to protect personal data, including safeguards to prevent accidental or unlawful destruction, loss, or alteration.

We cannot guarantee or warrant the error-free security of your personal data. We are not liable for any intangible, incidental, or consequential loss or damage arising from the use or disclosure of personal data. This includes, without limitation, disclosures caused by transmission errors, unauthorised third-party access, or any other circumstances beyond our control.

Where we are required by law or by other obligations outside our control, we may need to disclose your personal data to third parties, including public authorities. In such circumstances, we cannot control or guarantee the security measures those third parties apply to your personal data.

Transmitting personal data over the internet is not completely secure. The Company cannot guarantee the security of any personal data you send to us online.

11. Hyperlinks to third-party websites

Links to third-party websites and apps may be provided on this official website. These third-party services are not under the company’s control. We are not responsible for how they collect or process your personal information. This Policy does not apply to activities carried out on those sites or apps.

When visiting any third-party websites or apps, we recommend that you read their privacy policies before deciding whether to access or use their services or to provide any personal data to them.

12. Changes to this Policy

This policy may be updated at any time. If we make changes, we will notify you by posting the updated version on our official website. Where changes are significant, we will also seek to inform you through other appropriate channels and will publish a notice on our website. Unless stated otherwise, amendments take effect from the date the revised policy is published.

13. Your rights in relation to your personal information

You are entitled to ask us to verify the accuracy of the personal data we collect about you, correct any errors, and delete any personal data not required by us. You may also restrict certain types of processing of your personal information.

If you are an EEA resident, please visit this page:

You have rights over the personal information you provide. To exercise these rights, please email the address below.

Access rights

The Company can verify the accuracy of the personal data being processed about you. Once verified, you may access your personal data.

The Company will provide an electronic copy of the personal data it is currently processing and may charge a reasonable fee for any additional copies. Upon request, the data will be made available electronically.

Your right to access personal data must not infringe the rights and freedoms of others. If an access request would adversely affect another person’s rights or freedoms, the company may refuse to comply or limit the scope of its response.

Right to rectification

The Company is authorised to correct inaccurate personal data. You have the right to request that any incomplete personal data relating to you be corrected, taking into account the purpose of processing.

Right to Erasure

The following reasons apply: (a) Personal data are no longer required for the purpose for which they were collected or processed; (b) You withdraw your consent and there is no other legal basis for processing; (c) You object at any time, on grounds relating to your particular situation, to the processing of your personal data based on legitimate interests pursued by us or by a third party; (e) Personal data have been unlawfully processed; or (f) Personal data must be deleted to comply with the company's legal obligations.

This right does not apply if processing is necessary (a) to comply with a legal obligation under European Union or Member State law; or (b) to establish, exercise, or defend legal rights.

Processing restrictions

If you are concerned about the accuracy of your personal data, you may ask the company to restrict its processing.

If you request that your personal data be restricted, it may only be retained with your consent, to establish, exercise or defend legal claims, to protect the rights of another natural person, or where doing so serves a significant public interest within the European Union or a member state.

Right to Data Portability

If processing is carried out by automated means and is based on your consent or a contract to which you are a party, you have the legal right to access and review the personal data you have provided to the company.

You are entitled to request that the company transfer your personal data directly to another controller, where technically feasible. Exercising your right to data portability does not affect your rights under the right to erasure. This right must not prejudice the rights or freedoms of others.

Right to challenge

You may object at any time to the processing of your personal data based on the legitimate interests of the company or a third party. This includes profiling carried out on the basis of those interests. If we can demonstrate compelling legitimate grounds for processing that override your rights, freedoms or interests, or where processing is necessary for the establishment, exercise or defence of legal rights, we may continue to process your personal data.

In relation to direct marketing, you have the right to object at any time to the processing of your personal data.

Your right to refuse consent

You may withdraw your consent to our processing of your personal data at any time. This will not affect the lawfulness of any processing carried out on the basis of your consent before it was withdrawn.

You have the right to lodge a complaint with the relevant supervisory authority.

You may lodge an appeal with a supervisory authority established by a Member State to protect individuals’ fundamental rights in relation to the processing of personal data in the European Union.

Laws of the European Union and its Member States may restrict your rights concerning your personal data, as outlined in Section 13.

We will provide the information you have requested under section 13 of this agreement within one month of receiving your request. If necessary, we may extend this timeframe by up to two months, depending on the nature of the request and the volume of requests. Within one month of receipt, we'll advise you of any extension and the reasons for it.

Subject to section 13 of the law, information you request under your rights in section 13 will be provided free of charge. If a request is unfounded or excessive, particularly if it is repeated, we may charge a reasonable fee to cover administrative costs of providing the information or taking the requested action, or we may decline to act.

If we have any doubts about the identity of the person making the request, the company may request additional information to verify your identity.