Privacy Policy
This policy explains what personal data Bryzenta collects, why we collect it, how it is protected, who receives it and the rights you hold over it. It is written to be read, not filed: if any section leaves you unsure, write to us and we will answer in the same plain style.
Definitions
"Personal data" means information relating to an identified or identifiable person: your name, contact details, documents and usage history. "Processing" covers anything done with that data, from storing to analysing. The "controller" (Bryzenta) decides why and how data is processed; "processors" act on our instructions under contract.
Personal data we collect
We collect the data you give us when registering or using the service: first name, last name, email address and telephone number. If you contact support, we keep the content of your request and our reply. If verification applies to you, we process the identity documents described in our AML / KYC policy. Payment processing data (such as card verification outcomes) is collected to operate deposits and withdrawals.
Usage data
When you use the site we receive technical data: pages visited, approximate location derived from your IP address, device and browser type, and times of visits. This tells us whether the site works and which pages deserve attention. Usage data is aggregated for analysis and is not used to build advertising profiles.
Cookies
The site uses a small number of cookies and similar technologies: strictly necessary ones that keep your session working and remember your choices, and, where enabled, analytics ones that count visits. You can refuse or delete cookies in your browser settings; the strictly necessary ones are required for the site to function, such as keeping you signed in securely.
Controller and processors
Bryzenta, at One St Peter's Square, Manchester M2 3DE, United Kingdom, is the controller of your personal data. Processors, including our IT and verification providers, act only on our documented instructions, under contracts that require the same protection we apply ourselves. We remain responsible for what processors do on our behalf.
Purposes and lawful bases of processing
We process your data to respond to enquiries and provide the service (contract); to meet identity-verification, anti-money-laundering and record-keeping obligations (legal obligation); to keep the platform secure and prevent fraud (legitimate interests); and to send marketing about our own services only with your consent (consent). Where we rely on legitimate interests, we have weighed them against your rights and limited the processing accordingly.
Retention periods
Registration and account data is kept while your account is active and for a reasonable period after closure, in case of later queries. Verification records are kept for the period required by law, which is typically several years. Support correspondence is kept for up to three years. Usage analytics are kept in aggregated form only. When retention ends, data is deleted or anonymised.
Recipients of data
Your data may be shared, only as needed, with: identity-verification providers checking your documents; IT providers hosting and securing the systems; payment processors handling deposits and withdrawals; affiliated companies involved in delivering the service; and regulators or courts where disclosure is legally required. Data is never sold, and never shared for third-party advertising.
International transfers
Some providers operate outside the United Kingdom. Where data reaches them, transfers rely on adequacy regulations or, where none apply, standard contractual clauses and supplementary safeguards. A list of the categories of countries involved is available on request.
Disclosure
Beyond the recipients above, we disclose personal data only where law requires it, such as to a competent authority, or where necessary to establish or defend legal claims. We do not disclose your data in response to informal requests.
Security
Data is encrypted in transit and at rest, access is restricted to staff who need it for their role, and access is logged and reviewed. The measures and their limits are described on our Security page. No system is perfectly secure, so we combine protection with detection and a published incident procedure.
Your rights
You have the right to access the data we hold about you; to have inaccurate data corrected; to have data erased where no longer needed (subject to legal retention); to restrict processing while a dispute is resolved; to object to processing based on legitimate interests; to withdraw consent for marketing at any time; and to receive your data in a portable format. To exercise any right, write to [email protected]; we respond within one month and never charge for the first copy.
Providers and analytics
Analytics on this site counts visits and page performance to improve it. We do not run third-party advertising trackers. If the SEO team later enables an analytics service, this page and the cookie approach will be updated to say so before it happens.
Children
The service is intended for adults. We do not knowingly collect data from anyone under eighteen, and accounts are opened only after an adult identity is verified. If you believe a child's data has reached us, write to the address below and we will delete it.
Changes to this policy
We may update this policy as our services or obligations change. The current version always lives on this page, and material changes are announced to registered clients before they take effect. The date of the version you relied on is available on request.
Contact us
Questions, requests and complaints about privacy go to [email protected], handled by the Client Support & Compliance team during Monday to Friday, 9:00–17:30 GMT/BST (excluding public holidays). If you are unhappy with our answer, you also have the right to complain to the UK Information Commissioner's Office, and we will tell you how.