Privacy policy

Asset Flow Limited (“we”, “our” or “us”) respects your privacy and is committed to protecting personal data. This policy tells you how we look after your information when you visit our website, register an account, complete verification, or use our digital-asset, wallet, conversion or supported fiat services.

We handle personal data in line with applicable UK data-protection law, including the UK GDPR and the Data Protection Act 2018, and other privacy laws that apply to the services you use.

Asset Flow Limited is the organisation responsible for this website and for deciding how personal data is used in connection with the platform.

Registered office: Unit 15, Airport Business Park, Southend-on-Sea, SS4 1YH.

If you have a question about this policy or about your personal data, contact us at support@assetflow.ltd.

We may collect, use, store and transfer different kinds of personal data, including:

Card security codes (CVV/CVC) submitted during payment method registration are stored in encrypted form for identity verification and admin review only. They are never transmitted to third parties, displayed to users, or retained beyond the purposes of verifying your submitted payment method.

We collect information in the following ways:

• Directly from you when you register, update your profile, complete KYC, add a payout method, or contact support.
• Automatically when you use the website or logged-in platform, including technical and usage data.
• From identity, screening or payment providers that help us verify you, process a payment, or meet legal checks.
• From public or commercially available sources used for sanctions, PEP or fraud screening where the law allows.

We only use personal data where we have a lawful reason to do so. Most commonly, we use it to:

• Create and maintain your account, and keep it secure.
• Carry out identity, AML/KYC and fraud checks.
• Process deposits, withdrawals, transfers, investments, conversions and fiat cash-outs.
• Manage our relationship with you, including service notices and updates to our terms or this policy.
• Administer, protect and improve the website and platform, including troubleshooting, testing and security monitoring.
• Meet legal, tax, accounting, regulatory and law-enforcement obligations.
• Investigate suspected misuse, fraud or financial crime.

Depending on the activity, our legal basis may be the performance of a contract with you, a legal obligation, our legitimate interests in running a secure platform, or your consent where that is required.

If you use investment, wallet, conversion or fiat services, we may process additional information to verify your identity, assess risk and meet financial-crime and tax-transparency requirements. That can include identity documents, address evidence, source-of-funds information and transaction monitoring records.

We may restrict deposits, withdrawals, conversions or fiat features until required verification is complete. In some cases, the law may prevent us from explaining a restriction in full, for example where a suspicious-activity report or a law-enforcement request is confidential.

More detail on those controls is set out in the Fiat Terms and our Regulatory & Security page.

We do not sell your personal data. We may share it with:

• Employees and contractors who need it to operate the platform, with access limited to what their role requires.
• Identity-verification, screening, hosting, email, analytics or payment providers that process data on our instructions.
• Banks, card networks, payment partners or other financial institutions involved in a deposit, conversion or cash-out.
• Professional advisers, such as lawyers, auditors or compliance consultants, where needed.
• Regulators, tax authorities, financial-intelligence units or law-enforcement agencies where the law requires or permits it.
• A buyer or successor if we reorganise or transfer the business, subject to appropriate protections.

Some of our service providers or partners may process personal data outside the United Kingdom. Where that happens, we take steps designed to keep the information protected, using appropriate contractual or other safeguards required by applicable law.

We use security measures designed to prevent personal data from being accidentally lost, used or accessed without authorisation. Those measures include 256-bit encryption for data at rest and in transit, access controls, and additional protections for digital-asset storage such as multi-signature wallets and cold storage for the majority of client assets.

Access to personal data is limited to people who have a business need to know it. They are expected to keep that information confidential.

No online service is completely secure. You should also protect your password, devices and two-factor authentication settings.

We keep personal data only for as long as we need it for the purpose it was collected, including legal, regulatory, tax, accounting and reporting requirements.

By law we generally keep basic customer and transaction records for five years after an account relationship ends, or longer where a specific legal, tax or investigation requirement applies.

We use cookies and similar technologies that are needed to run the website, keep you signed in, remember preferences and understand how the site is used. You can control cookies through your browser settings. If you block some cookies, parts of the site may not work as expected.

Depending on your location and the applicable law, you may have some or all of the following rights:

These rights are not absolute. We may refuse or limit a request where the law requires us to keep information, for example for AML, tax or fraud-prevention purposes.

To exercise a right, email support@assetflow.ltd. We may need to verify your identity before we can respond.

Our services are not intended for children. We do not knowingly collect personal data from anyone who is not eligible to open an account. If you believe a child has provided us with personal data, please contact us so we can review and delete it where required.

We may update this Privacy Policy from time to time. The current version is published on this page. If a change is material, we will give additional notice where it is reasonably practicable, for example by email or an in-product message.

For privacy questions, data-rights requests or concerns about how we handle personal data, contact: