How personal and due-diligence data is handled

UPMC is the data controller for data collected directly through this Platform.

Data collected

Identity, contact, company, beneficial-ownership, KYC/KYB, suitability, source-of-funds, contractual, transaction, device and audit-log data may be processed.

Purposes and legal bases

Data is used for enquiries, requested news subscriptions, pre-contractual steps, contract performance, legal and AML/KYC obligations, security and legitimate operational interests; consent is used where required and may be withdrawn by contacting UPMC.

Recipients and transfers

Data may be shared on a need-to-know basis with advisers, verification providers, banks, payment providers, infrastructure processors and authorities. International transfers use legally required safeguards.

Retention and rights

Records are retained for contractual, statutory, compliance and dispute periods, then deleted or anonymised. Subject to law, individuals may request access, correction, deletion, restriction, portability or object by contacting UPMC. Material eligibility decisions are owner-reviewed, not solely automated.

Last updated: 30 July 2026. If a definitive signed agreement conflicts with this page, that agreement controls the relevant transaction.