Privacy policy

Last updated: 12 March 2024

1. Data controller

Swedencapital Ltd, registered at 174 Kirkdale, London, England, SE26 4NW, is the controller of your personal data. You can contact us at support@swedencapital.org or our data protection officer at support@swedencapital.org.

2. What data we collect

When you register and use the service we process:

• Identification data: name, username and email address.
• Contact data: phone and country.
• Credentials: your password, stored solely as a bcrypt hash, never in plain text.
• Transaction data: balance, transfers, deposits, withdrawals, fees and references.
• Destination account data: what you enter when requesting a withdrawal.
• Technical session data: session identifier, IP address and browser user agent.
• Verification documents, if we request them to meet legal obligations.

3. Why we use it and on what legal basis

• Providing the service (creating your account, executing operations, showing your history). Basis: performance of the contract.
• Security and fraud prevention (access control, misuse detection). Basis: legitimate interest.
• Regulatory compliance (customer identification, accounting and anti-money laundering records). Basis: legal obligation.
• User support (answering your queries and complaints). Basis: performance of the contract.

We do not use your data for advertising and we do not build commercial profiles. We make no automated decisions with legal effects on you.

4. Cookies

We use a session cookie that is essential to keep you signed in while you browse, and a technical cookie to remember your chosen language. We do not use third-party analytics or advertising cookies. Being strictly necessary, they do not require prior consent.

5. Who we share it with

We do not sell your data. We only disclose it to:

• Infrastructure providers (hosting and email): [PROVIDER LIST], acting as processors.
• Payment providers needed to process deposits and withdrawals: [PROVIDER LIST].
• Competent authorities, where a legal obligation exists.

6. International transfers

[STATE WHETHER DATA IS TRANSFERRED OUTSIDE THE EEA AND WHAT SAFEGUARDS APPLY].

7. How long we keep it

• Account data: while the account is active.
• Transaction records: 5 years from each operation, due to accounting and anti-money laundering obligations.
• Session data: deleted when the session expires.

After those periods, data is deleted or irreversibly anonymised.

8. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent where processing is based on it. Some data cannot be erased while a legal obligation to retain it remains, such as transaction records.

To exercise them, write to support@swedencapital.org. If you believe we have not handled your request properly, you may complain to [SUPERVISORY AUTHORITY].

9. Security

We apply technical and organisational measures to protect your data.

10. Changes to this policy

If we change this policy we will notify you through the contact details you have given us and update the revision date.