Privacy Policy

Zephyra Financial Ltd ("Zephyra Financial", "we", "our", or "us") is committed to protecting your privacy and ensuring your personal information is handled securely and transparently.

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, contact us or use our foreign exchange and international payment services. We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and any other applicable data protection legislation.

Depending on your interaction with us, we may collect:

Identity Information

• Full name
• Job title
• Company name
• Date of birth (where required)

Contact Information

• Email address
• Telephone number
• Business or correspondence address

Financial & Business Information

• Business turnover
• Payment requirements
• Foreign exchange activity
• Bank account details where required
• Source of funds information where required for compliance

Compliance Information

To meet Anti-Money Laundering (AML), Know Your Customer (KYC) and regulatory obligations, we may collect:

• Identity verification documents
• Proof of address
• Company ownership information
• Beneficial ownership details
• Sanctions and Politically Exposed Person (PEP) screening information

Technical Information

When you visit our website we may automatically collect:

• IP address
• Browser type and version
• Device information
• Website usage statistics
• Cookies and similar technologies

Marketing Preferences

We may also collect your communication preferences and records of correspondence with us.

We use your personal information to:

• Provide foreign exchange and international payment services.
• Process enquiries and client applications.
• Verify your identity and satisfy AML/KYC requirements.
• Manage client accounts and ongoing business relationships.
• Execute and administer transactions.
• Respond to customer service requests.
• Improve our website and services.
• Send market updates and company news where you have agreed to receive marketing communications.
• Prevent fraud, financial crime and other unlawful activity.
• Comply with legal and regulatory obligations.

Under UK GDPR, we process personal data using one or more of the following lawful bases:

• Performance of a contract.
• Taking steps prior to entering into a contract.
• Compliance with legal obligations.
• Legitimate business interests.
• Your consent where required.

We never sell your personal data.

Where necessary, we may share information with:

• Liquidity providers and payment infrastructure providers.
• Banking and settlement partners.
• Identity verification and compliance providers.
• Technology and cloud service providers.
• Professional advisers including accountants, auditors and solicitors.
• Regulatory authorities including the Financial Conduct Authority (FCA), HM Revenue & Customs, the National Crime Agency or other competent authorities where legally required.

All third parties are required to process personal data securely and only for authorised purposes.

Some of our trusted service providers may process personal information outside the United Kingdom.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR. These safeguards may include:

• UK International Data Transfer Agreements (IDTAs)
• UK-approved Standard Contractual Clauses
• Transfers to countries deemed to provide an adequate level of data protection

We take appropriate technical and organisational measures to protect personal information from unauthorised access, misuse, loss, alteration or disclosure.

These measures include:

• Encrypted data transmission
• Secure cloud infrastructure
• Restricted staff access
• Regular security monitoring
• Staff confidentiality obligations

While no online system can be guaranteed to be completely secure, we continually review and improve our security controls.

We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy and to comply with legal and regulatory requirements.

Where information relates to regulated payment services, records are generally retained for a minimum of five (5) years following the end of the business relationship, unless a longer retention period is required by law.

Under UK GDPR, you may have the right to:

• Request access to your personal information.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal information where applicable.
• Request restriction of processing.
• Object to certain processing activities.
• Request transfer of your personal data to another organisation where technically feasible.
• Withdraw consent at any time where processing relies on consent.

To exercise any of these rights, please contact us using the details below.

Zephyra Financial does not make decisions about individuals solely through automated processing that produce legal or similarly significant effects without appropriate human involvement.

Our website uses cookies and similar technologies to:

• Improve website functionality.
• Analyse website traffic.
• Understand visitor behaviour.
• Enhance user experience.

You can manage or disable cookies through your browser settings. Further information can be found in our Cookie Policy.

Our website may contain links to third-party websites. Once you leave our website, we are not responsible for the privacy practices or content of external websites. We encourage you to review their privacy policies before providing personal information.

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our services or business practices.

The latest version will always be available on our website together with the date it was last updated.

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact: