Privacy Policy
Last update: 19.05.2026
We (also known as "We", "Us", or "Our") are committed to protecting your personal data and privacy.
This Privacy Policy explains how we collect and store information you provide through Graven Creditvale (the "Website").
We uphold these principles:
To be transparent about how we process and collect your personal information:
We want you to make informed decisions about how your Personal Data is used and processed. That's why we created this website. We use various methods to give you clear information about Personal Data handling.
If we think you need specific details, we'll provide them at the right time.
We're happy to answer your questions and explain anything about legal limitations affecting your data. Contact us via email: info@graven-creditvale.com
Your personal data will only be used for the purposes outlined in the Policy.
We process your personal data to provide the website and Services (which include connecting you with third-party trading platforms), improve the site, protect our rights and interests, maintain and deliver the Services, meet legal and regulatory requirements, and carry out administrative and business activities. We also use your personal data to better understand your preferences and needs.
Personal Data are also processed by us in order to better comprehend your preferences and needs.
To use important tools that protect your rights regarding your Personal Data:
To exercise your rights, we have substantial resources available. Contact us anytime to request your personal data. We can modify or delete it, stop using it for specific or general purposes, transfer it to you or a third party, and accommodate your requests.
Protect Your Personal Data:
While we cannot guarantee complete security of your personal data, we commit to using a range of methods and techniques to help protect it.
Our Privacy and Security Policy is comprehensive.
1. The Scope?
This policy describes the types of personal data we collect from individuals and how we process, share, and protect that information.
This policy covers information related to an identified or identifiable natural person. An identifiable person is someone who can be directly identified or recognised through a combination of information we hold or can access.
We define "processing" as any activity involving the use or collection of personal data, including management, structuring, and storage.
Our services are intended for general audiences and are not designed for anyone under 18 years old. We do not knowingly collect information from minors or allow them to use our services. If we become aware of any information about children, we will delete it promptly.
2. What Personal Data Do We Have About You?
When you access our services and channels or visit our website, we collect your Personal Data. We may ask for your Personal Data directly in some cases, or we may gather it by analysing how you use our Services and channels, or by receiving information from our third-party partners.
You're not required to disclose personal information to the company, and there are no consequences for doing so.
You aren't obliged to provide us with any personal data. However, in certain circumstances, if you choose not to supply personal data, we may be unable to offer our Services or allow you to access the website.
4. What Personal Data Do We Collect? When you visit our website, we collect the following personal information about you:
This includes information about your online activity log, data about your traffic (including IP address, date of access, time of access, and browser type), the language you used, software crash logs, and details about your device. This information is not personally identifiable and cannot be used to identify you.
Personal Data We Receive From You: any personal information you choose to provide when you connect with a third-party online trading platform through us.
Personal Information You Provide to Third-Party Platforms: this information includes your full name, address, phone number, and email address to facilitate trading.
5. Legal Basis and Reasons for Processing Your Personal Data
Your Personal Data is processed by the company for the purposes outlined in this section and in accordance with the applicable legal basis.
The company cannot process your Personal Data without a legal basis. The legal grounds that allow the company to process your Personal Data are:
- You've consented to your Personal Data being processed for one or more purposes. This applies when you submit personal information through our Website so we can transfer it to a third-party trading platform.
- The Company or a third party may need to process your data to pursue legitimate interests, such as improving Our Services or defending legal claims.
- Processing must meet an obligation of law.
Contact us by email for more information about the processing required to protect legitimate interests.
Below is a list of reasons and legal grounds we may use your information for. Personal Data.
Scope
Legal Basis
To share your personal information with third parties when you request access to digital trading
If you ask us, we may collect Personal Data from you to forward it to third-party companies.
You've consented to us processing your Personal Data for one or more of the reasons outlined.
To answer your requests, questions or concerns
We need your Personal Data to help address any questions you may have about our Services.
We need to process personal data to protect the legitimate interests of the Company or a third party.
We process your Personal Data to comply with legal, administrative, and judicial obligations.
To meet our legal obligations, we need to process your information.
4. To enhance Our Services
We may use your Personal Data to improve Our Services, including crash reports and malfunction data we collect relating to the Services.
The Company or a third party has a legitimate interest that requires the processing of your data.
5. To prevent fraud and misuse of Our Services
The Company or a third party may need to process personal information to pursue legitimate business interests.
6. To perform and manage actions aligned with Our Services requirements
This includes back-office functions, business development, strategic decision-making, oversight mechanisms, and related activities.
The Company or a third party has a legitimate interest that requires the processing of your data.
7. To conduct analysis, such as statistical analysis
To make decisions on various matters, we use different analytical techniques, including statistical methods.
The Company or a third party's legitimate interests require processing of your personal information.
To protect our assets, rights and interests, as well as those of third parties, we have established processes to pursue and defend legal claims.
We may process your Personal Data to safeguard our rights, interests and assets, or those of third parties, in accordance with applicable laws, regulations, agreements and our terms and policies.
The Company or a third party has a legitimate interest that requires the processing of your data.
6. Sharing Your Personal Data with Third Parties
The Company may share your Personal Data with third-party service providers, such as hosting and storage providers, as well as for IP address information and analysis of user experiences.
You can request that we share specific Personal Data about you with third-party trading platforms. We will provide your Personal Data to these trading platforms in accordance with their privacy policies. Please note that your Personal Data may be shared with multiple trading platforms.
The Company may also share Personal Data with affiliated entities or business partners to help us enhance and improve our products and services.
The Company may disclose Personal Data to regulatory, local, or other official authorities if required to protect the rights of third parties or safeguard assets.
We may additionally share Personal Data about you with potential investors, buyers, lenders, or other companies within our group in connection with a transaction (including the transfer or sale of Company assets or group company assets), merger, restructuring, consolidation, or bankruptcy.
7. Third-party cookies and services
Third-party services, such as advertising and analytics companies, may be used on our website. These companies may also use cookies or similar technologies.
Cookies are small text files stored on your device each time you visit our website. We use cookies to understand your preferences and browsing behaviour, improve your experience, remember your settings, and personalise the products and services we offer. Cookies also help us gather statistics and analytics data.
Some cookies we use are session cookies. These are temporary files downloaded to your device and deleted when you close your browser. Other cookies are persistent. Persistent cookies remain on your device for a set period after you close your browser. We use them to recognise you as a returning user and make it easier for you to return to the website.
Types of Cookies:
We may use them based on their intended purpose.
The type of cookie
Cookies are essential for this site to work properly
Scope
These cookies are essential for accessing the features you've requested and navigating our website. We use them to deliver the information, products, and services you've asked for.
They're required for your device to download and stream data, allowing you to move through the website, use its features, and return to pages you've visited before.
Additional Information
Cookies collect Personal Data, such as your username and last login date, to confirm you're logged in to the site. They're automatically deleted when you close your web browser (session Cookies).
The type of cookie
Functionality Cookies
Scope
Cookies help us recognise you when you visit our site and remember your preferences.
Additional Information
Cookies collect Personal Data, such as your username and last login date, to confirm you're logged in to the site. They're automatically deleted when you close your web browser (session cookies).
The type of cookie
Cookies for performance
Scope
We use cookies to gather statistical data on site performance and to help improve your experience. They also enable us to analyse how our website is being used.
Additional Information
Cookies store anonymous data that isn't linked to any identifiable person. They can be removed when you close your browser, while other cookies remain valid indefinitely.
Cookies are blocked or removed
To block or remove cookies, adjust your browser settings. Below are links to help you through the process for some of the most popular browsers.
- Firefox
- Microsoft Edge
- Google Chrome
- Safari
However, be aware that certain features or the entire Website may not work as expected if this occurs.
ONLINE TRACKING NOTICE
This service does not currently support do-not-track signals.
8. Retention of your personal data
The Company will retain your Personal Data for as long as necessary to fulfill the purposes outlined in this Policy, or for longer periods as permitted by applicable law, regulations, and orders.
We'll share your information with third-party trading platforms for a period of 12 months. If you consent to this, we will continue sharing your data for a further 12 months.
We regularly review retained Personal Data to ensure it remains necessary.
Transfers of personal information to third-party countries or international organisations
Your personal information may be transferred to other countries—meaning your data could be sent to a third country (a jurisdiction outside where you currently reside) or to international organisations. The Company takes all necessary steps to protect your personal data and ensures that data subjects can exercise their rights and access effective legal remedies.
These protections and safeguards are available to all residents of the EEA (European Economic Area).
- Transfer to a third country or international organisation that the EU Commission has determined provides adequate protection for Personal Data transferred to it under Article 45(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the "GDPR").
- The transfer is made pursuant to a legally binding and enforceable agreement between public entities or authorities under Article 46(2)(a).
- The transfer was completed in accordance with standard data protection clauses approved by the EU Commission under Article 46(2)(c) of the GDPR. You can view the EU Commission's approved clauses at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.
The Company can provide details about the security measures it uses to protect your Personal Data when transferred to third-party countries or international organisations. Contact us at info@wealthwaydigital.uk for more information.
10. Security of Your Personal Data
We've implemented appropriate organizational and technical measures to protect your Personal Data, including safeguards against accidental or unlawful destruction, loss, or alteration.
We cannot guarantee that your Personal Data will remain secure at all times. We're not responsible for any indirect, incidental, or consequential damages resulting from the use or disclosure of your Personal Data. This includes (but is not limited to) disclosure due to transmission errors, unauthorized access by third parties, or other circumstances beyond our control.
If required by law or other obligations outside our control, we may need to disclose your Personal Data to third parties, including public authorities. We cannot control how third parties secure your Personal Data in these situations.
Data transmitted over the internet cannot be guaranteed as completely secure. The Company cannot ensure the security of Personal Data you send to us through the internet.
Hyperlinks to Third-Party Websites
Links to third-party websites and applications are available on our website. These external sites and apps operate independently and are not under our control. We are not responsible for how these third parties collect or process your Personal Data. This Policy does not apply to activities conducted through such external sites or apps.
Before accessing or using any third-party website or app, we recommend reviewing their privacy policies. We also advise you to consider what Personal Data you share with them.
Modifications to this Policy
Before accessing any third-party websites or apps, we recommend reading their privacy policies. We also suggest being cautious about sharing your personal data with them.
13. Your rights regarding your personal information
You are entitled to request that we verify the accuracy of Personal Data we collect about you, correct any inaccuracies, and delete all Personal Data we no longer need. You may also limit how your personal information is processed.
If you are resident in the EEA, please refer to this page:
These rights apply to the information you provide relating to your Personal Data. To exercise these rights, you may submit a written request to the email address below.
Access rights
The Company can verify the accuracy of Personal Data being processed about you. If accurate, you may access your Personal Data.
The Company will provide an electronic copy of the Personal Data currently being processed at no charge. Additional copies may incur a reasonable fee. Data will be made available electronically upon request.
The right to access Personal Data must not conflict with the rights and freedoms of others. If the request would harm another person's rights or freedoms, the Company may refuse the request or limit how it fulfils it.
Right to rectification
You are entitled to request that inaccurate Personal Data concerning you be corrected, having regard to the purpose of the processing.
Right to erasure
The following circumstances apply: (a) Personal Data are no longer necessary for the purpose for which they were collected; (b) you withdraw consent and there is no other legal basis for processing; (c) you object at any time, based on reasons specific to your situation, to processing of Personal Data about you that is based on legitimate interests pursued by us or a third party; (d) Personal Data are processed unlawfully; or (e) Personal Data must be deleted to comply with a legal obligation.
This right does not apply if processing is necessary (a) to fulfil a legal obligation under European Union or Member State law; or (b) to establish, exercise or defend legal rights.
Processing restrictions
If you have concerns about the accuracy of your Personal Data, you may ask the Company to limit its processing.
If you request that Personal Data be restricted, it may only be retained if you give consent, or to establish, exercise or defend legal rights, or to protect the rights of another person, or for reasons of significant public interest within the European Union or a Member State.
Right to data portability
If processing is carried out by automated means and is based on your consent or a contract, you have the right to receive your Personal Data from the Company.
You are entitled to request that your Personal Data be transferred directly from the Company to another controller, if technically feasible. Exercising your right to data portability does not affect your right to erasure. The right to transfer data does not interfere with the rights or freedoms of anyone else.
Right to object
You have the right at any time to object to any processing of Personal Data about you that is based on legitimate interests pursued by the Company or a third party, including profiling based on these interests. If we can demonstrate compelling legitimate grounds for processing, we may continue unless you show that your rights, freedoms or interests outweigh ours, or the processing is necessary to establish, exercise or defend legal rights.
Regarding direct marketing, you have the right at any time to object to the processing of Personal Data about you.
Right to withdraw consent
You may withdraw your consent for us to process Personal Data about you at any time. This will not affect the lawfulness of processing that occurred before your withdrawal.
You are entitled to lodge a complaint with the supervisory authority.
You may lodge a complaint with a supervisory authority established by a Member State to protect the fundamental rights of individuals regarding Personal Data processing within the European Union.
European Union and Member State laws may limit your rights concerning Personal Data, as detailed in this section.
We will provide the requested information within one month of receiving your request, in accordance with the rights outlined in this section. This timeframe may be extended by up to two months if necessary, depending on the complexity and volume of requests. We will notify you of any extension and the reasons within one month of your request.
As long as it does not conflict with this section, the information you request will be provided free of charge. If the request is unjustified, excessive or repeated, we may charge a reasonable fee to cover administrative costs. We may also decline to act.
If we have doubts about your identity, the Company may request further information to verify it.