Privacy Policy
This policy explains what personal data Senerum collects, why, on what legal basis, who receives it, how long we keep it and the rights you hold over it, written to meet the UK GDPR and the Data Protection Act 2018 in language you can act on.
1. Definitions
In this policy, "Senerum", "we" and "us" mean the Senerum platform; "you" and "user" mean a visitor, registered user or client. "Personal data" means information relating to an identified or identifiable living individual, and "processing" anything done with it, from collection to deletion. Senerum is the data controller for personal data processed through this site.
2. Personal data we collect
When you register we ask for your full name, email address and telephone number. When you complete identity verification we also process your date of birth, address, identity document details and, where required, a selfie or liveness capture. If you contact support, we keep the content of your request and our replies; if you become a client, we process transaction records, statements and your account settings. We collect only what the purpose needs, and you can browse the public pages without giving us any personal data at all.
3. Usage data
Our servers receive technical data when you visit: IP address, browser type, device type, approximate location derived from the IP, pages requested and referring page. This data keeps the service secure, helps diagnose faults and supports aggregated, non-identifying statistics. It is retained in identifiable form only as long as needed for those purposes.
4. Cookies
We use a small number of strictly necessary cookies to keep your session working and your login secure. Analytics cookies are set only where you have consented. You can refuse or delete cookies in your browser settings; the site continues to work, though remembering your session may not. We do not use advertising cookies or sell cookie-derived audiences.
5. Controller and processors
Senerum is the controller of the personal data described here. Where third parties handle data on our instructions, KYC document-checking providers, hosting and IT providers, email delivery providers, they act as processors under written contracts imposing the same protection standards. Processors use data only for the service we engaged them to deliver, never for their own purposes.
6. Purposes of processing and legal bases
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Creating and running your account | Performance of a contract |
| Identity verification and AML checks | Legal obligation |
| Answering enquiries and supporting you | Performance of a contract; legitimate interest |
| Keeping the platform secure and preventing fraud | Legitimate interest; legal obligation |
| Aggregated statistics and service improvement | Legitimate interest |
| Marketing messages, where you opted in | Consent |
You may withdraw marketing consent at any time via the unsubscribe link or by writing to us; withdrawal does not affect messages we must send about your account.
7. Data retention
Account data is kept while your account is open. Identity-verification records are retained for the period required by UK anti-money-laundering rules after the relationship ends. Support correspondence is kept for up to three years, and identifiable usage data only as long as its purpose requires. After each period, data is securely deleted or irreversibly anonymised.
8. Data transfers
Data is processed principally in the United Kingdom and the European Economic Area. Where a provider operates elsewhere, transfers rely on UK international-transfer mechanisms such as the International Data Transfer Agreement or adequacy regulations, with the same contractual protections. A current list of destinations is available on request.
9. Disclosure to third parties
We share personal data only with the processors described above, with regulators and public authorities where the law requires disclosure, and with professional advisers under confidentiality. Where trading services are delivered by a licensed third party, the data needed to provide them is shared with that provider under this policy. We never sell your data or share it for third-party advertising.
10. Security
Data is protected by encryption in transit and at rest, role-based access control, audit logging and continuous monitoring. Payment card details are handled by the payment providers and never stored on our systems; full detail is on the Security page. No system is perfectly secure, but we design ours on the assumption that attempts will be made.
11. Your rights
Under the UK GDPR you have the right to access your data, have inaccuracies corrected, have data erased where no longer necessary, restrict processing, object to processing based on legitimate interests or direct marketing, and receive your data in a portable format. Where processing rests on consent, you may withdraw it at any time, and you have the right to complain to the Information Commissioner's Office (ICO). Requests are free of charge in normal circumstances and answered within one month, extendable by two for complex cases, of which we would tell you within the first month.
12. Service providers
We keep the list of processors deliberately short: identity-verification providers, hosting and infrastructure, email delivery and payment processors. Each is bound by contract to process data only on our instructions, secure it, and delete or return it when the service ends.
13. Analytics
Where analytics run, they produce aggregated statistics: which pages are read, which forms are abandoned, which browsers need support. Aggregates cannot reasonably identify you, and we do not build individual advertising profiles.
14. Third-party links and children
Our pages occasionally link to external sites, such as payment providers or public bodies. Once you leave senerum.co.uk, this policy no longer applies; check the policy of the site you are on. The service is not directed at persons under 18, and we do not knowingly collect data from children; if you believe a minor has registered, contact us and we will delete the data.
15. Changes and contact
We may update this policy as the service or the law changes. Material changes are announced on the platform before taking effect, and the current version is always shown here. Questions and data-subject requests go to [email protected], handled by the Client Support and Compliance Team, Monday to Friday, 08:00–18:00 (GMT/BST, excluding public holidays), or by post to Canary Wharf financial district, London, United Kingdom.