Privacy Policy
How we collect, use, and protect your personal information
Envy Capital, Envy Capital ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property investment platform.
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our services, you agree to the collection and use of information in accordance with this policy.
Envy Capital is the data controller responsible for your personal data. For data protection queries, contact our Data Protection Officer at:
- Email: dpo@envycapital.co.uk
- Address: [Company Address], United Kingdom
Personal Identification Information
- Full name
- Email address
- Date of birth
- Residential address
- Telephone number
- National Insurance number (for tax purposes)
- Passport or driving licence details (for identity verification)
Financial Information
- Bank account details
- Payment card information (processed securely by third-party payment processors)
- Investment history and portfolio information
- Source of funds information
- Tax status and UTR number
Technical Information
- IP address
- Browser type and version
- Device information
- Operating system
- Usage data and analytics
- Cookies and similar tracking technologies
Communication Data
- Email correspondence
- Support ticket information
- Survey responses
- Feedback and reviews
We process your personal data for the following purposes:
Service Provision (Contract Performance)
- Creating and managing your account
- Processing investments and transactions
- Distributing rental income and returns
- Providing customer support
- Managing your investment portfolio
Legal Obligations
- Identity verification and Know Your Customer (KYC) checks
- Anti-money laundering (AML) compliance
- Tax reporting and compliance
- Compliance with financial regulations
- Prevention of fraud and financial crime
Legitimate Interests
- Improving our services and platform
- Conducting data analysis and research
- Sending service-related communications
- Protecting against security threats
- Business operations and administration
Consent
- Marketing communications (you can opt-out at any time)
- Non-essential cookies
- Processing sensitive personal data where required
We may share your personal data with:
- Service Providers: Third parties who provide services on our behalf (payment processors, identity verification, cloud hosting, email services)
- Financial Institutions: Banks and payment providers for transaction processing
- Property Managers: Companies managing properties in which you invest
- Legal and Regulatory Authorities: When required by law or to comply with legal obligations
- Professional Advisers: Lawyers, accountants, and auditors
- Prospective Buyers: In the event of a business sale or merger
We ensure that all third parties respect the security of your personal data and treat it in accordance with the law. We do not sell your personal data to third parties.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:
- SSL/TLS encryption for data transmission
- Encryption of data at rest
- Regular security assessments and penetration testing
- Access controls and authentication mechanisms
- Employee training on data protection
- Incident response and disaster recovery procedures
However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Active accounts: For the duration of your account plus 7 years (for tax and regulatory purposes)
- Closed accounts: 7 years from account closure (to comply with financial regulations)
- Marketing data: Until you opt-out or 3 years of inactivity
- Transaction records: 7 years (as required by law)
You have the following rights regarding your personal data:
- Right to Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your data (subject to legal obligations)
- Right to Restrict Processing: Request limitation on how we use your data
- Right to Data Portability: Request transfer of your data to another service
- Right to Object: Object to processing based on legitimate interests or for marketing
- Rights Related to Automated Decision-Making: Challenge automated decisions and request human intervention
To exercise any of these rights, contact us at privacy@envycapital.co.uk. We will respond within one month.
We use cookies and similar tracking technologies to enhance your experience. Cookies are small data files stored on your device.
Essential Cookies: Necessary for the platform to function (cannot be disabled)
Performance Cookies: Help us understand how you use our platform to improve it
Functional Cookies: Remember your preferences and choices
Marketing Cookies: Track your activity to show relevant advertisements (requires consent)
You can manage your cookie preferences through your browser settings or our cookie consent tool.
Some of our service providers are based outside the UK and European Economic Area (EEA). Where we transfer personal data outside these regions, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO) and adequacy decisions.
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us immediately.
We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a prominent notice on our platform. The "Last Updated" date at the bottom of this page indicates when the policy was last revised.
If you have concerns about how we handle your personal data, please contact us first at privacy@envycapital.co.uk. We will investigate and respond to your complaint.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
- Website: www.ico.org.uk
- Telephone: 0303 123 1113
- Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: privacy@envycapital.co.uk
- Data Protection Officer: dpo@envycapital.co.uk
- Company: Envy Capital
- Address: [Company Address], United Kingdom