Privacy Policy

01Data Controller & Overview

This Privacy Policy explains how John Investments Limited (“John Investments”, “we”, “us”) collects, processes, discloses and protects personal data in connection with this website (johninvest.ltd) and related communications.

The data controller for the purposes of the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the EU General Data Protection Regulation (GDPR) is:

02Scope

This policy applies to the processing of personal data of website visitors, individuals who contact us through our forms or by email, and the institutional counterparties and asset holders who engage with us. It does not apply to external websites we merely link to.

03Personal Data We Process

Depending on how you interact with us, we process the following categories of personal data:

Identity and contact data

Name, company or institution name, role, email address, telephone number and the content of your correspondence.

Submission and transaction data

Details of assets, securities, claims or portfolios you submit for review (e.g. issuer, ISIN/identifier, category, jurisdiction, status, size) and related documentation.

Compliance data

Where required to engage, information and evidence collected under due-diligence (AML/KYC) obligations, including identity and source-of-funds verification.

Technical usage data

IP address, approximate country of origin, browser and device information, access times and website interaction data.

04Purposes of Processing

• responding to and handling inquiries, submissions and correspondence;
• structured evaluation of submitted assets and matching to suitable counterparties;
• meeting legal, regulatory and contractual obligations (including anti-money-laundering);
• operating, securing, stabilising and improving the website;
• maintaining internal records and establishing, exercising or defending legal claims.

05Legal Bases

We process personal data on the following legal bases (Art. 6 UK GDPR / GDPR):

• Legitimate interests – operating and managing our business, communicating with prospective counterparties and securing the website, where not overridden by your rights;
• Performance of a contract or pre-contractual steps – where you request to engage with us;
• Legal obligation – in particular AML/KYC and record-keeping requirements;
• Consent – for non-essential technologies or where expressly given; consent may be withdrawn at any time with effect for the future.

06Cookies & Local Storage

Our website uses strictly necessary cookies and similar technologies (for example, local storage for your language choice and your cookie decision). Full details and how to control them are set out in our Cookie Policy.

07Recipients & Processors

We do not sell personal data. We share data only where necessary, with:

• hosting and infrastructure providers supporting the website and our systems;
• ipapi.co to approximate your country from your IP address for automatic language selection;
• our customer and inquiry management system (CRM) to process form submissions;
• professional advisors (legal, compliance, audit) and competent authorities where required by law.

Processors are contractually bound to confidentiality and to comply with applicable data-protection law.

08International Data Transfers

Where personal data is processed outside the United Kingdom or the European Economic Area, we put appropriate safeguards in place – such as adequacy decisions, Standard Contractual Clauses (SCCs) or the UK International Data Transfer Addendum.

09Data Retention

We retain personal data only for as long as necessary for the relevant purposes, or as required by legal and regulatory retention obligations (in particular AML). Thereafter it is deleted or anonymised.

10Your Rights

Subject to legal conditions and exemptions, you have the following rights under applicable data-protection law:

• access to the personal data we hold about you;
• rectification of inaccurate, or completion of incomplete, data;
• erasure (“right to be forgotten”), where applicable;
• restriction of processing and objection to processing based on legitimate interests;
• data portability and withdrawal of any consent given.

To exercise your rights, contact us at privacy@johninvest.ltd. You also have the right to lodge a complaint with a competent supervisory authority – in the UK, the Information Commissioner’s Office (ICO); in the EU, your local data-protection authority.

11Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12Minors

Our website and services are directed at professional and institutional market participants, not at minors. We do not knowingly collect personal data from anyone under 18 years of age.

13Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical or business developments. The current version is published on this page with a revised date.

14Contact

For privacy-related requests, reach us through our contact form or at: