Privacy Policy
Last update: 22.04.2026
We (also known as "We", "Us", or "Our") are committed to protecting your personal data and privacy.
This Privacy Policy explains how we collect and store the information you provide through the website Crag Wealthaven (the "Website").
We uphold these principles:
To be transparent about how we process and collect your personal information:
We want you to make informed decisions about how we use and process your personal data. That's why we created this website. We use various methods to keep you informed about personal data usage.
If we think you need specific information, we'll provide it at the right time.
We're happy to answer your questions and explain any legal limits on data use. You can reach us by email at: info@crag-wealthaven.com
Your personal data will only be used for the purposes outlined in this Policy.
We may process your Personal Data for various purposes, including providing the website and Services to you, connecting you with third-party trading platforms, improving the site, protecting our rights and interests, maintaining and delivering the Services, meeting regulatory and legal obligations, and conducting administrative and business activities. We also process your Personal Data to better understand your preferences and needs.
Personal Data are also processed by us in order to better comprehend your preferences and needs.
To protect your rights regarding personal data, you can use several important tools.
To help you exercise your rights, we have substantial resources available. Contact us at any time to request your Personal Data. We can modify or delete it, stop using it for specific purposes or general purposes, transfer it to you or a third party, and accommodate your requests.
Secure your Personal Data:
While we cannot guarantee absolute security of your Personal Data, we commit to employing a range of industry-standard methods and techniques to protect it.
Our Privacy and Security Policy contains full details.
1. The Scope?
This policy describes the types of Personal Data we collect from individuals and how we process, share, and protect it.
This Policy applies to information relating to an identified or identifiable natural person. An identifiable person is someone who can be directly identified or identified through a combination of additional information we hold or can access.
The Policy defines "processing" as any activity involving the use or collection of Personal Data, including management, structuring, and storage.
Our services are intended for general audiences and are not designed for anyone under 18 years old. We do not knowingly collect information from children under 18 or permit them to use our services. If we become aware of any such information, we will delete it promptly.
2. What personal Data Do We Have on You?
When you access our service, channels, or website, we collect your Personal Data. We may ask for your Personal Data directly in some cases, or gather it by analysing how you use our Services and channels, or by receiving information from our third-party partners.
You don't need to provide personal information to the company, and there are no consequences for not doing so.
However, you're not required to provide us with any personal data. In certain circumstances, if you choose not to supply personal data, we may be unable to offer our services or allow you to access the website.
4. What Personal Data Do We Collect? When you visit our website, we gather the following personal information:
This includes information about your online activity log, traffic data (including IP address, date of access, time of access, and browser type), language preferences, software crash logs, and device information. The information collected is not personally identifiable and cannot be used to identify you.
Personal Data We Receive From You: any personal data you provide at your own choice when you connect with a third-party online trading platform through us.
Personal Information You Provide to Third-Party Platforms: this information includes your full name, address, phone number, and email address to facilitate trading.
5. Legal Basis and Reasons for Processing Your Personal Data
Your Personal Data is processed by the company for the purposes outlined in this section and in accordance with the applicable legal basis.
The company cannot process your Personal Data without a legal basis. The legal grounds on which the company may process your Personal Data are:
- You have given your consent for your Personal Data to be processed for one or more purposes. This applies when you submit personal information through the Website so we can transfer it to a third-party trading platform.
- The Company or a third party may need to process your data to pursue their legitimate interests, such as improving Our Services or defending legal claims.
- Processing must meet an obligation of law.
Contact us by email for further details about the processing required to protect our legitimate interests.
Below is a list of the reasons and legal grounds on which we may use your personal data.
Scope
Legal Basis
To share your personal information with third parties when you request access to digital trading
If you ask for it, we may collect Personal Data from you to pass on to third-party companies.
You've consented to the processing of your Personal Data for one or more purposes.
2. To answer your requests, questions or concerns
We need your Personal Data to help address any questions you may have about our Services.
We need to process this information to serve the legitimate interests of the Company or a third party.
We process your personal data to comply with legal, administrative, and judicial obligations.
To ensure compliance with legal obligations, processing is required.
4. To enhance Our Services, We may use Your Personal
Data to improve and develop Our Services. This includes, among other things, crash reports and malfunction data We collect in relation to the Services.
The Company or a third party has a legitimate interest that requires processing of personal data.
5. To stop fraud and misuse of Our Services
We need to process personal data to serve the legitimate interests of the Company or a third party.
6. To perform and manage actions that align with Our Services requirements
This includes back-office functions, business development, strategic decision-making, oversight mechanisms, and similar activities.
We need to process personal data to protect the legitimate interests of the Company or a third party.
7. To conduct analysis, such as statistical analysis
We use various analytical techniques, including statistical methods, to inform our decision-making on different matters.
The Company or a third party may need to process personal data based on legitimate interests.
To protect our assets, rights, and interests—as well as those of third parties—we process Personal Data to establish and defend legal claims in accordance with applicable laws, regulations, and agreements.
We may also process your Personal Data to safeguard our rights, interests, and assets, or those of third parties, in compliance with all relevant laws, regulations, agreements, and our terms and policies.
We need to process your data to protect the legitimate interests of the Company or a third party.
6. Transfer of Personal Data to Third Party
The Company may share your Personal Data with third-party service providers, such as hosting, storage, and IP address analysis providers, as well as companies that help us understand user experience.
At your request, we can disclose specific Personal Data to third-party trading platforms. Your Personal Data will be shared with these platforms in accordance with their privacy policies. Please note that your Personal Data may be shared with multiple trading platforms.
The Company may also share Personal Data with affiliated entities or business partners to provide us with resources needed to enhance and improve our products and services.
We may disclose Personal Data to regulatory, local, or other official authorities if required to protect the rights or assets of third parties.
We may additionally share your Personal Data with potential investors, buyers, or lenders to the Company or other group entities in connection with a transaction (including the transfer or sale of Company assets or group company assets), merger, restructuring, consolidation, or bankruptcy.
7. Cookies and services from third parties
Third-party services, such as advertisers and analytics providers, may be used on our website. These companies may also use cookies or similar technologies.
Cookies are small text files placed on your device each time you visit our website. We use cookies to understand your preferences and browsing behaviour, enhance your user experience, remember your settings, and personalise the products and services we offer. Cookies also help us gather statistics and analytics data.
Some cookies we use are session cookies. These are temporary files downloaded to your device and expire when you close your browser. Other cookies are persistent. Persistent cookies remain on your device for a set period after you close your browser. We use them to recognise you as a returning user and allow you to return to the website more easily.
Types of Cookies:
They may be used by us based on their purpose:
The type of cookie
Cookies are absolutely necessary
Scope
These cookies are necessary to access the features you've requested and navigate our website. We use them to deliver the information, products, and services you've asked for.
They're required for your device to download and stream data, allowing you to move around the site, use its features, and return to pages you've visited before.
Additional Information
Cookies collect Personal Data, such as your username and last login date, to keep you logged in to the site. These are automatically erased when you close your web browser (session Cookies).
The type of cookie
Functionality Cookies
Scope
Cookies allow us to recognise you each time you visit our site and to save your preferences.
Additional Information
Cookies collect Personal Data, such as your username and last login date, to keep you logged in to the site. They're automatically deleted when you close your web browser (session Cookies).
The type of cookie
Cookies for performance
Scope
We use cookies to collect performance data and help improve the site, as well as to analyse how our website is being used.
Additional Information
Cookies store anonymous data that isn't linked to any identifiable person. Some cookies are removed when you close your browser, while others remain valid indefinitely.
Cookies are blocked or removed
To block or remove cookies, adjust your browser settings. Below are links to help you with the most popular browsers.
- Firefox
- Microsoft Edge
- Google Chrome
- Safari
However, be aware that certain features or the entire Website may not work as expected if this occurs.
ONLINE TRACKING NOTICE
This service does not currently support do-not-track signals.
8. Retention of your personal data
The Company will retain your Personal Data for as long as necessary to fulfil the purpose of processing, as outlined in this Policy, or for longer periods as permitted by applicable law, regulations, and orders.
We'll share your information with third-party trading platforms for a period of 12 months. If you consent, we will continue sharing your data for a further 12 months.
We regularly review the Personal Data we hold to ensure it remains necessary.
9. Transfers of personal information to third-party countries or international organisations
Your personal information may be transferred to other countries (i.e. your personal data may be transmitted to a third country, meaning a country other than where you reside) or to international organisations. Our company takes all necessary steps to protect your personal data and ensure that you can exercise your rights and access effective legal remedies.
These protections are available to all residents of the EEA (European Economic Area).
- Transfer to a third country or international organisation that the EU Commission has determined provides adequate protection of Personal Data in accordance with Article 45(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the "GDPR").
- The transfer is made pursuant to a legally binding and enforceable agreement between public entities or authorities under Article 46(2)(a).
- The transfer was completed in accordance with standard data protection clauses approved by the EU Commission under Article 46(2)(c) of the GDPR. You can view the clauses approved by the EU Commission at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.
The Company can provide details on the security measures used to protect your Personal Data when transferred to third-party countries or international organisations. Please email info@wealthwaydigital.uk for more information.
10. Security of Personal Data
We have implemented appropriate organisational and technical safeguards to protect your Personal Data, including measures against accidental or unlawful destruction, loss, or alteration.
We cannot guarantee that Personal Data will be kept secure without error. We are not liable for any indirect, incidental, or consequential losses arising from the use or disclosure of Personal Data, including (but not limited to) unauthorised access by third parties, transmission errors, or circumstances beyond our reasonable control.
Where required by law or other obligations outside our control, we may need to disclose your Personal Data to third parties, such as public authorities. We cannot control how third parties secure your Personal Data in these circumstances.
Data transmitted over the internet cannot be completely secure. We cannot guarantee the security of Personal Data you send to us online.
11. Hyperlinks to websites belonging to third party websites
The website contains links to third-party sites and applications that operate independently of the Company. We do not oversee these external platforms and are not responsible for how they collect or process your Personal Data. This Policy does not apply to activities conducted through such third-party sites or apps.
Before accessing or using any third-party website or app, we recommend reviewing their privacy policies. We also advise you to exercise caution when sharing your Personal Data with these external services.
12. Modifications to this Policy
Before accessing third-party websites or apps that we recommend, please read their privacy policies. We also advise you to review what Personal Data you share with them.
13. Your rights with respect to your personal information
You are entitled to request that we verify the accuracy of your Personal Data, rectify any inaccuracies, and delete Personal Data that we no longer require. You may also restrict how we process your personal information.
If you are an EEA resident, please refer to this page:
These rights apply to the information you provide regarding your Personal Data. You may exercise these rights by sending an email to the address below.
Access rights
The Company can verify the accuracy of Personal Data we are processing about you. If accurate, you can access your Personal Data.
We will provide an electronic copy of your Personal Data currently being processed at no charge. Additional copies may be subject to a reasonable fee. The data will be provided electronically upon request.
Your right to access Personal Data must not conflict with the rights and freedoms of others. If the request could prejudice another person's rights or freedoms, the Company may refuse the request or limit its response.
Right to rectification
You are entitled to request that we correct any inaccurate or incomplete Personal Data about you, taking into account the reason for processing.
Right to erasure
The following circumstances apply: (a) Personal Data are no longer necessary for the purpose for which they were collected; (b) You withdraw consent and no other legal basis exists for processing; (c) You object at any time, for reasons specific to your situation, to processing of Personal Data based on legitimate interests pursued by us or a third party; (e) Personal Data are being processed unlawfully; or (f) Personal Data must be deleted to comply with a legal obligation.
This right does not apply if processing is necessary (a) to fulfil an obligation required by EU or Member State law; or (b) to establish, exercise or defend legal claims.
Processing restrictions
If you have concerns about the accuracy of your Personal Data, you can request that we limit its processing.
If you request that Personal Data be restricted, it may only be retained if you consent, or to establish, exercise or defend legal rights, or to protect another person's rights, or for reasons of significant public interest within the EU or a Member State.
Right to data portability
If processing is carried out by automated means and is based on your consent or a contract you are party to, you have the right to receive and review your Personal Data from the Company.
You are entitled to request that your Personal Data be transferred directly from the Company to another controller, where technically feasible. Your right to erasure is not affected by exercising your right to data portability. The right to data portability does not prejudice the rights or freedoms of others.
Right to object
You have the right at any time to object to processing of Personal Data about you based on legitimate interests pursued by the Company or a third party. This includes objecting to profiling based solely on these legitimate interests. If we identify compelling legitimate grounds for processing Personal Data that override your rights, freedoms or interests, or for establishing, exercising or defending legal claims, we may continue processing.
Regarding direct marketing, you have the right at any time to object to processing of your Personal Data.
Right to withdraw consent
You may withdraw your consent for us to process your Personal Data at any time. This does not affect the lawfulness of processing carried out before your withdrawal.
You are entitled to lodge a complaint with your supervisory authority.
You may lodge a complaint with a supervisory authority in your Member State that is responsible for protecting fundamental rights in relation to Personal Data processing within the European Union.
EU and Member State laws may limit your rights regarding Personal Data, as detailed in this section.
We will provide the information you request under your rights within one month of receiving your request. This period may be extended by up to two months if necessary, depending on the complexity and volume of requests. We will notify you of any extension and the reasons within one month of your request.
Unless contrary to this section, information requested under your rights will be provided free of charge. If your request is unfounded, excessive or repetitive, we may charge a reasonable fee to cover administrative costs. We may also decline to respond.
If we have doubts about your identity, the Company may request further information to verify it.