CrestPoint TT

TABLE OF CONTENTS

  • 1. The Scope
  • 2. What Personal Data Do We Have on You
  • 3. No Requirement to Disclose Personal Information
  • 4. What Personal Data We Collect
  • 5. Legal Basis and Reasons for Processing of Personal Data
  • 6. Transfer of Personal Data to Third Party
  • 7. Cookies and Services from Third Parties
  • 8. Retention of Personal Data
  • 9. International Transfers
  • 10. Security of Personal Data
  • 11. Hyperlinks to Third Party Websites
  • 12. Modifications to This Policy
  • 13. Your Rights

Privacy Policy

Last updated: 28.05.2026

We (also referred to as "We", "Us" or "Our") are committed to protecting your Personal Data and respecting your privacy. This Privacy Policy explains how we collect and store the information you provide through the website CrestPoint TT (the "Website").

We want you to have the information you need to make informed decisions about how your Personal Data is used and processed. To keep you properly informed, we use a range of methods and procedures to provide relevant details. Where we consider that you need specific information, we will provide it at the appropriate time. We are also happy to answer any questions you may have, subject to any limitations required by law.

By using our Website, you acknowledge that you have read and accepted this Privacy Policy. If you have any questions, please contact us at support@crestpoint-tt.com

1. The Scope

1.1 This policy explains what types of Personal Data the Company collects from individuals, how that information is processed, when it may be shared with third parties, and the measures in place to protect it.

1.2 This Policy applies to information relating to an identified or identifiable natural person. An identifiable natural person is someone who can be identified directly, or indirectly through additional information that we hold or can reasonably access.

1.3 In this Policy, "processing" refers to any activity that involves the use or collection of Personal Data, including its management, organisation, and storage.

1.4 Our services are intended for a general audience and are not meant for anyone under 18. We do not knowingly collect or request information from persons below the age of 18, and we do not knowingly permit them to use our services. If we become aware that we hold any information relating to a child, we will delete it as promptly as possible.

2. What Personal Data Do We Have on You

2.1 When you use the service and its channels, or visit our website, we collect Personal Data. In some cases, we may ask you to provide your Personal Data.

2.2 In some cases, we collect your Personal Data by reviewing how you use our Services or service channels, or by obtaining your information from our third-party partners.

3. No Requirement to Disclose Personal Information

3.1 You are not required to provide Us with any Personal Data. However, in some cases, if You choose not to do so, We may be unable to provide the Services or allow users to access the website.

4. What Personal Data We Collect

4.1 This includes details of your online activity records and traffic-related data, including:

  • IP address
  • Date of access and time of access
  • Language you used
  • Software crash logs
  • Type of browser used
  • Information regarding the device that you utilised

4.2 The information you collect does not constitute personal information and cannot be used to identify you.

4.3 Personal Data we receive from you: any personal data you choose to provide to Us when you connect to a third-party online trading platform through Us.

4.4 Personal information you provide directly to third-party platforms to enable trading, including your full name, address, telephone number, and email address.

5. Legal Basis and Reasons for Processing of Personal Data

5.1 The company processes your Personal Data for the purposes set out in this section and in line with the applicable legal basis.

5.2 The Company cannot process your Personal Data without a valid legal basis. The legal grounds on which the Company may process your Personal Data are:

  • You have consented to the processing of your Personal Data for one or more purposes. This applies when you submit personal information through the Website so that we can pass it on to a third-party trading platform.
  • The Company or a third party may need to process data where this is necessary to pursue a legitimate interest. This may include improving Our Services or establishing, exercising, or defending legal claims.
  • Processing must meet an obligation of law.

5.3 Contact us by email for further information about the processing required to protect legitimate interests.

5.4 Below is a list of the reasons and legal bases on which we may use the information you provide to us:

Scope

Legal Basis

1. To share your personal information with third parties at your request so you can access digital trading
If you request this, we may collect Personal Data from you and pass it on to third-party companies.

You have consented to the processing of your Personal Data for one or more purposes.

2. To respond to your requests, questions or concerns
We need Personal Data to address any queries you may have about the Services.

Processing is necessary to support the Company’s legitimate interests or those of a third party.

3. Personal Data is processed to comply with any legal, administrative, or judicial obligation.

To ensure compliance with legal obligations, processing is required.

4. To improve Our Services Personal
Data may be used to help us improve Our Services. This includes, among other things, crash reports and malfunction data we collect in connection with the Services.

Processing is necessary to pursue the Company’s legitimate interests or those of a third party.

5. To stop fraud and misuse of Our Services.

Processing is necessary to pursue the Company’s legitimate interests or those of a third party.

6. To carry out and manage activities required for the proper delivery of Our Services
This includes back-office operations, business development initiatives, strategic decision-making, oversight procedures, and related functions.

Processing is necessary to pursue the Company’s legitimate interests or those of a third party.

7. To carry out analysis, including statistical analysis
We use a range of analytical methods, including statistical techniques, to support decision-making on different matters.

The Company or a third party has legitimate interests that require processing.

8. To protect our assets, rights and interests, as well as those of third parties
We may process Personal Data where necessary to protect our rights, interests and assets, or those of third parties, in accordance with applicable laws, regulations, agreements, and any relevant terms, conditions or policies.

The Company’s legitimate interests, or those of a third party, need to be processed.

6. Transfer of Personal Data to Third Party

6.1 The Company may also share Personal Data with third-party service providers that support our operations, including hosting and storage providers, IP address data services, and user experience analytics providers.

6.2 You may also request that we provide specific Personal Data about you to third-party trading platforms. In such cases, we will share the Personal Data you have provided to Us with those third-party trading platforms. Any use of your Personal Data will be governed by their respective privacy policies. Your Personal Data may be shared with more than one trading platform.

6.3 The Company may share Personal Data with its affiliated entities or business partners where necessary. This enables the Company to access the resources required to further develop and improve the products and services it offers to its customers.

6.4 Where necessary to protect the rights of third parties or safeguard assets, the Company may disclose Personal Data to regulatory, local, or other competent authorities.

6.5 We may also disclose your Personal Data to prospective investors or purchasers, or to lenders of the Company or any other member of the group, where a relevant transaction is contemplated or carried out (including any transfer or sale of assets owned by the Company or another group company), or as part of a merger, restructuring, consolidation, or insolvency involving the Company or any other business within the group.

7. Cookies and Services from Third Parties

7.1 We may use third-party services, including advertising providers on our website and analytics companies. These companies may also use cookies or similar technologies.

7.2 Cookies are small text files stored on your device each time you visit or access the website. They help collect information about your preferences and browsing behaviour so we can improve your experience, remember your settings, and tailor the products and services that may be of interest to you. Cookies are also used for statistical and analytical purposes.

7.3 Some of the cookies we use are session cookies. These are temporarily downloaded to your device and remain active only for a short time, usually until you close your browser. Other cookies are persistent cookies. Persistent cookies stay on your device for a period after your browser is closed. They help the Website recognise you as a returning user and allow you to access the website more easily on future visits.

The type of cookie

Cookies are absolutely necessary

Scope

These cookies are essential for accessing the features you’ve requested and for moving around our website. They help us deliver the information, products and services you ask for.
They are also needed for your device to download and stream data properly. This allows you to browse the website, use its features, and return to pages you have already visited.

Additional Information

Cookies may collect Personal Data, including your username and the date of your last login, to verify that you are signed in to the site. These are deleted when you close your web browser (session Cookies).

The type of cookie

Functionality Cookies

Scope

Cookies help us recognise you whenever you return to our site and remember your preferences.

Additional Information

They remain stored until their expiry date, even after the browser has been closed.

The type of cookie

Cookies for performance

Scope

Cookies are used to collect statistical information about the site’s performance and to help improve it. They also allow Us to analyse activity on our website.

Additional Information

Cookies store anonymous information that is not linked to any identified or identifiable individual. Some are deleted when you close your browser, while others remain valid for an indefinite period.

7.4 Cookies may be blocked or deleted. To block or remove cookies, you will need to change your browser settings. Below are links to guide you through the process for some of the most commonly used browsers:

  • Firefox
  • Microsoft Edge
  • Google Chrome
  • Safari

7.5 However, please note that if this occurs, some or all features and functions of the Website may not work as expected.

Online Tracking Notice: This service does not currently respond to do-not-track signals.

8. Retention of Personal Data

8.1 The Company will keep your Personal Data only for as long as needed to carry out the purposes for which it is processed, as set out in this Policy, or for any longer period allowed under applicable laws, regulations, policies, or official requirements.

8.2 We will share your information with third-party trading platforms for a period of 12 months. If you consent, we will continue sharing your data for a further 12 months.

8.3 We regularly review the Personal Data we retain to make sure it is no longer required.

9. International Transfers

9.1 Your personal information may be transferred to other jurisdictions, which means your personal data may be shared with entities in another country or with international organisations. The Company takes all necessary measures to protect the Personal Data you provide and to ensure that users can exercise their rights and have access to effective legal remedies.

These protections and safeguards are available to all residents of the EEA (European Economic Area):

  • Transfer to a third country or an international organisation that the EU Commission has recognised as providing an adequate level of protection for Personal Data transferred to it, in accordance with Article 45(3) of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (the "GDPR")
  • The transfer is carried out under a legally binding and enforceable agreement between public bodies or authorities in accordance with Article 46(2)(a)
  • The transfer was carried out in accordance with standard data protection clauses adopted by the European Commission under Article 46(2)(c) of the GDPR

9.3 The Company can provide details of the security measures it uses to protect your Personal Data when it is transferred to third countries or international organisations. Please send an email to: support@crestpoint-tt.com

10. Security of Personal Data

10.1 We implement appropriate organisational and technical measures to protect Personal Data, including safeguards against its accidental or unlawful destruction, loss, or alteration.

10.2 We cannot guarantee that your Personal Data will remain completely secure at all times. We also accept no liability for any indirect, incidental or consequential loss or damage resulting from the use or disclosure of Personal Data, including, but not limited to, disclosures caused by transmission errors, unauthorised access by third parties, or any other circumstances beyond our control.

10.3 Where we are legally required to do so, or where circumstances outside our control make it necessary, we may have to disclose your Personal Data to third parties, including public authorities. In such cases, we are unable to control how those third parties protect your Personal Data.

10.4 Personal Data cannot be transmitted over the internet in a completely secure manner. The Company cannot guarantee the security of any Personal Data you send to Us online.

11. Hyperlinks to Third Party Websites

11.1 The website may contain links to third-party websites and applications. These websites and applications are not under the Company's control or oversight. We are not responsible for how these websites or applications collect or process Personal Data. This Policy does not apply to any actions taken through such websites or applications.

11.2 Before visiting any third-party website or using any third-party app, We recommend that you review its privacy policy first. We also suggest that you consider this before providing them with any Personal Data.

12. Modifications to This Policy

12.1 We may update this Policy at any time. If we do, we will let you know by publishing the revised Policy on our website.

12.2 We may also make material changes to this Policy from time to time. Where we do, we will seek to notify you in the manner we consider appropriate and will post a notice on our website.

12.3 Unless expressly stated otherwise, any amendments will take effect once the revised Policy has been published.

13. Your Rights

13.1 You have the right to ask us to confirm the accuracy of the Personal Data we collect about you, correct any errors, and delete any Personal Data that we no longer need. You may also ask us to limit the ways in which your personal information is processed.

13.2 If you are resident in the EEA, please refer to this page. These rights apply to the Personal Data you provide to us. To exercise any of your rights, you may send an email to the address below.

13.3 Access rights The Company may verify the accuracy of the Personal Data it processes about you. Where your Personal Data is being processed, you are entitled to access it. The Company will provide an electronic copy of the Personal Data currently being processed and may charge a reasonable fee for any additional copies. If you request it, the data will be provided in electronic form. The right to access Personal Data must not adversely affect the rights and freedoms of others. Where a request would prejudice another person’s rights or freedoms, the Company may refuse the request or limit the extent to which it is fulfilled.

13.4 Right to rectification The Company may correct any inaccurate Personal Data. You also have the right to request that any incomplete Personal Data relating to you be corrected, having regard to the purpose for which it is being processed.

13.5 Right to Erasure This right applies in the following circumstances: (a) the Personal Data are no longer needed for the purpose for which they were collected or processed; (b) You withdraw Your consent and there is no other legal basis for the processing; (c) You object, on grounds relating to Your particular situation, at any time to the processing of Your Personal Data where such processing is based on legitimate interests pursued by Us or by a third party; (e) the Personal Data have been processed unlawfully; or (f) the Personal Data must be erased in order to comply with a legal obligation binding on the company. This right does not apply where processing is necessary (a) to comply with a legal obligation requiring processing under applicable law; or (b) for the establishment, exercise, or defence of legal claims.

13.6 Processing restrictions If you have concerns about the accuracy of your Personal Data, you may ask the Company to restrict how your Personal Data is processed. Where you request a restriction, the Personal Data may only be retained with your consent, for the establishment, exercise or defence of legal claims, to protect the rights of another individual, or where there is an important public interest reason under applicable law.

13.7 Right to data portability Where processing is carried out by automated means and is based on your consent or on a contract to which you are a party, you have the legal right to receive the Personal Data you have provided to the Company in a structured, commonly used, and machine-readable format. You may also request that the Company transfer your Personal Data directly to another controller, where this is technically feasible. Exercising your right to data portability does not affect your rights under the right to erasure. This right does not override the rights or freedoms of any other person.

13.8 Right to challenge You may object at any time to the use of your Personal Data where this is based on the legitimate interests of the Company or a third party, including any profiling carried out on that basis. If we can demonstrate compelling legitimate grounds for processing your Personal Data, we may continue to do so unless you show that your rights, freedoms, or interests override those grounds, or that the processing is required for the establishment, exercise, or defence of legal claims. In relation to direct marketing, you have the right to object at any time to the processing of your Personal Data.

13.9 Right to refuse consent You may withdraw your consent to Our processing of your Personal Data at any time. This will not affect the legality of any processing carried out on the basis of your consent before it was withdrawn. You also have the right to make a complaint to the relevant supervisory authority. Where applicable, you may submit a complaint to a supervisory authority established to protect individuals’ fundamental rights in connection with the processing of Personal Data. Applicable laws may limit your rights in relation to your Personal Data, as set out in this section 13.

13.10 We will provide the information you request under the rights set out in section 13 of this agreement within one month of receiving your request. Where necessary, this period may be extended by up to two additional months, depending on the nature of the request and the number of requests received. If an extension applies, we will inform you within one month of receiving your request and explain the reasons for the delay.

13.11 Provided this does not conflict with the provisions of section 13 of the law, any information you request in exercising your rights under section 13 will be supplied free of charge. Where a request is unfounded or excessive, particularly if it is repetitive, we may charge a reasonable fee to cover the administrative costs of providing the information or taking the requested action. We may also decline to act.

13.12 If we have reasonable doubts about the identity of the individual submitting your request, we may ask that person to provide appropriate proof of identity.

This Privacy Policy should be read together with our Term Of Use and Risk Disclosure.

CrestPoint TT 59-60 Grosvenor Street, Mayfair, London, W1K 3HZ | support@crestpoint-tt.com