Privacy Policy
Last update: 06.05.2026
We (also known as "We", "Us" or "Our") are committed to protecting your personal data and privacy.
This Privacy Policy explains how we collect and store the information you provide through the website Aotearoa Capital Flow (the "Website").
These principles will be upheld:
To be transparent about how we process and collect your personal information:
We want you to make informed decisions about how your Personal Data is used and processed. That's why we created this website. We use various methods to give you clear information about Personal Data handling.
If we think you need specific details, we'll provide them at the right time.
We're happy to answer your questions and explain any legal limitations on data use. Contact us by email at: info@aotearoa-capital-flow.com
Your personal data will only be used for the purposes outlined in the Policy.
We process your Personal Data for various purposes, including providing the website and Services (which may connect you with third-party trading platforms), improving the site, protecting our rights and interests, maintaining and delivering the Services, meeting regulatory and legal requirements, and conducting administrative and business activities. We also process your Personal Data to better understand your preferences and needs.
Personal Data are also processed by us in order to better comprehend your preferences and needs.
To effectively protect your rights regarding Personal Data, you can access important tools and resources.
To help you exercise your rights, we have substantial resources available. Contact us anytime to request information about your personal data. We can modify or delete it, stop using it for specific or general purposes, transfer it to you or a third party, and accommodate your requests.
Protect Your Personal Data:
While we cannot guarantee complete security of your personal data, we're committed to using a range of methods and techniques to help protect it.
Our Privacy and Security Policy is comprehensive.
1. The Scope?
This policy explains what Personal Data the Company collects from individuals and how we process, share, secure, and manage it.
This Policy covers information relating to an identified or identifiable natural person. An identifiable person is someone who can be directly identified or recognised through a combination of information we hold or can access.
The Policy defines "processing" as any activity involving the collection or use of Personal Data, including managing, structuring, and storing it.
Our services are designed for general audiences and are not intended for anyone under 18 years old. We do not knowingly collect information from minors or allow them to use our services. If we discover we have collected information about a child, we will delete it as soon as possible.
What personal data do we hold about you?
When you access our service and channels or visit our website, we collect your Personal Data. We may ask for your Personal Data in some cases, and in others we gather it by analysing your use of our Services and channels, or by receiving information from third-party partners.
You're not required to disclose personal information to the company, and there are no consequences for not doing so.
However, you're not required to provide us with any personal data. In certain circumstances, if you don't supply us with the necessary personal data, we may be unable to deliver our services or allow users to access the website.
4. What kind of Personal Data do We collect? When you visit our website, we gather the following personal information:
This includes information about your online activity log, traffic data (including your IP address, access date, access time, and browser language), software crash logs, browser type, and device information. This data is not private information and cannot be used to identify you.
Personal Data We Receive From You: any personal data you voluntarily provide when you connect with a third-party online trading platform through us.
Personal Information You Provide to Third-Party Platforms: this information includes your full name, address, phone number, and email address to facilitate trading.
5. Legal Basis and Reasons for Processing Your Personal Data
Your Personal Data is processed by the company for the purposes outlined in this section, in accordance with the applicable legal basis.
The Company cannot process your Personal Data without a valid legal basis. The legal grounds that allow the Company to process your Personal Data are:
- You have consented to the processing of your Personal Data for one or more purposes. This applies when you submit personal information through the Website so we can transfer it to a third-party trading platform.
- The Company or a third party may need to process your data to pursue their legitimate interests. For example, this includes improving our Services or defending legal claims.
- Processing must comply with legal obligations.
Contact us via email for more information about how we process and protect your legitimate interests.
Below is a list of the reasons and legal grounds we may use your personal data for.
Scope
Legal Basis
To share your personal information with third parties at your request for digital trading access
If you ask us to, we may collect Personal Data from you to pass on to third-party companies.
You've consented to us processing your Personal Data for one or more of the reasons outlined.
2. To answer your requests, questions or concerns
We need your Personal Data to help address any questions you may have about the Services.
The Company or a third party's legitimate interests require processing of personal data.
3. To meet legal obligations, we process your personal data where required by law, administrative procedures, or court orders.
To meet our legal obligations, we need to process your information.
4. To enhance Our Services, Personal
Data may be used by us to improve Our Services. This includes crash reports and malfunction data we collect related to the Services.
The Company or a third party may need to process personal information based on legitimate interests.
5. To prevent fraud and misuse of Our Services
We need to process personal data to protect the legitimate interests of the Company or a third party.
6. To perform and manage actions aligned with Our Services requirements
This includes back-office functions, business development, strategic planning, and oversight processes.
We need to process personal data to serve the legitimate interests of the Company or a third party.
7. To conduct analysis, such as statistical analysis
To make informed decisions on various matters, we use different analytical techniques, including statistical methods.
We need to process personal data to protect the legitimate interests of the Company or a third party.
To protect our assets, rights, and interests—as well as those of third parties—we process Personal Data to establish and defend legal claims in accordance with applicable laws, regulations, and agreements.
We may also process your Personal Data to safeguard our rights, interests, and assets, or those of third parties, in compliance with all relevant laws, regulations, agreements, and our terms and policies.
We need to process personal information to protect the legitimate interests of the Company or a third party.
6. Sharing Your Personal Data with Third Parties
The Company may share your Personal Data with third-party service providers, such as hosting and storage providers, as well as to analyse user experiences and IP address information.
You can request that we share your Personal Data with third-party trading platforms. We will disclose your Personal Data to these platforms in accordance with their privacy policies. Your Personal Data may be shared with multiple trading platforms.
The Company may also share Personal Data with related entities or business partners to help enhance and improve the products and services we offer.
If required to protect the rights of third parties or assets, the Company may disclose Personal Data to regulatory, local, or other official authorities.
We may share your Personal Data with potential investors, buyers, or lenders to the Company or other group companies in connection with any transaction, including asset transfers, sales, mergers, restructuring, consolidation, or bankruptcy proceedings involving the Company or any other group entity.
7. Third-party cookies and services
Third-party services, such as advertising and analytics providers, may be used on our website. These companies may also use cookies or similar technology.
Cookies are small text files stored on your device each time you visit our website. We use cookies to understand your preferences and browsing habits, improve your experience, remember your settings, and personalise the products and services we offer. Cookies also help us gather statistics and analytics data.
Some cookies we use are session cookies. These are temporary files downloaded to your device and deleted when you close your browser. Other cookies are persistent. Persistent cookies remain on your device for a period of time after you close your browser. They help us recognise you as a returning user and allow you to return to the website more easily.
Types of Cookies:
We may use them based on their intended purpose.
The type of cookie
Cookies are essential
Scope
These cookies are essential for accessing the features you've requested and navigating our website. We use them to deliver the information, products, and services you've asked for.
They're required for your device to download and stream data, allowing you to move around the site, use its features, and return to pages you've visited before.
Additional Information
Cookies collect personal data, such as your username and last login date, to confirm you're logged in to the site. They're automatically deleted when you close your web browser (session cookies).
The type of cookie
Functionality Cookies
Scope
Cookies help us recognize you when you visit our site and remember your preferences.
Additional Information
Cookies collect personal data, such as your username and last login date, to confirm you're logged into the site. They're automatically deleted when you close your web browser (session cookies).
The type of cookie
Cookies for performance
Scope
We use cookies to collect performance data and analytics about our website, which helps us improve your experience.
Additional Information
Cookies store anonymous data that isn't linked to any identifiable person. Some cookies are removed when you close your browser, whilst others remain active indefinitely.
Cookies are blocked or removed
To block or remove cookies, adjust your browser settings. Below are links to help you with some of the most popular browsers.
- Firefox
- Microsoft Edge
- Google Chrome
- Safari
However, be aware that certain features or the entire Website may not function as expected if this occurs.
ONLINE TRACKING NOTICE
This service does not currently support do-not-track signals.
8. Retention of your personal data
The Company will retain your Personal Data for as long as necessary to fulfill the purposes outlined in this Policy, or for longer periods as required by law, regulations, and applicable orders.
We'll share your information with third-party trading platforms for 12 months. If you consent, we'll continue sharing your data for a further 12 months.
We regularly review retained Personal Data to confirm it's no longer required.
9. Transfers of personal information to third countries or international organisations
Your personal information may be transferred to other countries (i.e. your personal data may be transmitted to a third country, meaning a country other than where you reside) or to international organisations and jurisdictions. The company takes all necessary steps to protect your personal data and ensure that data subjects can exercise their rights and access effective legal remedies.
These protections and safeguards apply to all those who reside in the EEA (European Economic Area).
- Transfer to a third country or international organisation that the EU Commission has determined provides adequate protection for Personal Data in accordance with Article 45(3) of Regulation 2016/679 of the European Parliament and Council of 27 April 2016 (the "GDPR").
- The transfer is made pursuant to a legally binding and enforceable agreement between public entities or authorities under Article 46(2)(a).
- The transfer was completed in accordance with the Standard Contractual Clauses approved by the EU Commission under Article 46(2)(c) of the GDPR. You can view these clauses on the EU Commission website at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.
The Company can provide details about the security measures used to protect your Personal Data when transferred to third-party countries or international organisations. Contact us at info@wealthwaydigital.uk for more information.
10. Security of Your Personal Data
We've implemented appropriate safeguards to protect your Personal Data, including measures against accidental or unlawful destruction, loss, or alteration.
We cannot guarantee that your Personal Data will remain secure without errors. We're also not liable for any indirect, incidental, or consequential damages resulting from the use or disclosure of Personal Data—including, but not limited to, disclosure due to transmission errors, unauthorised third-party access, or other circumstances beyond our control.
We may be required by law or other obligations beyond our control to share your Personal Data with third parties, such as public authorities. We cannot control how third parties secure your Personal Data in these situations.
No method of internet transmission is completely secure. We cannot guarantee the security of Personal Data you send to us online.
11. Links to third-party websites
Links to third-party websites and applications are provided on our website. These external sites and apps are not operated by us, and we're not responsible for how they collect or process your personal data. Our privacy policy doesn't apply to your activity on those third-party platforms.
Before using any third-party website or app, we recommend you read their privacy policies to understand how they handle your information. Please exercise caution when sharing your personal data with them.
12. Policy Changes
When you visit any third-party websites or apps, we recommend reading their privacy policies before deciding to access or use them. We also suggest reviewing what Personal Data you provide to them.
13. Your rights regarding your personal information
You are entitled to request that we verify the accuracy of your Personal Data, correct any inaccuracies, and delete Personal Data that we no longer need to retain. You may also restrict how we process your personal information.
If you are a resident of the EEA, please refer to this page:
You can exercise these rights in relation to the Personal Data you've provided to us. To request to exercise any of these rights, please email us at the address below.
Access rights
We can verify the accuracy of your Personal Data and confirm what information we're processing about you. If accurate, you can access your Personal Data.
We'll provide an electronic copy of your Personal Data at no cost. We may charge a reasonable fee for additional copies. The data will be provided electronically if you request it.
Your right to access must not conflict with the rights and freedoms of others. If your request could harm someone else's rights or freedoms, we may refuse your request or limit what we can provide.
Right to rectification
We can correct inaccurate Personal Data. You can request that any incomplete or inaccurate Personal Data about you be corrected, taking into account the reason for processing.
Right to erasure
We may erase your Personal Data if: (a) it's no longer needed for the purpose it was collected for; (b) you withdraw consent and there's no other legal basis to process it; (c) you object at any time, based on your particular circumstances, to processing of your Personal Data based on our or a third party's legitimate interests; (d) the Personal Data is unlawfully processed; or (e) we're legally required to delete it.
This right doesn't apply if processing is necessary to: (a) meet a legal obligation under European Union or Member State law; or (b) establish, exercise or defend legal claims.
Processing restrictions
If you're concerned about the accuracy of your Personal Data, you can ask us to restrict how we process it.
If you request that processing be restricted, we may only keep your Personal Data if you consent, or to establish, exercise or defend legal rights, or to protect another person's rights, or for an important reason of significant public interest within the European Union or a Member State.
Right to data portability
If processing is carried out by automated means and is based on your consent or a contract you're party to, you have the right to request your Personal Data from us.
You can ask us to transfer your Personal Data directly to another controller, if technically possible. Your right to erasure isn't affected by exercising your right to data portability. Your right to data portability doesn't interfere with anyone else's rights or freedoms.
Right to object
You can object at any time to processing of your Personal Data based on legitimate interests pursued by us or a third party. This includes profiling based on these legitimate interests. If we can demonstrate compelling grounds for processing, we can only continue if we can show that our interests outweigh your rights, freedoms and interests, or the establishment, exercise or defence of legal claims.
Regarding direct marketing, you have the right to object to processing of your Personal Data at any time.
Right to withdraw consent
You can withdraw your consent for us to process your Personal Data at any time. This won't affect the lawfulness of processing that relied on your consent before you withdrew it.
You have the right to lodge a complaint with your supervisory authority.
You can lodge a complaint with a supervisory authority in your Member State to protect your fundamental rights in relation to Personal Data processing within the European Union.
European Union and Member State laws may limit your rights regarding your Personal Data, as explained in section 13.
We'll provide the information you request under section 13 within one month of receiving your request. We can extend this to two months if needed, depending on the complexity and number of requests. We'll notify you of any extension and the reasons within one month of your request.
We'll provide the information you request under your rights in section 13 free of charge, unless the request is unfounded or excessive, particularly if repeated. In such cases, we may charge a reasonable fee to cover administrative costs. We may also decline to act.
If we're uncertain about your identity, we may ask for further information to verify it.