Covercy privacy & data

Covercy Europe Ltd acts as the data controller for the purposes of the UK GDPR and EU GDPR, where applicable.

name, date of birth, nationality, email address, phone number, job title, company name, mailing address, and account credentials

bank account details, payment information, wire transfer details, investment and distribution data, and transaction histories

Government-issued identification, tax identification numbers (TIN/SSN/EIN), proof of address

IP address, browser type, operating system, device identifiers, language preferences, pages visited, features used, clickstream data, session duration, referring URLs

approximate geographic location derived from IP address

records and copies of correspondence between you and us, including support tickets, emails, chat transcripts, and telephone conversations

Providing our services, processing payments, and managing your account.

Implementing anti-money laundering and counter-terrorism financing measures as required by law.

Analysing usage patterns to improve our services, develop new features, and optimise user experience.

Monitoring use for the prevention of fraud and misconduct.

Sending marketing communications to users who have provided consent (you may opt out at any time).

We retain personal data for at least 7 years, unless otherwise explicitly mentioned in this Privacy and Cookie Policy.

Analytics Usage statistics via Google Analytics and similar tools. Up to 26 months

the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Agreement / UK Addendum

the EU-U.S. Data Privacy Framework, where applicable.

an adequacy decision or adequacy regulations, where the destination country has been recognised as providing an adequate level of protection

If requested, we will update or restrict your information

Access your personal data and obtain a copy (Art. 15).

Rectify inaccurate or incomplete data (Art. 16).

Request erasure where there is no lawful basis for continued processing (Art. 17).

Restrict processing in certain circumstances (Art. 18).

Receive your data in a portable, machine-readable format (Art. 20).

Object to processing based on legitimate interests or for direct marketing (Art. 21).

Withdraw consent at any time, without affecting prior processing (Art. 7(3)).

Opt out of the sale or sharing of personal information (§1798.120) — we do not currently sell or share.

We will not sell your Personal Information.