Privacy Policy

Protecting the privacy of our members is a fundamental part of how ASCA operates. This Privacy Policy explains how ASCA Capital collects, uses, shares and protects your personal information, and the rights available to you.

We are committed to processing personal information responsibly, transparently and in accordance with applicable data protection laws in the jurisdictions where we provide our products and services, including the General Data Protection Regulation (GDPR) where applicable. ASCA Capital is the data controller for the personal information described in this policy.

We collect:

• information you provide to us, such as identity, contact, financial and onboarding information;
• information generated through your use of our services, such as transactions, device and usage data; and
• information from third parties, such as identity-verification, fraud-prevention and credit-reference providers, where permitted by law.

We process personal information only where we have a lawful basis to do so. Depending on the activity, our lawful basis may be:

• performance of our contract with you, to establish and manage your relationship and provide banking and financial services;
• compliance with a legal obligation, to verify your identity, prevent fraud and financial crime, and meet regulatory obligations;
• our legitimate interests, to secure, operate and improve our platform, balanced against your rights; and
• your consent, where specifically requested.

Where processing is based on consent, you may withdraw it at any time.

ASCA does not sell, rent or trade your personal information. We share personal information only where necessary to provide our services, process payments, comply with applicable laws, respond to lawful requests from competent authorities, or work with carefully selected service providers acting on our behalf under appropriate confidentiality and security obligations.

Where personal information is transferred to a country outside your own, we apply appropriate safeguards, such as standard contractual clauses or an equivalent lawful transfer mechanism, as required by applicable law.

We keep personal information only for as long as necessary for the purposes described in this policy and to meet legal, regulatory, accounting and record-keeping obligations.

Retention periods vary by data type and legal requirement; for example, certain anti-money-laundering records must be kept for a minimum period after the relationship ends. When information is no longer required, we securely delete or anonymise it.

We apply appropriate technical, organisational and administrative safeguards to protect personal information against unauthorised access, disclosure, alteration, loss or misuse. Access to personal information is limited to authorised personnel who require it to perform their duties and is protected through strict access controls, monitoring and security measures.

Please see our Data Security page for further detail.

Depending on your jurisdiction, you may have the right to access, correct, update, export (data portability), restrict or delete your personal information, as well as the right to object to certain processing and to withdraw consent. You also have the right to lodge a complaint with your local data protection authority.

Requests relating to your personal information can be submitted through your account settings or by contacting our Privacy Team at legal@asca.capital. We will respond within the timeframes required by applicable law.

Our website uses cookies and similar technologies to operate the site, remember your preferences, analyse usage and improve our services. You can manage non-essential cookies through our cookie settings and your browser controls.

For details, please see our Cookie Notice.

For questions regarding privacy, data protection or the processing of your personal information, or to exercise your rights, please contact our Privacy Team / Data Protection Officer at legal@asca.capital. Further contact channels for ASCA Capital are listed on our Contact page.