Privacy Policy

This website is operated by EX Financial Solutions Ltd ("EXFI", "we", "us", "our"), a company registered in England and Wales under company number 17105188, with registered address at 128 City Road, London, EC1V 2NX, United Kingdom. Payment services are provided by Gemba Finance Ltd, registered in England and Wales (Company No. 11040011), authorised and regulated by the Financial Conduct Authority (FRN: 804853).

We may collect the following categories of personal data: • Identity data: full name, date of birth, nationality • Contact data: email address, phone number, postal address • Business data: company name, registration number, industry, ownership structure • Financial data: transaction history, account balances, payment details • Technical data: IP address, browser type, device identifiers, cookies • Usage data: pages visited, links clicked, time spent on pages • KYC/AML data: identity documents, proof of address, source of funds declarations

We use your personal data to: • Provide and manage your EXFI account • Comply with our legal and regulatory obligations (including AML, KYC, and FCA requirements) • Process payments and detect fraud • Communicate with you about your account • Improve our products and services • Send you relevant updates (where you have consented) We do not sell your personal data to third parties.

We process your personal data on the following legal grounds: • Contract: processing is necessary to provide you with EXFI services • Legal obligation: processing is required to comply with FCA, HMRC, and AML regulations • Legitimate interests: to improve our services, prevent fraud, and ensure security • Consent: where you have explicitly opted in (e.g. marketing communications)

We may share your data with: • Gemba Finance Ltd (our payment services provider) • Regulatory authorities (FCA, HMRC, NCA) where required by law • Identity verification and KYC providers • Accounting integration partners (e.g. Xero) • Cloud infrastructure and hosting providers All third parties are contractually bound to protect your data in accordance with applicable data protection law.

Where we transfer personal data outside the UK or EEA, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the UK Information Commissioner's Office (ICO) or equivalent authorities.

We retain personal data for as long as necessary to provide our services and comply with legal obligations. Financial and KYC records are typically retained for a minimum of 5 years following the end of a customer relationship, in line with the Proceeds of Crime Act 2002 and FCA requirements.

Under UK GDPR, you have the right to: • Access your personal data • Rectify inaccurate data • Request erasure (where legally permissible) • Restrict or object to processing • Data portability • Withdraw consent at any time To exercise any of these rights, contact us at privacy@exfi.co. You also have the right to lodge a complaint with the ICO at ico.org.uk.

We use essential cookies to operate our website and optional analytics cookies to understand usage. You can manage cookie preferences via our cookie banner or your browser settings. A full cookie policy is available on request.

For privacy-related enquiries: EX Financial Solutions Ltd 128 City Road, London, EC1V 2NX Email: privacy@exfi.co