Privacy Policy.

1. Who we are

This Privacy Policy explains how Oku Markets Limited ("we", "us", "our") collects, uses, and protects your personal information when you use our website and foreign exchange services.

Oku Markets Limited is a UK company providing foreign exchange and currency management services. We are your data controller, which means we are responsible for how your personal information is handled.

We act as the data controller for personal data we collect and use in connection with our services. We also engage certain third-party service providers who act as our data processors and process personal data on our behalf and under our instructions. In some cases, those third parties may act as independent data controllers where they determine the purposes and means of processing for their own obligations (for example, some banks, payment networks, or regulators).

If you have concerns about how we handle your data, you can contact the UK's Information Commissioner's Office (ICO) at ico.org.uk ↗. However, we'd appreciate the opportunity to address your concerns directly first.

2. What personal information we collect

We collect personal information to provide our foreign exchange and currency management services. The types of information we may collect include:

• Identity Information: Name, date of birth, nationality; passport or ID document details; business role and company information
• Contact Information: Email address, phone number; business and residential addresses
• Financial Information: Bank account details for currency transactions; payment card information; transaction history and trading records; credit references and financial standing
• Business Information: Company details, trading history; expected transaction volumes and patterns; risk management preferences
• Technical Information: IP address, browser type, device information; website usage data and preferences
• Communications: Records of calls, emails, and other communications; marketing preferences

We do not collect sensitive personal data such as information about your health, race, religion, or political opinions.

We may also create, use, and share anonymous or aggregated data for statistical, research, or business purposes. This information does not identify any individual and cannot be used to re-identify you.

3. How we collect your information

We collect information when you:

• Register for our services or request quotes
• Complete foreign exchange transactions
• Contact our dealing desk or support teams
• Use our online platform or website
• Provide it during onboarding and compliance checks

We may also receive information from credit reference agencies, payment processors, and other financial institutions to verify your identity and assess transaction risks.

4. Why we use your information

We use your personal information for the following purposes:

We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects about you. We may use limited profiling to support fraud prevention, anti-money laundering screening, transaction monitoring, and to tailor marketing communications.

5. Legal basis for using your information

We only use your personal information where we have a legal right to do so:

• Contract: To provide our foreign exchange services and fulfill our agreements with you
• Legal obligation: To comply with financial regulations, anti-money laundering laws, and other legal requirements
• Legitimate interests: To operate our business, manage risks, prevent fraud, and improve our services
• Consent: For marketing communications and optional services (you can withdraw consent at any time)

If we need to use your personal information for a new purpose that is not compatible with those set out here, we will explain the legal basis and, where required by law, notify you in advance or ask for your consent.

6. Who we share your information with

• Service providers: Payment processors and correspondent banks; technology providers; professional advisers; credit reference agencies and fraud prevention services
• Regulatory and legal requirements: Financial regulators and law enforcement; tax authorities and government bodies; courts and legal proceedings
• Business transfers: If we sell or transfer our business, your information may be transferred to the new owners

We do not sell your personal information to third parties for their own marketing purposes. All third parties must protect your information and use it only for the purposes we specify.

7. International transfers

As a foreign exchange company operating globally, we may transfer your information outside the UK and EU to correspondent banks, technology providers, and regulatory authorities in relevant jurisdictions.

Where required, we implement appropriate safeguards including the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, and/or the EU Standard Contractual Clauses (SCCs), together with supplementary measures where necessary. Contact us for more information about the safeguards we use.

8. How we protect your information

We use appropriate technical and organisational security measures including:

• Encryption of sensitive data
• Secure access controls and authentication
• Regular security monitoring and testing
• Staff training on data protection

No internet transmission is completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the ICO and, where required, affected individuals without undue delay.

9. How long we keep your information

We keep your personal information only as long as necessary. Typical retention periods:

• Transaction and trading records: 7 years from the date of the transaction or closure of your account
• AML/KYC onboarding records: 5 years after the end of the business relationship or last transaction
• General account and contact details: duration of the relationship, then 6 years
• Communications (calls, emails, chats): 5 years, and up to 7 years in certain regulated circumstances
• Marketing data and preferences: 3 years from your last interaction, or until you opt out
• Technical/log data: 12–24 months, subject to security and compliance needs

These periods may be extended where required by law, regulatory investigations, or to establish or defend legal claims.

10. Your rights

Under UK data protection law, you have the right to:

• Access: Request copies of your personal information
• Correction: Ask us to correct inaccurate information
• Deletion: Request deletion of your information in certain circumstances
• Restriction: Ask us to limit how we use your information
• Portability: Request your information in a portable format
• Objection: Object to certain uses of your information
• Withdraw consent: For marketing and other consent-based processing

To exercise these rights, contact us at compliance@okuprivate.com. We may need to verify your identity before responding.

11. Marketing communications

We may send you information about our services, market updates, and currency insights if you have requested this information, or if you are an existing customer and the communications relate to our services.

You can opt out at any time by clicking unsubscribe links in our emails, emailing info@okuprivate.com, or contacting your account manager.

12. Website and cookies

Our website uses cookies and similar technologies to improve your experience. For details, please see our Cookie Policy. We may include links to third-party websites — we are not responsible for their privacy practices.

13. Age restrictions

Our services are only available to individuals aged 18 and over. We do not knowingly collect information from anyone under 18.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes and post the latest version on our website with the updated date.

15. Contact us