Privacy notice.

Who is responsible

UIE Ltd, a company registered in England and Wales with number 17334450, is the controller of the personal data described here. Write to contact@uieglobal.com for anything in this notice, including a request to exercise a right below.

When you ask for an introduction

The introduction form asks for your name, your organisation or family office, how the desk should reply, who introduced you, and lets you describe what you have in mind. We use it only to reply and to decide whether we can act. The lawful basis is our legitimate interest in responding to an approach made to us, and taking steps at your request before any contract.

When you become a member

Your account holds your email address, the profile you give us, and the verification the Money Laundering Regulations 2017 require: the identity of the entity, the people who own or control it, the source of funds and whether anyone involved is politically exposed. The lawful basis is the performance of our engagement with you and compliance with legal obligations.

The desk retainer is invoiced by UIE Ltd and settled by bank transfer, so the only payment data we hold is the record that a payment was made, its amount and date. Where card payment is offered, it is taken by Stripe, which acts as an independent controller for card data; UIE never receives or stores your card number.

When we act for you

Arranging a transaction requires the identity and authority of the people who may commit your firm, ownership and control information about the parties, and the documents the transaction itself generates. The lawful basis is the performance of our engagement and compliance with the Money Laundering Regulations 2017 and applicable sanctions law.

Where it is held

Records are stored in the European Union, in Frankfurt, and stay there. Documents released to you are encrypted to the parties entitled to read them. Where a transaction requires a party outside the UK or EEA to receive data, that transfer is made under the appropriate safeguards and is disclosed to you at the time.

How long we keep it

An introduction that does not lead to an engagement is deleted after twelve months. Where we act for you, records are kept for five years after the business relationship ends, because the Money Laundering Regulations 2017 require it. Receipts and evidence packs are immutable by design: they can be exported and erased at the end of their retention period, but they cannot be selectively rewritten.

Your rights

• Ask for a copy of what we hold about you, and export everything you are party to at any time.
• Have inaccurate data corrected. Most of your profile can be corrected by you, in your account.
• Ask for erasure. Where a legal retention duty prevents it, we tell you which one and the date after which the data will be erased.
• Object to anything we do on the basis of legitimate interests, or ask us to restrict a particular use.
• Ask for your data in a portable form.

We reply to a rights request within one month. If you are not satisfied, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first.

Automated decisions

Screening checks are automated, and they can refuse an action. No refusal is final on the machine’s say-so: every one is recorded with its reason and carries a route to human review by UIE compliance within one business day.