Privacy Policy

This notice was last updated on 15 July 2025.

This data privacy use and retention notice (the "Privacy Notice") applies to all personal data collection and processing activities carried out by Taupe Global Systems Ltd and its group (together, "Taupe Global"). In this notice, references to "we", "us" or "our" are references to Taupe Global. Our principal address is Level 18, 40 Bank Street, Canary Wharf, London, England, E14 5NR and our privacy email address is privacy@finvue.co.uk. We respect individuals' rights to privacy and the protection of personal data. The purpose of this Privacy Notice is to explain how we collect and use personal data in connection with our business.

1. Who we are

This data privacy use and retention notice (the "Privacy Notice") applies to all personal data collection and processing activities carried out by Taupe Global Systems Ltd and its group (together, "Taupe Global"). In this notice, references to "we", "us" or "our" are references to Taupe Global. Our principal address is Level 18, 40 Bank Street, Canary Wharf, London, England, E14 5NR and our privacy email address is privacy@finvue.co.uk. We respect individuals' rights to privacy and the protection of personal data. The purpose of this Privacy Notice is to explain how we collect and use personal data in connection with our business.

"Personal data" means data, whether true or not, about an individual who can be identified from that data; or from that data and other information to which the organisation has or is likely to have access.

We may update our Privacy Notice from time to time. When we do, we will communicate any changes to you and publish the updated Privacy Notice on our website. We would encourage you to visit our website regularly to stay informed of the purposes for which we process your information and your rights to control how we process it.

2. The information we process

We may collect, process, and use various categories of personal data at the start of, and for the duration of, your relationship with us. We will limit the collection and processing of information to information necessary to achieve one or more legitimate purposes as identified in this notice.

Personal data may include:
A. basic personal data, including name and address, date of birth, and contact details;
B. financial information, including account and transactional information and history;
C. goods and services, we provide to you;
D. visual images and personal appearance (such as a copy of passports or real-time biometric facial scans); and
E. online profile and social media information and activity, based on your interaction with us and our websites and applications, including for example your login information, Internet Protocol (IP) address, smart device information, location coordinates, online and mobile app security authentication, mobile phone network information, searches, site visits and spending patterns.

We may also process certain sensitive data for specific and limited purposes, such as detecting and preventing financial crime or making our services accessible to customers. We will only process sensitive data where we have obtained your explicit consent or are otherwise lawfully permitted to do so (and then only for the particular purposes and activities set out at Schedule B for which the information is provided).

This may include biometric information, relating to the physical, physiological, or behavioural characteristics of a person, including, for example, fingerprint or facial recognition or similar technologies to help us prevent fraud and money laundering. Where permitted by law, we may process information about criminal convictions or offences and alleged offences for specific and limited activities and purposes, such as to perform checks to prevent and detect crime and to comply with laws relating to money laundering, fraud, terrorist financing, bribery and corruption, and international sanctions. It may involve investigating and gathering intelligence on suspected financial crimes, fraud, and threats and sharing data with taxation, law enforcement, and regulatory bodies.

3. How we obtain information

Your information is made up of all the financial and personal data we collect and hold about you/your business and the proprietors, officers, and beneficial owners of that business and your transactions. It may include:
information you give to us;
information that we receive from third parties – including third parties who provide services to you or us, credit reference, fraud prevention or government agencies, and other financial institutions (where permitted by law);
information that we learn about you through our relationship with you and the way you operate your accounts and/or services, such as the payments made to and from your accounts;
information that we gather from the technology which you use to access our services (for example location data from your mobile phone, or an IP address or telephone number) and how you use it (for example pattern recognition); and
information that we gather from publicly available sources, such as the press, the electoral register, company registers, and online search engines.

4. Your rights

We want to make sure you are aware of your rights in relation to the personal data we process about you. We have described those rights and the circumstances in which they apply in the table at Schedule A. If you wish to exercise any of these rights if you have any queries about how we use your personal data that are not answered here, or if you wish to complain to our Data Protection team, please contact us at privacy@finvue.co.uk.

Please note that in some cases, if you do not agree to the way we process your information, it may not be possible for us to continue to operate your account and/or provide certain products and services to you through the DB1-Gen2 app.

Please note that Taupe Global will only comply with such requests to the extent it is legally obligated to and depending on your account activity until that date, certain personal data may be maintained in accordance with anti-money laundering and counter-terrorist financing legislation to which Taupe Global is subject.

5. Changes to the way we use your information

From time to time we may change the way we use your information. Where we believe you may not reasonably expect such a change, we will notify you and will allow a period of at least 30 days for you to raise any objections before the change is made. However, please note that in some cases, if you do not agree to such changes it may not be possible for us to continue to operate your account and/or provide certain products and services to you through the DB1-Gen2 app.

6. How we may use and share your information with other Taupe Global group companies

We will only use and share your information where it is necessary for us to lawfully carry out our business activities. Your information may be shared with and processed by other Taupe Global group companies. We want to ensure that you fully understand how your information may be used. We have described the purposes for which your information may be used in detail in a table in Schedule B – Purposes of Processing.

7. Sharing with third parties

We may from time to time share and disclose your personal data and other data to third parties, some of whom may be located outside your home country. The circumstances under which such sharing and disclosure will take place may include without limitation the following:
where we have your permission;
where required to provide your product(s) or service(s);
where we are required by law and by law enforcement agencies, judicial bodies, government entities, tax authorities, or regulatory bodies around the world;
with other financial institutions and third parties where required by law to help recover funds that have entered your account as a result of a misdirected payment by such a third party;

If you ask us to, we will share information with any third party that provides you with account information or payment services. If you ask a third-party provider to provide you with account information or payment services, you're allowing that third party to access information relating to your account.

We are not responsible for any such third party's use of your account information, which will be governed by their agreement with you and any privacy statement they provide to you.

Taupe Global will not share your information with third parties for their own marketing purposes without your permission.

8. Transferring information overseas

If your personal data in England is sent outside England, we will seek to ensure that your personal data is afforded a comparable level of protection as that provided by Taupe Global and as required by English law.

9. Marketing information

Upon signing up to use Taupe Global services, you may consent to hear from us regarding marketing updates. We will send you relevant marketing information (including details of other products or services provided by us or other Taupe Global group companies which we believe may be of interest to you), by email.

10. Communications about your account

We will contact you with information relevant to the operation and maintenance of your Taupe Global account.

11. Fraud prevention

We may access and use information from fraud prevention agencies.

12. How long we keep your information

By providing you with products or services, we create records containing your information.

Schedule A – Your Rights

Rights Description

Schedule B – Schedule of Purposes of Processing

We will only use and share your information where it is necessary for us to carry out our lawful business activities.