Protection of personal data
Your privacy is our priority. We transparently explain
how we process your personal data in compliance with GDPR.
Data Controller
Heraldic Capital Ltd
Company No: HC-20231047
Victoria House, 15 Bishopsgate, London EC2A 4NE, United Kingdom
Email: info@heraldiccapital.com
Phone: +44 20 7946 0958
1. General information about data processing
This privacy notice applies to the website www.heraldiccapital.com and all our services. We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and applicable UK data protection legislation.
2. What personal data we process
Identification data:
- First name and surname
- Email address
- Phone number
- Residential address
Technical data:
- IP address
- Browser and device information
- Cookies and similar technologies
- Website usage data
Commercial data:
- Investment preferences
- Transaction history
- Communications with us
3. Purpose and legal basis for processing
Provision of services
Legal basis: Performance of a contract (Art. 6(1)(b) GDPR)
We process data to provide investment services and consultations.
Marketing and newsletter
Legal basis: Consent (Art. 6(1)(a) GDPR)
Sending investment tips and gold market updates with your consent.
Legal requirements
Legal basis: Compliance with a legal obligation (Art. 6(1)(c) GDPR)
Retention of data for accounting and tax obligations.
Legitimate interests
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)
Ensuring IT security and fraud prevention.
4. Data retention periods
Contractual data
10 years from the end of the contractual relationship (accounting and tax regulations)
Marketing consents
Until consent is withdrawn or max. 3 years from last activity
Cookies and technical data
According to browser settings, typically 1-24 months
Security logs
6 months for IT system security purposes
5. Your rights under GDPR
Core rights:
- Right to information - about how your data is processed
- Right of access - to your personal data
- Right to rectification - of inaccurate data
- Right to erasure - "right to be forgotten"
Additional rights:
- Right to restriction - of data processing
- Right to data portability - to another controller
- Right to object - to data processing
- Right to complain - to a supervisory authority
6. Data security and protection
We have implemented appropriate technical and organisational measures to protect your personal data:
- SSL encryption for all data transfers
- Secure databases with restricted access
- Regular security audits
- Staff training in data protection
- Encrypted backups
7. Use of cookies
Essential cookies:
Required for basic website functionality (security, navigation)
Analytical cookies:
Help us understand how you use our website
Marketing cookies:
Used for personalising advertisements and marketing campaigns
You can manage cookies in your browser settings or through our cookie banner.
8. Contact and complaints
For all GDPR-related enquiries, please contact us:
Email: privacy@heraldiccapital.com
Phone: +44 20 7946 0958
Address: Heraldic Capital Ltd, Victoria House, 15 Bishopsgate, London EC2A 4NE
Supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Email: icocasework@ico.org.uk
Web: www.ico.org.uk
9. Changes to this document
We may update this document in the event of changes to our personal data processing practices or legal requirements. We will notify you of significant changes via:
- Email notification (if we have your consent)
- Notice on our website
- Other appropriate means of communication
Last updated: 10 March 2026
Document version: 2.0