Privacy Policy

Who we are

CrestPoint Capital ("CrestPoint Capital", "we", "us") operates crestpointcapital.net and the CrestPoint Capital client portal. We are the controller of the personal information described in this policy. Questions can be sent to privacy@crestpointcapital.net.

Information we collect

We collect only the information needed to open, operate and protect your account.

• Identity and contact details: name, email address, telephone number and country of residence.
• Verification records: identity documents, proof of address and selfie images submitted for account verification.
• Account and transaction records: balances, funding requests, order activity and statements.
• Technical and security data: IP address, device and browser information, sign-in events and session activity.
• Support correspondence: messages, tickets and attachments you send to the support desk.

How we use information

• Creating and administering your account and providing the services you request.
• Meeting identity verification, anti-money-laundering and record-keeping obligations.
• Detecting, investigating and preventing fraud, abuse and unauthorised account access.
• Communicating service notices, security alerts and responses to your enquiries.
• Improving the reliability, performance and security of our platform.

Legal bases

We process personal information to perform our contract with you, to comply with legal and regulatory obligations, for our legitimate interests in operating a secure platform, and with your consent where consent is required (for example optional analytics cookies).

Sharing information

We do not sell personal information. We share it only with service providers that help us operate the platform — identity verification providers, payment processors, email delivery, hosting and analytics — and with regulators, auditors or law enforcement where we are legally required to do so. Providers act on our instructions under written agreements.

Storage, retention and security

Account data is held in access-controlled databases with row-level authorisation, encryption in transit over HTTPS and encryption at rest. Verification documents are stored in a private, non-public storage bucket accessible only to authorised compliance staff. Administrative actions are written to an immutable audit log.

We retain account and verification records for the period required by applicable financial record-keeping rules, and delete or anonymise data once that period ends.

Your rights

Subject to applicable law you may request access to your personal information, correction of inaccurate data, deletion where we have no continuing legal obligation to retain it, restriction of processing, and a copy of your data in portable form. Write to privacy@crestpointcapital.net and we will respond within the timeframe required by law. You may also lodge a complaint with your local data protection authority.

Changes

We will update this page when our practices change and revise the effective date at the top. Material changes will also be notified in the client portal.