Privacy Policy

WhiteBirch Group Ltd, trading as WBForex (“we”, “us”, “our”), is a UK-based foreign exchange specialist. We operate as a Juristic Representative of Beztforex (Pty) Ltd, an authorised Financial Services Provider regulated by the Financial Sector Conduct Authority (FSCA) of South Africa under FSP licence number 44383.

Our registered address is: 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE

Company registration number: 12598211

We are registered with the Information Commissioner’s Office (ICO) under registration number ZB121159. If you have any questions about this policy or how we handle your data, please contact us at privacy@wbforex.com or call us on 020 7018 8552.

This policy explains what personal data we collect about you, why we collect it, how we use it, who we share it with, and what your rights are under UK data protection law (UK GDPR and the Data Protection Act 2018).

Please read this policy carefully. By using our website or services, you acknowledge that you have read and understood how we process your personal data as described here.

The data we collect depends on the service you use and your relationship with us. We may collect:

Identity and contact information

• Full name, date of birth, nationality and gender
• Postal address, email address and telephone number
• Copies of identity documents (passport, driving licence) for KYC verification

Financial information

• Bank account details, sort codes and IBAN/SWIFT details required to execute transfers
• Transaction history and transfer amounts
• Source of funds information where required by law

Technical and usage data

• IP address, browser type and version
• Pages visited, time on site and referring URLs
• Device information and operating system

Communication data

• Emails, WhatsApp messages and telephone call records relating to your enquiries or transfers
• Your preferences and any feedback you provide to us

Marketing data

• Your email address and newsletter subscription status if you sign up to the Saffa Insider newsletter
• Your marketing preferences and opt-out status

We collect personal data in the following ways:

• Directly from you when you complete a contact form, sign up to our newsletter, or engage with us by phone, email or WhatsApp
• When you onboard as a client and provide identity and banking documents
• Automatically through cookies and analytics tools when you visit our website (see our Cookie Policy)
• From identity verification and fraud prevention services we are required to use under anti-money laundering regulations

Under UK GDPR, we must have a lawful basis for processing your personal data.

Where we rely on consent (such as for newsletter subscriptions), you have the right to withdraw that consent at any time by clicking the unsubscribe link in any email or by contacting us directly.

We do not sell your personal data. We may share it with:

• Beztforex (Pty) Ltd — our principal FSP, as required for the execution of foreign exchange transactions
• Authorised dealer banks and payment partners — to process and settle your transfers
• Capitec Bank — as the South African bank through which client accounts are opened and transfers are ultimately processed
• Identity verification and KYC providers — to fulfil our anti-money laundering obligations
• IT and technology service providers — including our CRM, email and website hosting providers, who process data on our behalf under strict data processing agreements
• Regulatory bodies and law enforcement — where required by law, including the FSCA, SARS, SARB and any UK equivalent authority
• Professional advisers — including lawyers and accountants, where necessary and under obligations of confidentiality

As we facilitate transfers between the UK and South Africa, some of your personal data will be transferred to South Africa. South Africa is not currently designated as a country providing adequate data protection under UK law. Where such transfers occur, we ensure appropriate safeguards are in place, including contractual clauses approved by the ICO.

If you would like further information, please contact us at privacy@wbforex.com.

• Client transaction records — retained for 5 years from the date of the transaction, as required by anti-money laundering regulations
• Identity verification documents — retained for 5 years from the end of the client relationship
• General correspondence and enquiry data — retained for 2 years from the date of last contact
• Newsletter subscriber data — retained until you unsubscribe or request deletion
• Website analytics data — retained in anonymised form for up to 26 months

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you (a Subject Access Request)
• Right to rectification — to ask us to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data in certain circumstances
• Right to restriction — to ask us to limit how we use your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time

To exercise any of these rights, please contact us at privacy@wbforex.com. We will respond within one month. You also have the right to lodge a complaint with the ICO at ico.org.uk.

We use cookies and similar technologies on our website. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss or disclosure. However, no transmission over the internet is entirely secure. If you have reason to believe your data has been compromised, please contact us immediately.

We may update this policy from time to time. The version number and date at the top of this page will reflect any changes. We will notify you of material changes by email where we hold your contact details.

For any questions about this Privacy Policy or to exercise your data rights, please contact us: