Privacy policy

General

• This Privacy Policy (hereinafter referred to as the "Policy") sets out the procedure for processing and protecting the personal data of users of the website Whiteshaws Surplus Supplies Ltd (hereinafter referred to as the "Platform", "we", "our") located at whiteshaws.com, whiteshaws.io, as well as mobile and/or desktop applications belonging to the Platform.
• We process personal data in strict accordance with the UK General Data Protection Regulation (UKGDPR), the Data Protection Act 2018 and other applicable UK regulations.

Terms and Definitions

• User — any individual or legal entity registered on the Platform.
• Personal Data — any information related to a directly or indirectly identified User.
• KYC (Know Your Customer) — identity verification procedure to combat money laundering.
• AML (Anti-Money Laundering) — policy for preventing money laundering and terrorism financing.
• 2FA — two-factor authentication.

Categories of Collected Data

• Account creation and maintenance data — first name, last name, email, phone number, country of residence.
• KYC data — passport/ID, selfie, residential address.
• Transaction data — crypto wallet addresses, amounts, transaction hashes.
• Technical information — IP address, browser type, cookies, device, language.
• Communication data — messages and files sent in support chat.

Purposes of Data Processing

• Providing access to the user account and investment products.
• Fulfilling legal obligations (AML/KYC, tax reporting).
• Ensuring security (2FA, login logs).
• Processing cryptocurrency transactions and internal asset accounting.
• Participation in the affiliate program and reward allocation.
• Handling customer support inquiries and improving service quality.
• Marketing communications (with User consent).

Data Disclosure to Third Parties

We may disclose data to:

• KYC/AML providers.
• Payment processors.
• Hosting and cloud service providers.
• Affiliates under the affiliate program.
• Government authorities upon proper request.

Data Storage and Security

Personal data is stored on distributed servers in the UK and the European Economic Area (EEA).

Data transfers are protected by TLS 1.3; data at rest is encrypted using AES-256; passwords are hashed with bcrypt and unique salts; access rights are managed through role-based access control (RBAC); two-factor authentication (2FA) is enabled; regular independent penetration testing and security audits are conducted.

Cookies and Trackers

We use strictly necessary, functional, analytical, and marketing cookies. Users can manage these settings in their browser.

User Rights

Users have the right to:

• Obtain information about data processing.
• Request correction or deletion of data.
• Restrict processing.
• Data portability.
• Withdraw consent at any time.
• File a complaint with a supervisory authority.

Cross-Border Data Transfer

When transferring data outside the UK, we use the International Data Transfer Agreement (IDTA) and/or Standard Contractual Clauses (SCC), or other mechanisms approved by the Information Commissioner’s Office (ICO).

Policy Changes

We may update the Policy; the new version will be published on this page with the effective date indicated.

Contact Information

For all questions related to personal data protection, cookies, or exercising your data subject rights, please contact our Data Protection Officer (DPO):

• Email: privacy@whiteshaws.com
• Postal Address: Whiteshaws Surplus Supplies Ltd, Unit 12 Wirral Business Centre, Dock Road, Birkenhead, Merseyside, CH41 1JW, Registration No. 11474631
• Phone: +44 (0) 20 1234 5678 (Mon–Fri 09:00–18:00 GMT)