Privacy

Privacy notice

Last updated: October 2026  ·  England and Wales

This privacy notice explains how Treasurii ("we", "us", "our") collects, uses, stores, and shares personal data when you use our website at treasurii.co.uk, our platform at app.treasurii.co.uk, or when you contact us. We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

If you have questions about this notice or how we handle your data, contact us at [email protected].

1. Who we are

Treasurii is a company registered in England and Wales.

Treasurii is a technology platform that provides treasury-management software. Treasurii never holds, moves, or controls client money, does not execute FX transactions or act as a counterparty, and does not provide investment advice. Customers keep their own banking relationships and execute any transactions through their own providers.

2. What personal data we collect

2.1 When you visit our website

We use a first-party analytics script on treasurii.co.uk. It loads only if you accept cookies on the consent banner, and records the pages you visit, the links you click, how long you stay, and the page you arrived from. Where you arrive from a link in one of our emails, it may associate your visit with your email address. This data is processed by our lead-management platform so we can understand which of our emails and campaigns bring visitors to the site.

The lawful basis for this processing is consent (Art. 6(1)(a)). You can withdraw consent at any time by clearing cookies and site data for treasurii.co.uk in your browser. The script will not load again unless you accept when the banner next appears.

2.2 When you request a demo or contact us

  • Full name and work email address
  • Company name and your role
  • Monthly FX volume range
  • ERP / accounting system (optional)
  • Any additional information you choose to include in your message

2.3 When you sign up for the platform

  • Full name and work email address
  • Company name, company type, and jurisdiction
  • Registered address
  • FX trading history and exposure data you input into the platform

2.4 When you use the platform

  • Trade records, exposure data, and hedge positions
  • Audit log entries (who did what and when)
  • Session and authentication data
  • Communications with support

3. Why we process your data and our lawful basis

Purpose Lawful basis (UK GDPR)
Providing and operating the platform Contract (Art. 6(1)(b))
Responding to demo requests and enquiries Legitimate interests (Art. 6(1)(f))
Improving the platform and understanding usage Legitimate interests (Art. 6(1)(f))
Sending product and service updates to customers Contract / legitimate interests
Meeting record-keeping obligations under applicable law Legal obligation / legitimate interests (Art. 6(1)(c), 6(1)(f))
Fraud prevention and security monitoring Legitimate interests (Art. 6(1)(f))

4. Who we share your data with

We do not sell your personal data. We share data only with the following categories of recipients, and only to the extent necessary:

4.1 Sub-processors

  • EU managed-database and authentication provider. Platform data stored in the EU (Ireland region) with point-in-time recovery.
  • Global edge hosting and CDN provider. Serves the website and platform; some processing occurs globally, platform data stored in the EU.

A named list of our current sub-processors is available on request at [email protected].

4.2 Regulatory bodies

We may share data with the Financial Conduct Authority (FCA), HM Revenue & Customs, or other regulatory or law enforcement bodies where we are legally required to do so.

4.3 Professional advisers

Our legal, accounting, and compliance advisers may have access to personal data where necessary to provide their services, under duties of confidentiality.

5. International transfers

We store all customer data in the EU (Ireland region). Some of our sub-processors operate globally. Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, including reliance on the UK's adequacy regulations or standard contractual clauses.

6. How long we keep your data

  • Demo requests and enquiries: 2 years from last contact, unless you become a customer.
  • Customer platform data: For the duration of your contract, plus 7 years thereafter, to meet our contractual and record-keeping commitments.
  • Trade records: 7 years from the date of the trade, in line with standard financial record-keeping practice.
  • Audit logs: Immutable for the duration of the platform relationship; archived for 7 years thereafter.

7. Your rights under UK GDPR

You have the following rights in relation to your personal data:

  • Access: You can request a copy of the personal data we hold about you.
  • Rectification: You can ask us to correct inaccurate or incomplete data.
  • Erasure: You can ask us to delete your data in certain circumstances (subject to our legal retention obligations).
  • Restriction: You can ask us to restrict processing of your data in certain circumstances.
  • Portability: You can ask for your data in a machine-readable format where processing is based on consent or contract.
  • Objection: You can object to processing based on legitimate interests.
  • Withdraw consent: Where we rely on consent, you can withdraw it at any time without affecting prior processing.

To exercise any of these rights, email [email protected]. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Cookies

Our website stores your cookie choice in your browser and, if you accept, uses the first-party analytics script described in section 2.1. We do not use advertising cookies or anything that tracks you across other websites. We use strictly-necessary session cookies for authentication when you are logged into the platform.

See our cookie policy for full details.

9. Security

We use industry-standard security measures including encryption in transit (TLS 1.2+), encryption at rest, row-level security at the database layer, and role-based access controls. See our security page for more detail.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay, as required by UK GDPR Article 33.

10. Changes to this notice

We may update this privacy notice from time to time. We will notify active platform users of material changes by email. The "last updated" date at the top of this page will always reflect when the notice was last revised.

11. Contact us

For any questions about this privacy notice or how we handle your personal data:

If you are not satisfied with our response, you may escalate to the ICO at ico.org.uk.

The data controller responsible for your personal data is Treasurii Systems Ltd (Treasurii is a trading name of Treasurii Systems Ltd), a company registered in England and Wales (company number 17295521), registered office: 124 City Road, London EC1V 2NX.