Privacy Policy

Protecting your personal data and assets is our top priority, and we are fully committed to safeguarding them.

Colour Meta collects and retains the data required for your trading activities on our trading platform. How this information is collected and stored is explained in the Privacy Policy below.

Our policy is based on the following principles:

• To ensure full transparency regarding how we collect and store your personal data:

Our aim is to ensure you understand how we collect and process data so you can make an informed decision. We have clear guidelines and processes for handling data on this website. Our policy explains the specific methods we use, providing clear and concrete information about how your data is handled. You are in the driver's seat.

We will notify you promptly whenever we determine you need to be informed. Transparency is paramount to us.

Our trained staff are on hand to answer any questions you may have about any aspect of our processes, including our obligations under United Kingdom law. Please contact us at: info@testmetacolour.best

• We will not use personal data for any purpose other than as set out in our Private Policy.

We may process personal data for a number of purposes, including to enable the proper functioning of Colour Meta services and to connect trader-members with third-party trading platforms. It may also be necessary to maintain and improve website features and services, to protect our rights, and to comply with regulatory or other legal obligations. Finally, where this data is necessary for the provision of administrative and other business functions related to the Services provided to you, the client, we may process it.

To provide services better tailored to your preferences and needs, Colour Meta collects and uses personal data.

• To give you access to essential tools for protecting your personal data and safeguarding your rights:

You can contact us at any time to access all your personal data. We can also amend or delete it on request and can assist with transferring your data to you or to a designated third party. We provide this service to help you exercise your rights to privacy and control.

• Keep your personal data secure:

Our security systems use banking‑grade measures and meet the highest standards. While a one hundred percent guarantee cannot be given, we are committed to continuously upgrading our systems and reinforcing the safeguards we have in place.

We maintain a detailed, comprehensive privacy policy and employ industry-leading security systems.

1. The Scope?

This policy outlines our procedures for collecting, processing and sharing any and all data relating to natural persons.

The terms of our policy apply to all natural persons who are identifiable or already identified. This includes any individual who can be, or has been, identified from data entrusted to us, or from data that we hold, access or combine.

As defined in the Privacy Policy, the processing of data specifically refers to the storage, management and organisation of personal data.

We do not collect, and will not attempt to collect, any information about persons under the age of 18. We also do not permit anyone under the age of 18 to use our platform for any purpose. If we discover a user or any information relating to a person under the age of 18, it will be deleted immediately.

2. Which personal data do we store?

When you register with us, we collect the personal information necessary to enable you to use our services. Where required, we may also ask you to provide additional personal data to verify ownership of an account, for example. To maintain and improve the quality of our services, we gather and analyse data about your use of the platform and any related third‑party services.

3. You are under no obligation to provide the company with your personal data.

You are not obliged to provide your data, but if you choose not to, we may be unable to provide certain services and you could be restricted from using our platform.

4. What personal data do we collect? When you visit our website, we may collect the following personal data:

We do not collect data that could be used to identify you personally. However, we do collect information such as your account activity, users' IP addresses and the date and time of access. For maintenance, security and support we retain system crash reports, browser information and the type of device used to access your account. We also collect the language settings associated with your account.

Regarding personal data collection, we only collect and retain the information you consent to provide when you connect through us to a third‑party trading platform.

Personal data you provide to third-party platforms may include: your full name, postal address, telephone number, and email address.

5. Why does the company need my personal data, and is it lawful for them to collect and process it?

The company collects, stores and processes your personal information solely for the purposes set out in the Policy. All such use and processing is carried out in accordance with the relevant laws in United Kingdom.

The company will not handle, process or transmit your data except in accordance with the applicable laws of United Kingdom. The following are the legal grounds for doing so:

• You consent to the company storing and processing your personal data. By submitting your data, you also authorise its transfer, where appropriate, to the appropriate third-party trading platform and agree that your personal data may be processed for one or more specified purposes.
• To improve our services, pursue legitimate interests, or to establish or defend legal claims, among other reasons, the company may need to store and process your personal data.
• Data processing is necessary to fulfil our legal obligations.

If you would like further information about the data processing the company is required to undertake, please contact us by email.

Below is a list of the specific purposes for which we may process your personal data, together with the legal basis for doing so.

6. Transfers of Personal Data to Third Parties

To store and process IP addresses, carry out user surveys and analysis, and provide other related services, the company may share anonymised personal data with third-party service providers.

At your request, we may share specific personal data you provide with third-party services. In such cases, your data will be processed in accordance with the privacy policy of the relevant provider. This may include multiple digital trading platforms.

To improve and streamline the services we provide to clients, the company may share personal information with its affiliates and partner companies.

Where required by law, or to protect the company’s and its third-party partners’ rights and assets, we may disclose data to the relevant legal or regulatory authorities.

In the event of a critical business transaction—such as the sale of the company, seeking investment or applying for a loan—relevant data may be shared in a lawful and appropriate manner. This also applies in the case of any company merger, restructuring, consolidation or insolvency, in accordance with the law.

7. Cookies and third-party services

For the purpose of site analytics and in partnership with advertising firms, cookies and other similar technologies may be used in accordance with applicable law and standard practice.

Cookies — small pieces of code stored on your device when you visit a website — collect information about your browsing behaviour, preferences and related data. They are used to personalise and enhance your user experience, allowing us to remember your settings and tailor our services to you. These cookies are also employed for site analytics and statistical reporting to support strategic planning.

Broadly speaking, the site uses two types of cookies. Session cookies are stored only for the duration of your visit and are deleted when you close your browser. Persistent cookies remain in your browser after a session ends; they let the site recognise you as a returning visitor and help make the site easier to use.

Types of cookies:

Cookies will be used only as necessary and in accordance with their intended purpose:

Cookies are blocked or have been deleted from your browser

To delete or block cookies, adjust your browser's settings. Use the links below for step-by-step instructions for the most popular browsers.

• firefox
• Microsoft Edge
• Google Chrome
• safari

If you block cookies, some site features and functions may not operate as intended.

ONLINE TRACKING NOTICE

Your personal data will be retained for as long as necessary to carry out the purposes described elsewhere in this policy. It may be retained for longer where required by local laws, regulations or company policy.

At your request and discretion, your personal data will be shared with third party trading platforms for an initial period of 12 months. Upon expiry of those 12 months and with your consent, the data will be shared for a further 12 months.

Our operations include regularly reviewing all personal data to determine whether it is still required.

9. Personal data transfers to third countries or international organisations

Where necessary to provide services or for security purposes, personal data may be transferred to third countries (countries other than your own) and to international organisations under robust, verified security protocols. We apply the highest practicable standards to protect your data and to ensure you have access to legal remedies and rights in all cases.

Within the EEA (European Economic Area), all residents are entitled to comprehensive data protection and safeguards.

• Data transfers are subject to the legal jurisdiction and competence of the EU and are carried out in accordance with the data protection provisions set out in Article 45(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”).
• Such transfers are governed by Article 46(2) and constitute a legally binding, enforceable agreement.
• The European Commission’s Standard Contractual Clauses, as set out in Article 46(2)(c) of the GDPR, define the conditions for transfers of personal data and are applied to any such transfer. The Clauses can be read on the European Commission’s official website at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

For more information about the specific security measures the company employs to protect your personal data during third country transfers, please send your request by email to info@wealthwaydigital.uk.

10. Protection of Personal Data

Personal data is protected by the highest level of technical and organisational measures, in accordance with gold-standard procedures. These safeguards effectively prevent data destruction from unlawful or accidental events, as well as loss or unauthorised alteration of that data.

While we apply the utmost care and gold‑standard procedures for data protection, as determined in law, we cannot guarantee that your personal data will be error‑free in every circumstance. Accordingly, we cannot be held liable for any disclosure of personal data or for incidental, intangible or consequential loss or damage. This includes events beyond our control, such as disclosure resulting from transmission errors, third‑party unauthorised access, or any similar cause.

If we receive a legally binding request from regulators or other legal bodies, we may be obliged to disclose your personal data to those authorities. Once disclosed under legal compulsion, we cannot control how those bodies process, store or protect your data.

Anything transmitted over the internet, including personal information, carries a risk of interception and cannot be guaranteed one hundred per cent secure. Any data transmitted online cannot be guaranteed secure by the Company.

11. Hyperlinks to third-party websites

This website contains links to third-party websites and applications. Please note these are not affiliates and are not under the control of the company; our privacy policy does not apply to them. They operate their own procedures and priorities for the collection and processing of personal data, and we are not responsible for those practices. Use the links at your own discretion.

Always read the privacy policy of any company or service when you visit their official website before providing personal data. Ensure their data collection, use and processing practices align with your preferences and priorities. Any information you choose to share should be provided directly to the service provider.

12. Policy Amendments

We reserve the right to update or amend our policy at any time. We will publish notice of any changes on the website and through any other appropriate channels. The revised privacy policy will be posted on the website and will take effect immediately upon publication, unless stated otherwise.

13. Your rights in relation to personal data

You retain full control and final say over how any and all personal data about you is used, including the right to verify its accuracy, correct errors, and to request deletion or to restrict the scope and nature of any processing carried out by us.

This page contains information relevant to residents of the EEA:

Your personal data is protected by the rights described herein. To exercise those rights immediately, please send an email to the address below.

Accessing Your Rights

If the personal data you have provided to us is accurate, you may access it at any time. Any personal data we process is accessible to us and therefore verifiable.

You may request your personal data for verification at any time, and it will be supplied to you in electronic format. If you request additional copies of the data currently being processed, beyond the one initially provided, a reasonable fee may be charged.

The rights granted by law and set out in the privacy policy must not infringe the rights of others. The company reserves the right to refuse or restrict access to personal data where this is necessary to protect the rights and freedoms of others.

Right to Rectify Errors

Any errors in your personal data, whether arising from omission or incorrect details, may be corrected by you or by the Company to ensure your data can be processed correctly.

Erasure Rights

You have the full right to request deletion of your personal data under the following circumstances. 1) If your personal data has been processed without your consent or outside legal boundaries. 2) If you request deletion and the Company has no legal requirement to retain that data. 3) If you withdraw your consent to any data processing by us, even where that processing is lawful and within our rights and interests or those of a third party provider. 4) If we are compelled by law to delete your data.

The right to deletion is overridden and superseded by legal obligations imposed by EU law or the law of any member state. Likewise, it does not apply where the data is necessary for the exercise of, or defence against, legal claims.

Right to Restrict Data Processing

You have the right to request a restriction on the processing of your personal information if you believe it to be inaccurate.

If you request that the use of your personal data be restricted, it will be deleted except in the following cases: 1) where required by law in the European Union or any Member State; 2) with your consent, where retention is necessary to defend or pursue legal claims; 3) to protect the rights of another natural person.

Your right to data portability

You have the right to access and review any personal data you have provided, provided you have given consent in any form to its collection and to processing carried out by automated systems.

You have the right to request the transfer of any and all personal data to another company or organisation, provided this is technically possible. This does not affect your right to deletion of your personal data. Exercising this right is not permitted where it would infringe the rights or freedoms of another natural person.

Right to challenge the processing of your data

Even where the Company or a third-party service provider relies on legitimate interests, you have the right to object to processing and to request that it stop. This does not apply where there is an overriding legal requirement to continue processing — for example, to defend or pursue legal claims. In such cases, we may lawfully continue to process your personal data.

You may request at any time that your personal data not be processed for any direct marketing activities.

Your Right to Withdraw or Decline Consent

You may withdraw your consent to our processing of your personal data at any time; where possible, your withdrawal will take effect immediately. It will not apply retroactively to any processing that took place before you withdrew consent.

If you are unhappy for any reason, you have the right to lodge a complaint with any relevant legal, regulatory or other supervisory authority.

If you believe your rights or freedoms have been infringed in relation to the processing of your personal data, EU Member States have established regulatory and supervisory authorities to address such concerns. You may, at your discretion, submit a complaint to these authorities.

Section 13 outlines circumstances in which the laws of the European Union or its Member States may restrict your personal data rights.

When we receive your request concerning your personal data and its processing, we will grant you access to the information you have requested, as set out in Section 13 of this policy. We reserve the right to extend this period by up to two months, depending on the volume of requests and the nature of your request. If an extension is required, we will notify you within one month of receiving your request.

Requested information will be provided to you electronically free of charge, unless doing so would conflict with the law or with the provisions of Section 13. We reserve the right to charge a reasonable fee or to refuse any request that we consider spurious, excessive or repetitive.

We reserve the right to require additional proof of identity where there is reasonable doubt about the person requesting personal data, for the purposes of data protection and security.