XenoBanK Policy

Learn more about how XenoBanK protects and uses your personal information.

Our Privacy Policy

XenoBank Ltd is committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK privacy laws.

1. Information We Collect

• Personal identifiers (e.g., name, address, email, phone number) • Financial and transactional data • Identification documents (e.g., passport, driving licence) • Behavioural data (e.g., website usage, browser type)

2. Legal Basis for Processing

We process your data under one or more of the following lawful bases: • Consent • Contractual necessity • Legal obligation • Legitimate interest

3. Purposes of Data Processing

• To provide banking and financial services • To meet legal and regulatory obligations • To conduct KYC/AML verification • To enhance user experience and conduct analytics

4. Data Sharing and Transfers

We may share your data with: • Trusted third-party service providers • Regulatory authorities (e.g., FCA, HMRC) • Credit reference agencies and fraud prevention bodies

Data may be transferred outside the UK in compliance with UK GDPR, using standard contractual clauses or adequacy decisions.

5. Data Security

We implement strong encryption protocols, secure data storage solutions, intrusion detection systems, and continuous security monitoring.

6. Your Rights

You have the right to: • Access your personal data • Request correction or erasure • Object to or restrict processing • Data portability • Withdraw consent (where applicable) • Lodge a complaint with the Information Commissioner’s Office (ICO)

7. Data Retention

We retain your data as long as required by law or regulatory obligations. Typically, personal financial data is retained for 6 years post-account closure in accordance with FCA requirements.

8. Cookies and Tracking

Our website uses cookies to enhance functionality and collect analytics. You may manage your cookie preferences through your browser settings.

Licences and Compliance (United Kingdom)

XenoBank Ltd is a financial technology provider committed to full compliance with UK regulations, including the Financial Services and Markets Act 2000 and all relevant directives under the Financial Conduct Authority (FCA).

1. Regulatory Status

XenoBank Ltd is in the process of obtaining necessary authorisations from the FCA to operate as an electronic money institution (EMI) and virtual asset service provider (VASP).

2. Compliance Framework

• Comprehensive Anti-Money Laundering (AML) and Know Your Customer (KYC) programmes • Ongoing transaction monitoring • Sanctions screening • Politically Exposed Persons (PEP) checks

3. Audit and Security Reviews

We undergo annual external audits of our security controls, including: • ISO 27001-aligned risk assessments • Penetration testing • Operational resilience assessments

4. Consumer Protection

XenoBank maintains client fund segregation in accordance with FCA safeguarding requirements. Client assets are held in ring-fenced accounts.

5. Regulatory Cooperation

We cooperate fully with the Financial Conduct Authority, the Prudential Regulation Authority, HMRC, and other relevant authorities as required by law.

If you have any questions about these policies or require further details, please contact our Legal & Compliance Team at legal@xenobank.org or via our registered office listed on the contact page.