Signet Protocol Ltd (company number SC891003) is the data controller for personal data processed through this website and platform.
Identity, contact and financial-verification data collected during registration and membership is processed to perform our contract with members and to carry out identity-verification checks. Security logging is processed on the basis of our legitimate interest in keeping the platform safe. Marketing communications are only sent with consent.
Identity, contact and financial-verification data is retained for the duration of membership plus 7 years to meet our financial record-keeping obligations. Data-rights request records are kept for a minimum of 3 years. Technical data such as IP addresses and session logs is kept on a rolling 90-day basis.
We use a small number of processors to run the platform: Sumsub for identity verification, Stripe for payment processing, and Amazon Web Services (including Cognito) for hosting, authentication and infrastructure, all operating out of the UK or under Standard Contractual Clauses / the UK International Data Transfer Agreement where data leaves the UK. We do not sell personal data.
We only run non-essential analytics cookies if you accept them through our cookie banner. See our Cookie Notice for the full list.
Under UK GDPR you can ask to access, correct, delete, restrict, or receive a copy of your personal data, or object to how it is used. We respond within 30 days. Use the Data Rights & Complaints form in the footer of this site, or email contact@signet-protocol.com. If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk.
We use essential cookies to run this site, and optional analytics cookies to understand how it is used. Analytics only run if you accept them. Learn more.