Privacy Policy.

British Gold Exchange ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store and share your personal data when you use our website or services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

British Gold Exchange is the data controller for the personal data you provide to us. If you have any questions about this policy or how we handle your data, please contact us at:

2. What data we collect

We may collect and process the following personal data:

• Identity data: full name
• Contact data: postal address, email address, phone number
• Transaction data: details of items you send us, offers made, payments received
• Technical data: IP address, browser type and version, time zone and location, browser plug-in types, operating system and platform when you visit our website
• Usage data: information about how you use our website and services
• Communications: records of correspondence between you and us

3. How we collect your data

We collect data in the following ways:

• When you complete and submit our Request a Pack form
• When you send items to us by post
• When you contact us by phone, email or via our Contact page
• Automatically via cookies and similar tracking technologies when you visit our website

4. How we use your data

We use your personal data to:

• Dispatch free postal packs to your address
• Receive and process items you send us
• Provide valuation offers and process payments
• Communicate with you about your order
• Comply with legal and regulatory obligations
• Maintain records for accounting and fraud prevention purposes
• Improve our website and services

Our lawful basis for processing is contract performance (to provide our service to you), legal obligation (for example, anti-money laundering requirements), and legitimate interests (for fraud prevention and service improvement).

5. How we store and protect your data

Your data is stored securely on servers based in the United Kingdom and/or European Economic Area. We use appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure or destruction. Access to your personal data is restricted to employees and contractors who need it to perform their duties.

We retain your personal data for as long as necessary to fulfil the purposes it was collected for, including for legal, accounting or reporting requirements. In most cases this is six years from the date of your last transaction with us, in line with HMRC requirements.

6. Who we share your data with

We do not sell your personal data. We may share it with:

• Royal Mail and courier partners — to dispatch and track postal packs
• Payment processors — to execute bank transfers on acceptance of offers
• IT and cloud service providers — who host our systems under confidentiality agreements
• Legal and regulatory authorities — where we are required to do so by law (for example, reporting obligations under the Proceeds of Crime Act 2002)

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erasure of your data in certain circumstances
• Restrict processing of your data
• Data portability — receive your data in a structured, machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses strictly necessary cookies to ensure the site functions correctly. We do not use advertising or tracking cookies without your consent. You can control cookie preferences through your browser settings.

9. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date. We encourage you to review this policy periodically.