Regulatory and client information is available below for ease of reference.
Hoxton Capital Management (Europe) Ltd is committed to protecting personal data in accordance with applicable law. This Privacy Notice explains the types of personal data we collect, how we use it, when and with whom we may share it, how we protect it, and the rights you have in relation to our processing of your personal data. This notice applies to customers and prospective customers.
When you create an account with us, we may collect information that we consider necessary in order to provide our services to you. We may also collect copies of identification and address verification documents, such as a passport, identity card, driving licence, utility bill, or bank statement.
We may record communications with you, whether electronic, by telephone, in person, or otherwise, where these relate to the services we provide and our relationship with you.
We also use cookies to collect information about how you use our website. Cookies are small text files stored by your browser on your device and help us improve your experience. Further information about cookies is available on our website.
Why We Collect Your Information
We process personal data in order to set up and administer your account, provide services to you, offer technical and customer support, carry out anti-money laundering and due diligence checks, and comply with our legal and regulatory obligations. We may also process personal data for research, statistical, and marketing purposes.
Where processing is required in order to comply with legal and regulatory obligations, this will be mandatory to the extent permitted by law. If we ask you for personal data and you do not provide it, we may not be able to provide services to you or enter into an agreement with you.
How We May Share Your Information
Client information is treated as confidential and will only be used in connection with the provision, administration, and improvement of our services, anti-money laundering and due diligence checks, research and statistical purposes, and marketing purposes.
We may disclose personal data where required or permitted by law, including to:
- CySEC or other regulatory authorities;
- government bodies and law enforcement agencies;
- relevant authorities for the prevention, detection, or investigation of fraud, money laundering, or other illegal activity;
- payment service providers and banks processing transactions;
- auditors, contractors, and professional advisers;
- service providers supporting record keeping, communications, database processing, or related operational functions;
- anyone authorised by you;
- affiliates, introducing brokers, or other companies within the same group;
- successors, assignees, transferees, or buyers in the event of a merger, acquisition, reorganisation, or transfer of business; and
- relevant tax authorities, including for FATCA purposes where applicable.
How We Secure Your Information
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include data encryption, access management procedures, clean desk controls, business continuity and disaster recovery arrangements, IT systems risk assessments, physical and logical access segregation, and personal data breach procedures.
Access to personal data is limited to employees, agents, contractors, and other third parties who have a legitimate business need to know and who are subject to confidentiality obligations. Personal data may be stored electronically or in paper form.
Automated decision-making and profiling
In order to provide investment services in accordance with Law 87(I)/2017 and relevant CySEC requirements, we are required to assess certain aspects of a client’s profile before providing services. This may include an assessment of knowledge and experience, financial situation including ability to bear losses, and investment objectives including risk tolerance and time horizon.
We use structured assessment methodologies and internal scoring mechanisms for suitability and, where applicable, appropriateness and AML/CFT purposes. These assessments are subject to meaningful human oversight and are not used to make solely automated decisions that produce legal or similarly significant effects without human involvement.
How Long We Keep Your Information
We will keep your personal data for as long as reasonably necessary for legal or business purposes, subject to a minimum retention period of five years following the end of the business relationship, and for up to seven years after termination where requested by CySEC.
When determining how long to retain personal data, we take into account applicable laws, contractual obligations, and the reasonable expectations and requirements of customers. When personal data is no longer required, it will be securely deleted. Where you have opted out of marketing communications, we may retain your details on a suppression list so that we know not to send you such communications.
Transfers of Personal Data to third countries
Copies of your agreement with us may be transferred to and stored at banking institutions outside the EEA. Where such transfers take place, we will ensure that they are made in accordance with applicable Cyprus and EU data protection requirements and, where required, are subject to appropriate safeguards.
These safeguards may include adequacy decisions, standard contractual clauses, binding corporate rules, or other lawful transfer mechanisms under the GDPR. You may contact us for further information about the safeguards used.
You may have the following rights in relation to your personal data:
- the right of access;
- the right to rectification;
- the right to be forgotten;
- the right to restriction of processing;
- the right to data portability;
- the right to object;
- the right to request the transfer of your personal data; and
- the right to withdraw consent where we rely on consent to process your personal data.
This Privacy Policy was last updated on 23/12/2025 and may be reviewed and updated from time to time on our website.
If you have any questions about this Privacy Notice, wish to notify us of a change or correction to your personal data, would like a copy of the data we hold about you, or would like to raise a complaint or comment, please contact us at [email protected]
You should also contact us as soon as possible if you become aware of any unauthorised disclosure of your personal data, so that we can investigate the matter and fulfil our regulatory obligations.
If you have any concerns or complaints about how we have handled your personal data, you have the right to lodge a complaint with the Office of the Cyprus Data Protection Commissioner. We would, however, appreciate the opportunity to address your concerns first, so please contact our DPO in the first instance.
Important Documents
Key information about Hoxton Capital Management (Europe) Ltd and the documents available to clients can be found below.
Client Information
- Terms of Business (including Fees and Charges)
- Risk Disclosure Statement
- MiFID Client Categorization Policy
- Investor Compensation Fund (ICF) Guidance Document
Operational Policies
Data & Privacy
Contact Us