Let's Talk

Privacy Policy

Privacy Policy

Last updated: 17 May 2026

1. Introduction

Vuca Treasury Ltd (“Vuca Treasury”, “we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, engage our services, or otherwise interact with us.

Vuca Treasury is authorised and regulated by the Financial Conduct Authority (Firm Reference Number 930420).

For the purposes of UK GDPR and the Data Protection Act 2018, Vuca Treasury Ltd is the data controller of personal data we collect about you.

2. Contact Details

If you have questions about this Privacy Policy or how we handle your personal data, please contact us:

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

Information you provide directly:

  • Name, job title, and employer
  • Business contact details (email, phone, postal address)
  • Information about your organisation’s financial exposures, hedging requirements, and treasury operations
  • Correspondence and communications you send us
  • Information provided during onboarding, including identity verification documents required under our regulatory obligations

Information we collect automatically:

  • IP address, browser type, and device information
  • Pages visited, time spent on site, and referring URLs
  • Cookies and similar tracking technologies (see Section 9)

Information from third parties:

  • Information from public sources (e.g. Companies House, LinkedIn) for business development purposes
  • Information from credit reference agencies and sanctions screening providers where required for compliance

4. How We Use Your Personal Data

We use personal data for the following purposes:

Purpose Lawful basis
Providing hedging advisory services Contract performance
Identity verification and anti-money laundering checks Legal obligation
Responding to enquiries and consultation requests Legitimate interests / Contract performance
Sending marketing communications about our services Consent or legitimate interests
Website analytics and improvement Legitimate interests
Regulatory reporting and record-keeping Legal obligation
Detecting and preventing fraud Legitimate interests / Legal obligation

5. Marketing Communications

We may send you information about our services, market insights, and hedging analysis where you have consented to receive such communications, or where we have an existing business relationship and you have not opted out.

You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.

6. Sharing Your Personal Data

We may share your personal data with:

  • Hedging counterparties and banks where necessary to execute or arrange transactions on your behalf, with your authorisation
  • Professional advisers including lawyers, auditors, and compliance consultants
  • Service providers who support our business operations (e.g. IT providers, cloud hosting, email services, CRM platforms)
  • Regulators and law enforcement where required by law, including the Financial Conduct Authority
  • Sanctions screening and KYC providers as part of our regulatory obligations

We require all third parties to respect the security of your personal data and to handle it in accordance with applicable data protection law.

7. International Data Transfers

Some of our service providers are located outside the UK and European Economic Area. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner’s Office or the European Commission.

8. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting requirements.

As an FCA-regulated firm, we are required to retain certain records relating to advice and transactions for a minimum of five years, and in some cases longer. Records relating to client onboarding and identity verification are retained for at least five years after the end of our business relationship.

After the applicable retention period, personal data is securely deleted or anonymised.

9. Cookies

Our website uses cookies and similar technologies to function correctly, analyse usage, and improve your experience. You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

10. Your Rights

Under UK and EU data protection law, you have the following rights:

  • Right of access — to obtain a copy of the personal data we hold about you
  • Right of rectification — to correct inaccurate or incomplete data
  • Right of erasure — to request deletion of your data in certain circumstances
  • Right to restrict processing — to limit how we use your data
  • Right to data portability — to receive your data in a structured, machine-readable format
  • Right to object — to processing based on legitimate interests, including direct marketing
  • Right to withdraw consent — where processing is based on consent

To exercise any of these rights, please contact us at hedging@vucatreasury.com. We will respond within one month.

11. Complaints

If you believe we have not handled your personal data appropriately, you have the right to complain to the relevant supervisory authority:

We would, however, appreciate the opportunity to address your concerns directly first.

12. Security

We have implemented appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. This includes encryption, access controls, and staff training. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will reflect any changes. We encourage you to review this policy periodically.