Legal
Privacy Policy
Last updated: 12 August 2026
This Privacy Policy explains how TerraShares collects and uses personal data when you use terrashares.co.uk and related portal applications.
01
What data we collect
We collect personal data you provide when creating an account or completing onboarding, including your name, email address, and identity documents submitted for KYC (know your customer) verification. We also collect usage data such as device information, IP address, pages visited, and interaction logs that help us operate and secure the platform.
02
How we use your data
We use personal data to manage your account, authenticate access, and provide platform services. We process identity and verification data to meet KYC/AML compliance obligations. We may send service communications about your account, offerings you engage with, and material platform updates. We also process data where required to meet legal and regulatory obligations.
03
Legal basis
Depending on the activity, we rely on: (1) performance of a contract - to provide the TerraShares platform and related services; (2) legal obligation - including AML, fraud prevention, and record-keeping requirements; and (3) legitimate interests - such as securing the platform, improving reliability, and preventing abuse, balanced against your rights.
04
Data retention
Account and transaction-related records are generally retained for seven years after account closure to support AML and financial crime compliance. KYC documents and verification outcomes are retained for periods required by applicable FCA-related and AML requirements. Where retention is no longer necessary and no legal obligation applies, we delete or anonymise data.
05
Third-party processors
We use carefully selected processors to operate the service: Sumsub for KYC/identity verification; Resend for transactional email; Supabase for application data storage; Railway for API and backend hosting; and Vercel for web application hosting. These providers process data only on our instructions and under appropriate contractual safeguards.
06
Your rights
Under UK data protection law you may request access to your personal data, rectification of inaccurate data, erasure where not blocked by a legal obligation, data portability for information you provided to us, and objection to certain processing based on legitimate interests. We may need to verify your identity before fulfilling a request.
07
Contact us
For privacy requests or questions, contact privacy@terrashares.co.uk. We aim to respond within one month of a verified request.
08
Complaints to the ICO
If you are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner’s Office (ICO). See ico.org.uk for contact details and guidance.