Privacy Policy

Effective Date: 23 October 2025

This Privacy Policy sets out how GOLD & DIAMOND CAPITAL LTD (“GoldLuxo”, “we”, “our”, or “us”) collects, uses, shares, and protects your personal information when you use our website www.goldluxo.com and our related services.

We are committed to safeguarding your privacy and complying with applicable laws, including the UK Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR). Please read this document carefully. If you have any questions, contact us at support@goldluxo.com.

1. Data Controller

The data controller responsible for your information is:

GOLD & DIAMOND CAPITAL LTD
Registered Office: 14/2e Docklands Business Centre, Tiller Road, 10–16, London, E14 8PX, UK
Company Number: 15799653
Email: support@goldluxo.com

2. Categories of Personal Data We Collect

We may collect the following categories of personal data:

Clients:

Full name, date of birth, nationality
Contact details: email, phone number, postal address
Verification documents: passport/ID, proof of address, proof of income (where required)
Payment details: bank account or Wise transfer information

Prospective clients:

Name, email, phone number (if you sign up for information or updates)

Business partners and suppliers:

Name, email, address, phone number, bank details

Shareholders and directors:

Name, contact details, identification documents, bank details

Communications:

Records of emails, forms, and support requests you send to us

3. How We Collect Personal Data

We collect personal data in several ways:

Directly from you when you register, open an account, or contact us
Through documents you upload for verification (KYC/AML compliance)
From payment transactions made via Wise
From public sources, such as company registers, where required for due diligence
From our business partners and service providers

4. Why We Process Personal Data

We process personal data for the following purposes:

To create and maintain your GoldLuxo account
To process deposits, withdrawals, and trades in precious metals and diamonds
To comply with legal and regulatory requirements (anti-money laundering, financial reporting, tax laws)
To communicate with you about your account, services, or transactions
To provide customer support and resolve issues
To improve our services and maintain the security of our platform
To keep proper company, accounting, and audit records

5. Legal Basis for Processing

We rely on the following legal bases for processing personal data:

Contract – to deliver the services you request and fulfil our contractual obligations
Legal obligations – to meet regulatory, tax, anti-money laundering, and reporting requirements
Legitimate interests – to protect our business, prevent fraud, and improve services
Consent – where you have agreed (e.g., receiving optional newsletters or marketing)

6. Data Sharing

We may share your personal data with trusted third parties, only when necessary:

Payment providers: Wise, for processing deposits and withdrawals
Professional advisors: auditors, accountants, lawyers, to meet compliance obligations
Vault or storage partners: if you choose to store physical gold or diamonds
Regulators and authorities: when required by law, including tax and anti-money laundering agencies
Service providers: IT, hosting, and communication providers who help us operate our website

We will take all reasonable steps to ensure any third parties with whom we share data comply with data protection laws.

We never sell or rent your personal information.

7. International Transfers

Your data is primarily processed in the United Kingdom. If data is transferred outside the UK or the European Economic Area, we will ensure that adequate safeguards (such as Standard Contractual Clauses) are in place.

8. Data Retention

We retain personal data for as long as necessary to meet the purposes described in this policy or to comply with legal obligations.

Client account data: retained for 5 to 10 years after account closure
Business records: retained for the statutory retention period under UK law
Communication records: retained as necessary for service and legal requirements

After these periods, data will be securely deleted.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption, access controls, and secure storage. While we take reasonable steps to protect your data, no method of transmission or storage is 100% secure.

10. Your Rights Under GDPR

As a data subject, you have the following rights:

Right of access – to know what personal data we hold about you
Right to rectification – to correct inaccurate or incomplete data
Right to erasure – to request deletion of your data (“right to be forgotten”)
Right to restriction – to request we limit processing of your data
Right to portability – to receive your data in a machine-readable format
Right to object – to processing based on legitimate interests or for marketing
Right to withdraw consent – where processing is based on consent
Right to complain – to the Information Commissioner’s Office (ICO) in the UK or your local supervisory authority

To exercise your rights, please contact us at support@goldluxo.com.

11. Cookies

At present, GoldLuxo.com does not use cookies for analytics, marketing, or tracking purposes. If this changes in the future, we will update our Cookie Policy and seek your consent where required.

12. Complaints

We aim to handle all privacy concerns promptly. If you are dissatisfied with how we use your data, please contact us first at support@goldluxo.com.

If you remain unsatisfied, you may file a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk or your local supervisory authority.

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or other circumstances. Updates will be published on this page, with the effective date indicated at the top.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

GOLD & DIAMOND CAPITAL LTD
Registered Office: 14/2e Docklands Business Centre, Tiller Road, 10–16, London, E14 8PX, UK
Email: support@goldluxo.com