Saxo Privacy Notice

At Saxo we want to be transparent about how we process and protect your personal data. Below you can see why Saxo (“Saxo”, “we”, “us” or “our”) process your personal data, which types of personal data we process, and who processes your personal data.

1. Who is legally responsible for the safeguarding of your personal data?

Saxo Capital Markets UK Ltd
40 Bank Street, Canary Wharf
E14 5DA
London 
United Kingdom
(Company No: 07413871)
 
We are required to handle (“process”) your personal data securely and otherwise in accordance with the UK General Data Protection Regulation (UK GDPR) and if any national legislation requires a higher level of protection for personal data than the UK GDPR, such stricter requirements are to be complied with.

Should you have queries or complaints about the way in which we process your personal data, please see your options here: Saxo UK Support (help.saxo). 

You can also contact Saxo’s Data Protection Officer via the contact details above or the following email address: privacy@saxobank.com.

2. What personal data might we process about you and where do we get it from?

We will only collect data about you that is relevant in the context of the relationship which we have with you.

We primarily collect information directly from you. However, we will also collect personal data from other sources, which may include other Saxo Group entities, other companies and financial institutions, publicly available sources (e.g. the press, registers of companies, and the internet - including social media platforms) and from providers of business-risk screening services, anti-fraud databases, sanctions lists and databases of news articles.

The types of personal data that we process may include:

• Name and contact information;
• Records related to our client relationship and relevant services, including data deriving from your usage of our IT platforms and, mobile apps;;
• KYC (Know Your Customer) records, such as passport details, social security number, date and place of birth, source of wealth, rationale for use of corporate structures, your employment including whether you are entrusted with a prominent public function, as well as information from adverse media relevant for the relationship;
• Financial information, such as bank account details, specimen signature, income, assets, outgoings, investment objectives, trading behaviour, marital status and details about knowledge of financial products and services, risk appetite, capacity for loss, tax status and domicile;
• Biometric data for the purpose of verifying your identity during onboarding;
• Information about any harm or disadvantage you as a client may be vulnerable to;
• Recordings of calls and electronic communication;
• Records of your engagement with our platform, apps, emails, text messages and social media;
• Information on geographical location for the purpose of complying with sanctions and other legal requirements.

3. For which purposes will we use your data and on what legal basis?

We process your personal data for the following purposes:

• For the performance of a contract (UK GDPR art. 6(1)(b))

It may be necessary for us to process your personal data in order to perform a contract with you relating to our financial services, or to act on your instructions prior to entering into a contract.

For further details, please refer to your contractual documentation with us.

• For compliance with a legal obligation or acting in the public interest (UK GDPR art. 6(1)(c)&(e))

As a regulated firm, we are subject to a number of statutory and regulatory obligations that may require us to collect, store or disclose personal data, record telephone lines or monitor electronic communications, such as for anti-money laundering purposes, sanctions or to respond to investigations or disclosure orders from the police, regulators of our group entities, and tax or other public authorities.

On the basis of a substantial public interest established in the consumer duty requirements to consider any harm or disadvantage you as a client may be vulnerable to which could affect the pursuance of your financial objectives or achievement of good outcomes, we process personal data about health, life events, resilience and capability.

• For the purposes of legitimate interests (UK GDPR art. 6(1)(f))

Where necessary, we process your personal data to serve our legitimate interests or those of a third-party. Cases where we rely on our legitimate interests to process your personal data include:

• Business analysis and development of products and services, including optimisation of platform experience and customer service;
• Activities relating to information security and building security, including the use of recording;
• Contact information for potential clients before finalising account opening and visitors;
• Providing marketing content (including profiling), educational material, market research and business development;
• Recording of telephone lines and monitoring of electronic communications for training purposes;
• Prevention and detection of fraud, financial crime and market abuse, including on any activity or transaction by end-clients of white-label clients on Saxo’s platform;
• Evaluating, bringing or defending legal claims.

• On the basis of your consent (UK GDPR art. 6(1)(a))

If we wish to process your personal data in a way not covered by the legal justifications above, we will need your consent. Where you give consent, you are entitled to withdraw it at any time. Note that withdrawing your consent does not render our prior handling of your personal data unlawful, and it might have an impact on our ability to continue to provide our services in the same way in the future.

We rely on your consent for the following purposes:

• Verifying your identity by using biometric data;
• If you are part of the Preferred Broker Program, Saxo will share with your employer certain data pertaining to your trading activities on Saxo’s trading platform;
• For collection of behavioural and statistical data (cookies) from using our websites;
• For sharing personal data, name, e-mail and phone number, with partners and third-party platforms for marketing or referral related purposes.

4. Who might we share your personal data with?

Where necessary to fulfil your instructions to us and for the other purposes outlined above, we may share information about you with a range of recipients including the following: background screening providers, financial institutions, funds, payment recipients, payment and settlement infrastructure providers, exchanges, regulators, public authorities (including tax authorities), our other group entities and service providers, professional advisers, auditors, insurers and potential purchasers of elements of our business.

We will only disclose information about you as permitted under the contractual terms we have in place with you, the UK GDPR and client confidentiality obligations. Saxo do not under any circumstances sell the collected data to third parties.

Your details will be shared with GBG, Experian and TransUnion for the purposes of verifying your identity by checking them against certain databases. A soft credit check will be made; in the case of TransUnion this will be recorded as having been made by GBG. A Credit Reference Agency Information Notice can be accessed at https://www.experian.co.uk/legal/crain and https://www.transunion.co.uk/legal/privacy-centre

Please see our categories of recipients of personal data here: Categories of recipients (home.saxo).

Subject to your right to opt-out at any time, we may communicate with you via email, SMS and WhatsApp. We may share sensitive client information with you via email. We will never share sensitive client information with you via SMS and WhatsApp nor will you be able to reply to us and share any data that way (unless to opt-out).

5. Will we transfer your data to countries outside EU/EEA?

We are active globally, which is part of our DNA, and to offer you the best possible service, information relating to you may, in line with the purposes described above, be transferred to so-called “third countries”, meaning countries outside the UK.

If we share personal data within Saxo Group, the personal data is protected by our Binding Corporate Rules, which ensure your data is protected in the same way across all our legal entities.

If we use service providers in a country outside the UK, the personal data is protected by standard contractual clauses for data transfers between the UK and third countries or by an adequate data protection level being in place in the third country. We will only transfer your personal data to a third country in a way that is permitted under the UK GDPR.

6. How long will we keep your data for?

We will only retain your personal data as long as necessary for the purposes for which we obtained it.

Data collected as part of KYC, as well as trades and transactions will be kept until 5 years after the end of the client relationship due to legal requirements.

In some cases, there will be a need to preserve records beyond the above periods in order to be able to deal with audits, tax matters or legal claims.

In cases where Saxo has collected personal data as part of an account opening application, demo account, webinar, seminar, or other type of event, but the account opening was never started or completed, we will keep the personal data for 90 days. In cases where an account opening application has been submitted, but the client relationship has not yet been established, we will keep the data for 180 days from the submission date of the account application. If you have shown interest within the last 30 days of the noted periods, we will keep the personal data for an additional 30 days. Each time interest is shown within the period, a 30-day extension for data retention will occur.

If you have not opted-out of receiving marketing from Saxo, we will keep personal data relevant for these purposes until you decide to opt-out.

7. Will we use your data for profiling purposes?

Profiling in the context of this privacy notice is the use of an automated process to analyse personal data in order to assess or predict aspect of your behaviour. We may use profiling in the following circumstances:

• To help identify potential cases of financial crime;
• To provide you with information on our products and services that seem likely to be of interest.

8. What data protection rights do you have?

Subject to certain exceptions and limitations, under UK GDPR you have right to:

• Request access to your personal data: this enables you to receive a copy of the personal data we hold about you;
• Request correction of the personal data that we hold about you: this enables you to have incomplete or inaccurate data that we hold about you corrected;
• Request erasure of your personal data: this enables you to ask us to delete your personal data where there is no good reason for us continuing to process it. This is sometimes referred to as the “right to be forgotten”;
• Request the restriction of processing of your personal data: this enables you to ask us to suspend the processing of your data, such as during the period of time it might take us to respond to a claim by you that the data is inaccurate or that our legitimate interest in processing your data is outweighed by yours;
• Request us to transfer personal data in a commonly used electronic format: this is known as the right to portability;
• Object to processing of your data: this enables you to object to processing of your personal data which is carried out for the purposes of direct marketing or if the processing is for: (i) a task carried out in the public interest; (ii) the exercise of official authority vested in us; or (iii) our or a third party’s legitimate interests;
• Request not to be subject to automated decision making: this enables you to ask us not to make a decision about you based purely on automated processing of your data, which has a legal or some other similarly significant effect on you. We do not as a rule make decisions of this nature based solely on automated processing and without any human assessment whatsoever. We would notify you specifically if we did.

You can read more about how to exercise your rights here: www.home.saxo/en-gb/legal/privacy-policy/personal-data-requests.

9. How to complain?

If you have any concerns about our use of your personal information, you can make a complaint to us at privacy@saxobank.com.

You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data.

The ICO’s address is:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

10. Are you under an obligation to provide us with your personal data?

You are not required by law to provide us with personal data. However, if you refuse to do so we may not be able to continue our relationship with you. For example, we are required by anti-money laundering legislation to verify your identity. This inevitably requires us to collect certain personal data from you.

11. Changes to this privacy notice

We may update this privacy notice from time to time in order to make clarifications or to address changes in the UK GDPR or our business operations. We will notify you if we make any substantial updates.

This privacy notice was last updated on 31.01.2025.