{"id":99,"date":"2026-07-06T06:09:51","date_gmt":"2026-07-06T06:09:51","guid":{"rendered":"https:\/\/rakmoneyexchange.com\/new\/?page_id=99"},"modified":"2026-07-06T06:13:24","modified_gmt":"2026-07-06T06:13:24","slug":"privacy-policy-2","status":"publish","type":"page","link":"https:\/\/demo9.net\/rakmoneyexchange\/privacy-policy-2\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"99\" class=\"elementor elementor-99\">\n\t\t\t\t<div class=\"elementor-element elementor-element-25270e3 e-flex e-con-boxed e-con e-parent\" data-id=\"25270e3\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-fbcab95 elementor-widget elementor-widget-text-editor\" data-id=\"fbcab95\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h5 class=\"wp-block-heading\">1. Data Controller Details<\/h5><p>RAK Money Exchange is the \u201cdata controller\u201d responsible for your personal data.<\/p><h2 class=\"wp-block-heading\">Entity Details<\/h2><ul class=\"wp-block-list\"><li>Legal Entity Name: Rak Traders Limited<\/li><li>Trading Name: RAK Money Exchange<\/li><li>Registered Address: 40 High Street North, East Ham, London E6 2HJ<\/li><li>Company Registration Number: 07729114<\/li><li>ICO Registration Number: Z3178901<\/li><\/ul><h2 class=\"wp-block-heading\">Data Protection Contact<\/h2><ul class=\"wp-block-list\"><li>Data Protection Officer (DPO): Muhammad Rakeem Aslam<\/li><li>Email: info@rakmoneyexchange.com<\/li><li>Telephone: 0208 503 5222<\/li><li>Postal Address: 40 High Street North, East Ham, London E6 2HJ<\/li><\/ul><h5 class=\"wp-block-heading\">2. Purpose of This Policy<\/h5><p>This Privacy and GDPR Policy explains how we collect, use, store, share, and protect your personal data when you:<\/p><ul class=\"wp-block-list\"><li>Use our currency exchange services<\/li><li>Send or receive money transfers<\/li><li>Interact with our branch or staff<\/li><li>Visit our premises (including CCTV areas)<\/li><\/ul><p>We process your personal data in accordance with:<\/p><ul class=\"wp-block-list\"><li>UK General Data Protection Regulation (UK GDPR)<\/li><li>Data Protection Act 2018<\/li><li>Money Laundering Regulations 2017<\/li><li>Proceeds of Crime Act 2002<\/li><li>Terrorism Act 2000<\/li><li>Other applicable UK laws and regulatory guidance<\/li><\/ul><h5 class=\"wp-block-heading\">3. Personal Data We Collect<\/h5><p>We collect the following categories of personal data:<\/p><h2 class=\"wp-block-heading\">3.1 Identification Data<\/h2><ul class=\"wp-block-list\"><li>Full name<\/li><li>Date of birth<\/li><li>Nationality<\/li><li>Residential address<\/li><li>Telephone number<\/li><li>Email address<\/li><li>Passport details<\/li><li>Driving licence details<\/li><li>National identity card details<\/li><\/ul><h2 class=\"wp-block-heading\">3.2 Verification &amp; Compliance Data<\/h2><ul class=\"wp-block-list\"><li>Proof of address documents<\/li><li>Source of funds (SOF)<\/li><li>Source of wealth (SOW)<\/li><li>Occupation and employer details<\/li><li>Beneficial ownership information<\/li><li>Politically Exposed Person (PEP) status<\/li><li>Sanctions screening results<\/li><\/ul><h2 class=\"wp-block-heading\">3.3 Transaction Data<\/h2><ul class=\"wp-block-list\"><li>Currency exchange transactions<\/li><li>Money transfer details<\/li><li>Payment records<\/li><li>Transaction history<\/li><\/ul><h2 class=\"wp-block-heading\">3.4 Technical &amp; Monitoring Data<\/h2><ul class=\"wp-block-list\"><li>CCTV footage<\/li><li>Call recordings where required<\/li><li>IP address (if applicable)<\/li><li>Device or system logs (if applicable)<\/li><\/ul><h2 class=\"wp-block-heading\">3.5 Fraud &amp; Security Data<\/h2><ul class=\"wp-block-list\"><li>Fraud prevention alerts<\/li><li>Suspicious activity reports<\/li><li>Risk scoring results<\/li><\/ul><h5 class=\"wp-block-heading\">4. How We Collect Your Data<\/h5><p>We collect data when:<\/p><ul class=\"wp-block-list\"><li>You complete customer onboarding forms<\/li><li>You submit identity documents<\/li><li>You carry out transactions<\/li><li>You communicate with us in branch, phone, or email<\/li><li>You are recorded by CCTV in our premises<\/li><li>We perform regulatory screening checks<\/li><\/ul><p>We may also receive data from:<\/p><ul class=\"wp-block-list\"><li>Fraud prevention agencies<\/li><li>Sanctions and PEP screening providers<\/li><li>Law enforcement or regulatory bodies<\/li><\/ul><h5 class=\"wp-block-heading\">5. Why We Use Your Personal Data<\/h5><p>We use your data for the following purposes:<\/p><h2 class=\"wp-block-heading\">5.1 Providing Services<\/h2><ul class=\"wp-block-list\"><li>Processing currency exchange transactions<\/li><li>Processing money transfers<\/li><li>Managing customer accounts<\/li><li>Customer support<\/li><\/ul><h2 class=\"wp-block-heading\">5.2 Legal &amp; Regulatory Compliance (AML\/CTF)<\/h2><ul class=\"wp-block-list\"><li>Customer Due Diligence (CDD)<\/li><li>Enhanced Due Diligence (EDD)<\/li><li>Identity verification<\/li><li>Sanctions screening<\/li><li>PEP screening<\/li><li>Fraud prevention and detection<\/li><li>Regulatory reporting to authorities<\/li><li>Record keeping obligations<\/li><li>Responding to law enforcement requests<\/li><\/ul><h2 class=\"wp-block-heading\">5.3 Business Operations<\/h2><ul class=\"wp-block-list\"><li>Internal audits<\/li><li>Risk management<\/li><li>Staff training and quality monitoring<\/li><li>Complaint handling<\/li><li>Service improvement<\/li><\/ul><h2 class=\"wp-block-heading\">5.4 Security &amp; Crime Prevention<\/h2><ul class=\"wp-block-list\"><li>CCTV monitoring<\/li><li>Call recording if required<\/li><li>Fraud detection systems<\/li><li>Prevention of financial crime<\/li><\/ul><h5 class=\"wp-block-heading\">6. Legal Basis for Processing (UK GDPR)<\/h5><p>We only process your personal data when we have a lawful basis:<\/p><h2 class=\"wp-block-heading\">6.1 Legal Obligation (Primary Basis for AML)<\/h2><p>We process data where required under:<\/p><ul class=\"wp-block-list\"><li>Money Laundering Regulations 2017<\/li><li>Proceeds of Crime Act 2002<\/li><li>Terrorism Act 2000<\/li><li>HMRC requirements<\/li><li>Financial sanctions regulations<\/li><\/ul><p>Note: This includes identity verification, monitoring, and reporting.<\/p><h2 class=\"wp-block-heading\">6.2 Contractual Necessity<\/h2><p>We process your data to:<\/p><ul class=\"wp-block-list\"><li>Provide requested financial services<\/li><li>Complete transactions<\/li><li>Manage your customer relationship<\/li><\/ul><h2 class=\"wp-block-heading\">6.3 Legitimate Interests<\/h2><p>We may process data to:<\/p><ul class=\"wp-block-list\"><li>Prevent fraud and financial crime<\/li><li>Secure our premises and systems<\/li><li>Improve operational efficiency and reduce risks<\/li><li>Investigate disputes or complaints<\/li><\/ul><p>We balance these interests against your rights.<\/p><h2 class=\"wp-block-heading\">6.4 Consent<\/h2><p>We rely on consent only for:<\/p><ul class=\"wp-block-list\"><li>Marketing communications<\/li><li>Promotional messages<\/li><li>Optional surveys<\/li><\/ul><p>You may withdraw consent at any time.<\/p><h5 class=\"wp-block-heading\">7. AML &amp; Identity Verification Requirements<\/h5><p>As a regulated Money Service Business, we are legally required to:<\/p><ul class=\"wp-block-list\"><li>Verify your identity before providing services<\/li><li>Collect and retain identification documents<\/li><li>Screen customers against sanctions and PEP lists<\/li><li>Monitor transactions for suspicious activity<\/li><\/ul><p>If you do not provide required information:<\/p><p>We may be unable to provide services and may decline or terminate the transaction.<\/p><h2 class=\"wp-block-heading\">Collection of Identification Documents Is a Legal Requirement, Not a Matter of Consent<\/h2><p>When you provide identification documents to open an account or carry out a transaction, this is not done on the basis of your consent. It is processed under our legal obligation as a regulated Money Service Business under the Money Laundering Regulations 2017, the Proceeds of Crime Act 2002, and the Terrorism Act 2000. The right to withdraw consent does not apply to this processing, and we are required to collect, verify, and retain these documents regardless of any objection. This is consistent with Section 6.1 of this Policy (Legal Obligation as the primary basis for AML processing).<\/p><h5 class=\"wp-block-heading\">8. Automated Decision-Making<\/h5><p>We may use automated systems for:<\/p><ul class=\"wp-block-list\"><li>Sanctions screening<\/li><li>Fraud detection<\/li><li>Risk scoring<\/li><li>AML monitoring alerts<\/li><\/ul><p>Some outcomes may be reviewed manually where required.<\/p><p>We do not make final adverse decisions affecting customers solely based on automated processing without human review where legally required.<\/p><h5 class=\"wp-block-heading\">9. Who We Share Your Data With<\/h5><p>We may share your personal data with:<\/p><ul class=\"wp-block-list\"><li>HM Revenue &amp; Customs (HMRC)<\/li><li>National Crime Agency (NCA)<\/li><li>UK law enforcement agencies<\/li><li>Financial institutions and payment providers<\/li><li>Fraud prevention agencies<\/li><li>Sanctions and screening providers<\/li><li>Regulators and supervisory authorities<\/li><li>External auditors and professional advisers<\/li><\/ul><p>We may also share data where legally required or permitted.<\/p><p>We do not sell your personal data.<\/p><h5 class=\"wp-block-heading\">10. International Data Transfers (Money Transfer Services Only)<\/h5><p>Your data may be transferred outside the UK where necessary.<\/p><p>When this occurs, we ensure safeguards such as:<\/p><ul class=\"wp-block-list\"><li>UK International Data Transfer Agreement (IDTA)<\/li><li>UK Addendum to EU Standard Contractual Clauses<\/li><li>Appropriate technical and organisational security measures<\/li><li>Transfer risk assessments where required<\/li><\/ul><h5 class=\"wp-block-heading\">11. Data Retention<\/h5><p>We retain personal data only as long as necessary.<\/p><h2 class=\"wp-block-heading\">AML Retention Requirements<\/h2><ul class=\"wp-block-list\"><li>Customer due diligence records: minimum 5 years after relationship ends<\/li><li>Transaction records: minimum 5 years<\/li><li>Regulatory records: as required by law<\/li><\/ul><h2 class=\"wp-block-heading\">Other Retention Periods<\/h2><ul class=\"wp-block-list\"><li>CCTV footage: 30 days<\/li><li>Complaint records: 5 years<\/li><\/ul><p>After retention periods, data is securely deleted or anonymised.<\/p><h5 class=\"wp-block-heading\">12. Data Security<\/h5><p>We implement appropriate security measures including:<\/p><ul class=\"wp-block-list\"><li>Access controls and staff permissions<\/li><li>Secure IT systems<\/li><li>Encryption where appropriate<\/li><li>Secure storage of physical documents<\/li><li>Staff training and confidentiality obligations<\/li><li>CCTV-controlled premises<\/li><\/ul><p>Despite safeguards, no system is completely secure.<\/p><h5 class=\"wp-block-heading\">13. CCTV &amp; Call Recording<\/h5><p>We use CCTV for:<\/p><ul class=\"wp-block-list\"><li>Crime prevention<\/li><li>Customer and staff safety<\/li><li>Regulatory compliance<\/li><\/ul><p>We may record telephone calls for:<\/p><ul class=\"wp-block-list\"><li>Training and quality assurance<\/li><li>Fraud prevention<\/li><li>Regulatory compliance<\/li><\/ul><h5 class=\"wp-block-heading\">14. Your Rights Under UK GDPR<\/h5><p>You have the following rights:<\/p><ul class=\"wp-block-list\"><li>Right of access to your data<\/li><li>Right to rectification of inaccurate data<\/li><li>Right to erasure (where legally permitted)<\/li><li>Right to restrict processing<\/li><li>Right to object to processing<\/li><li>Right to data portability<\/li><li>Right to withdraw consent (where applicable)<\/li><\/ul><h2 class=\"wp-block-heading\">Important AML Limitation<\/h2><p>Some rights may be restricted where we must comply with AML\/CTF legal obligations or regulatory investigations.<\/p><h5 class=\"wp-block-heading\">15. How to Exercise Your Rights<\/h5><p>You may contact us using:<\/p><ul class=\"wp-block-list\"><li>Email: info@rakmoneyexchange.com<\/li><li>Telephone: 0208 503 5222<\/li><li>Address: 40 High Street North, East Ham, London E6 2HJ<\/li><\/ul><p>We will respond within one calendar month, as required by UK GDPR.<\/p><h5 class=\"wp-block-heading\">16. Marketing Communications<\/h5><p>We will only send marketing communications where permitted by law.<\/p><p>You may opt out at any time via:<\/p><ul class=\"wp-block-list\"><li>Email unsubscribe link<\/li><li>Contacting us directly<\/li><li>In-branch request<\/li><\/ul><h5 class=\"wp-block-heading\">17. Complaints<\/h5><p>If you are unhappy with how we handle your data:<\/p><h2 class=\"wp-block-heading\">Contact Us First<\/h2><ul class=\"wp-block-list\"><li>Email: info@rakmoneyexchange.com<\/li><li>Telephone: 0208 503 5222<\/li><li>Address: 40 High Street North, East Ham, London E6 2HJ<\/li><\/ul><h2 class=\"wp-block-heading\">ICO Complaint<\/h2><p>You may also contact:<\/p><p>Information Commissioner\u2019s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF<\/p><p>Telephone: 0303 123 1113<\/p><p>Website:\u00a0<a href=\"https:\/\/ico.org.uk\/\">https:\/\/ico.org.uk\/<\/a><\/p><h5 class=\"wp-block-heading\">18. Updates to This Policy<\/h5><p>We may update this Privacy and GDPR Policy from time to time. The latest version will always be available at:<\/p><h2 class=\"wp-block-heading\">Our Branch Premises<\/h2><ul class=\"wp-block-list\"><li>40 High Street North, East Ham, London E6 2HJ<\/li><li>8 Station Parade, High Street North, East Ham E6 1JD<\/li><li>414 Cranbrook Road, Gants Hill, Ilford IG2 6HW<\/li><\/ul><h2 class=\"wp-block-heading\">Our Website<\/h2><p><a href=\"https:\/\/www.rakmoneyexchange.com\/\">www.rakmoneyexchange.com<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>1. Data Controller Details RAK Money Exchange is the \u201cdata controller\u201d responsible for your personal data. Entity Details Legal Entity Name: Rak Traders Limited Trading Name: RAK Money Exchange Registered Address: 40 High Street North, East Ham, London E6 2HJ Company Registration Number: 07729114 ICO Registration Number: Z3178901 Data Protection Contact Data Protection Officer (DPO): &#8230; <a title=\"Privacy Policy\" class=\"read-more\" href=\"https:\/\/demo9.net\/rakmoneyexchange\/privacy-policy-2\/\" aria-label=\"More on Privacy Policy\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-99","page","type-page","status-publish"],"_links":{"self":[{"href":"https:\/\/demo9.net\/rakmoneyexchange\/wp-json\/wp\/v2\/pages\/99","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/demo9.net\/rakmoneyexchange\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/demo9.net\/rakmoneyexchange\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/demo9.net\/rakmoneyexchange\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/demo9.net\/rakmoneyexchange\/wp-json\/wp\/v2\/comments?post=99"}],"version-history":[{"count":11,"href":"https:\/\/demo9.net\/rakmoneyexchange\/wp-json\/wp\/v2\/pages\/99\/revisions"}],"predecessor-version":[{"id":231,"href":"https:\/\/demo9.net\/rakmoneyexchange\/wp-json\/wp\/v2\/pages\/99\/revisions\/231"}],"wp:attachment":[{"href":"https:\/\/demo9.net\/rakmoneyexchange\/wp-json\/wp\/v2\/media?parent=99"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}