GCC Exchange Fiji

Privacy Policy

Introduction

GCC Exchange UK Limited (“we”, “us”, “our”) is committed to protecting your privacy and personal data.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our mobile application, website, and related services.
We comply with:
  • UK General Data Protection Regulation (UK GDPR)
  • Data Protection Act 2018
  • Financial Conduct Authority (FCA) requirements
  • Anti-Money Laundering (AML) regulations
By using our services, you agree to the practices described in this Privacy Policy.

Data We Collect

We may collect and process the following personal data:

Identity Information
  • Full name
  • Date of birth
  • Nationality
  • Government-issued identification (passport, driving licence, BRP, etc.)
Contact Information
  • Phone number
  • Email address
  • Residential address
Financial Information
  • Bank account details
  • Payment card details (debit card only where applicable)
  • Transaction history
  • Source of funds (if required for compliance)
Technical Information
  • Device type and model
  • IP address
  • Operating system
  • App usage data
  • Location data (where permitted)
Beneficiary Information
  • Recipient name
  • Bank details
  • Country of destination

How We Use Your Data

We use your personal data for the following purposes:
  • To create and manage your account
  • To verify your identity (KYC)
  • To process money transfers
  • To comply with legal and regulatory obligations
  • To detect and prevent fraud, money laundering, and financial crime
  • To provide customer support
  • To improve our app and services
  • To send important service notifications (e.g., transaction updates)
We do not sell your personal data.

Legal Basis for Processing (GDPR)

We process your personal data based on:
  • Contractual necessity – to provide our services
  • Legal obligation – to comply with FCA, AML, and tax requirements
  • Legitimate interests – fraud prevention and service improvement
  • Consent – for optional activities such as marketing communications
You may withdraw consent at any time where applicable.

How We Share Your Data

We may share your data with:

Regulatory Authorities
  • Financial Conduct Authority (FCA)
  • Law enforcement agencies
  • Anti-money laundering authorities
Service Providers
  • Payment processors
  • Identity verification providers (KYC/AML)
  • Banking partners
  • IT and cloud hosting providers
Transfer Partners
  • Overseas banking and payout partners
  • Correspondent financial institutions
We ensure all third parties follow strict data protection standards.

International Data Transfers

As part of providing global remittance services, your data may be transferred outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, such as:
  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions (where applicable)
  • Strong contractual data protection obligations

Data Retention

We retain your personal data only as long as necessary to:
  • Fulfil legal and regulatory obligations (including FCA/AML requirements)
  • Provide services to you
  • Resolve disputes and enforce agreements
Typically, data is retained for a minimum of 5–7 years after account closure, as required by law.

Data Security

We implement strong technical and organisational security measures, including:
  • 256-bit SSL encryption
  • Two-factor authentication (2FA)
  • OTP verification
  • Secure data storage systems
  • Access control and monitoring
  • Fraud detection systems

Your Data Protection Rights

Under GDPR, you have the right to:
  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion (where legally permissible)
  • Restrict processing
  • Object to processing
  • Request data portability

Marketing Communications

You can opt out at any time by:
  • Updating your app settings
  • Clicking unsubscribe in emails
  • Contacting customer support

Cookies & Tracking Technologies

Our website may use cookies and similar technologies to:
  • Improve user experience
  • Analyse app and website performance
  • Enhance security

Third-Party Links

Our app or website may contain links to third-party services. We are not responsible for their privacy practices. We recommend reviewing their privacy policies before use.

Children’s Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect data from minors.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted in the app or on our website with an updated effective date.

Contact Us

GCC Exchange UK Limited
90 High Street, Southall, England, UB1 3DB
+44 20 8571 2065
gcclondon@gccexchange.com
www.gccexchange.co.uk