PRIVACY POLICY
Last updated: 28 September 2026
1Introduction
This Privacy Policy is provided by Centri Markets Ltd, a company registered in England and Wales under company number 17300938 with registered office at 28 Ockendon Road, London, England, N1 3NP ('we', 'our' or 'us'). It applies to Centri Markets, our web-based financial intelligence and investor community platform, our website at https://www.centrimarkets.com, and the related products, features and services we provide (together, the Platform).
We take your privacy seriously. This Privacy Policy explains how and why we collect, store, use and share information relating to you (your personal data), the lawful bases on which we rely, how long we keep personal data, and the rights available to you.
Our processing of personal data is regulated by applicable data protection and privacy laws, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where relevant, the Privacy and Electronic Communications Regulations 2003 (PECR).
We are generally the controller of personal data obtained through the Platform, meaning that we decide how and why that personal data is processed. Where a specific business feature requires us to process personal data solely on a customer's documented instructions, we may instead act as a processor and may enter into separate data processing terms with that customer.
Centri Markets Ltd is registered with the Information Commissioner’s Office (ICO) as a data controller under registration number ZC185305.
2What this policy applies to
This Privacy Policy applies to personal data we process in connection with the Platform, including where you use the Platform as an individual user, act on behalf of a listed company or other issuer, use a publisher or research account, participate in community features, subscribe to alerts or otherwise interact with us.
The Platform may link to or rely on websites, applications, APIs, payment services, market-data providers, artificial intelligence providers and other services operated by third parties. Those third parties may process personal data under their own privacy notices. We are not responsible for the privacy practices of third parties acting independently of us, and you should review their privacy information where appropriate.
3Personal data we collect about you
The personal data we collect depends on how you use the Platform and the type of account or features you use. We may collect and use the following categories of personal data:
Category of data | In more detail |
|---|---|
Identity and account data | Name, email address, username, login and authentication information, account type and tier, age or eligibility declarations and, where reasonably required, date of birth or other information used to verify eligibility. |
Profile and community data | Profile information, biography or description, profile image, comments, posts, replies, links, documents or other material you publish, information about accounts or companies you follow, and information about your interactions with other users. |
Issuer, publisher and business verification data | Name, job title, organisation, business contact details, professional role, information used to verify your authority to act for an issuer, publisher, research provider or other organisation, and identity or verification information where reasonably required. |
Watchlist, alert and preference data | Companies or securities you follow, watchlists, alert settings, notification preferences, saved items, content preferences and other settings you choose within the Platform. |
Usage and technical data | Information about how you access and use the Platform, including pages and features used, search and interaction history, timestamps, IP address, browser and device information, operating system, identifiers, diagnostic data and security logs. |
Payment and transaction data | Where a paid service is offered, billing information, subscription details, transaction status and limited payment-related information received from our payment provider. We do not normally receive or store full payment-card details where payment is processed by a third-party payment provider. |
Communications and support data | Information you provide when you contact us, request support, respond to surveys, exercise privacy rights, or otherwise communicate with us, including copies of relevant correspondence. |
Moderation, complaints and compliance data | Reports, complaints, moderation decisions, account restrictions, investigation records, evidence of suspected misuse, fraud, scams, impersonation, market manipulation or other prohibited activity, and related communications. |
Information from third-party or public sources | Information received from service providers, verification providers, market-data providers and publicly available sources. This may include personal data contained in regulatory announcements, issuer information, company websites, public professional profiles or other publicly available materials. |
If you do not provide personal data that we reasonably require to create or verify an Account, provide a requested feature, process a payment, comply with a legal requirement or protect the Platform, we may be unable to provide the relevant part of the Platform to you.
4Sensitive Data
Certain personal data is treated as special category data under the UK GDPR, including personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic or biometric data used for identification, health data, and data concerning a person's sex life or sexual orientation. Information about criminal convictions and offences is also subject to additional legal protections.
We do not intentionally request special category data or criminal offence data as part of ordinary account registration or use of the Platform, and you should avoid providing that information unless it is genuinely necessary and lawful to do so.
If you choose to publish special category data about yourself through a public or community feature, we may process that information to host, display, secure and moderate the relevant content. We will only rely on the condition for information deliberately made public by you where the circumstances support doing so, and we will consider any other additional legal condition required for the processing.
You must not publish special category data, criminal offence data or other sensitive information about another person unless you are legally entitled to do so.
5How your personal data is collected
We collect personal data directly from you when you create or manage an Account, complete verification, configure watchlists or alerts, publish or upload content, purchase a paid service, make a report or complaint, contact us, respond to a request from us or otherwise use the Platform.
We also collect personal data automatically when you use the Platform, including through server logs, security tools, analytics technologies, cookies and similar technologies. Please see our Cookies Policy for information about the technologies we use and the choices available to you.
We may receive personal data from other users, issuers, publishers, payment providers, authentication or verification providers, hosting and security providers, market-data and regulatory-announcement providers, and other third-party service providers where necessary to operate the Platform.
We may also obtain personal data from publicly available sources, including regulatory announcements, public company information, issuer websites and public professional or business information.
6Public and community information
The Platform includes features that may allow you to publish information to other users or, depending on the feature and your settings, to the public. This may include your username, profile information, comments, posts, issuer or publisher information, research links and other Posted Material.
Information that you choose to make public may be viewed, copied, shared or otherwise used by other people and may, where technically accessible, be indexed by search engines or retained outside our control. Although we may remove content from the Platform in accordance with our Terms and Community Guidelines, we may not be able to remove copies made or retained by third parties.
Before publishing personal data about another person, you are responsible for ensuring that you have a lawful basis and any other permission required to do so.
6ACHILDREN
The Platform is intended for users aged 18 and over. You must be at least 18 years old to create an Account or use the interactive features of the Platform.
We may take reasonable steps to assess or verify age where appropriate, including where required to comply with applicable law, regulatory requirements or the terms imposed by a third-party service or data provider.
If we become aware that an Account is being operated by a person under the age of 18 contrary to our Terms, we may restrict or close the Account and take appropriate steps in relation to any personal data associated with it.
Our age restriction does not affect any obligations that may apply to us under data protection, online safety or other laws where the Platform is likely to be accessed by children.
7How and why we use your personal data
Under data protection law, we must have a lawful basis for each purpose for which we use personal data. Depending on the circumstances, we may rely on:
your consent, where we have asked you to agree to a particular use;
performance of a contract with you, or steps taken at your request before entering into a contract;
compliance with a legal or regulatory obligation;
our legitimate interests or those of a third party, where those interests are not overridden by your rights and interests; or
another lawful basis available under applicable data protection law.
Where we rely on legitimate interests, we consider the purpose and necessity of the processing and balance those interests against the impact on you. You can contact us for further information about a legitimate interests assessment relevant to your personal data.
The table below summarises our main purposes and lawful bases:
What we use your personal data for | Our reasons |
|---|---|
Create, administer and secure your Account | Performance of our contract with you; our legitimate interests in operating and securing the Platform. |
Verify age, eligibility, identity, authority or the status of an issuer, publisher or business representative | Performance of our contract where verification is necessary to provide the requested account or feature; our legitimate interests in preventing impersonation and maintaining trust in the Platform; compliance with legal or regulatory obligations where applicable. |
Provide Platform features, including market information, watchlists, alerts, issuer or publisher profiles and community functionality | Performance of our contract with you; our legitimate interests in providing and improving the Platform. |
Host, display and manage content you publish or upload | Performance of our contract with you; our legitimate interests in operating the Platform and enabling user, issuer and publisher communications. |
Moderate content, investigate reports and complaints, enforce our Terms and Community Guidelines, and prevent fraud, scams, impersonation, market manipulation or other misuse | Our legitimate interests in keeping the Platform safe, trustworthy and compliant; compliance with legal or regulatory obligations where applicable; establishment, exercise or defence of legal claims where relevant. |
Generate and display AI Summaries or other automated content features from source material | Our legitimate interests in providing and improving the Platform and, where the feature forms part of your Account, performance of our contract with you. Where source material includes personal data, we process only what is reasonably necessary for the relevant feature. |
Process subscriptions, billing and payments | Performance of our contract with you; compliance with tax, accounting and other legal obligations; our legitimate interests in recovering sums due. |
Send service, security, account and policy communications | Performance of our contract; compliance with legal obligations; our legitimate interests in administering the Platform and keeping users informed. |
Protect our systems, detect security incidents, prevent abuse and maintain logs | Our legitimate interests in protecting users, the Platform and our business; compliance with legal and regulatory obligations where applicable. |
Analyse use of the Platform, measure performance, troubleshoot, develop features and improve user experience | Our legitimate interests in understanding and improving the Platform. Where cookies or similar technologies require consent, we rely on consent for those technologies. |
Respond to enquiries, support requests, privacy requests, complaints and disputes | Performance of our contract where relevant; compliance with legal obligations; our legitimate interests in managing our relationship with users and resolving issues. |
Comply with law, court orders, regulatory requests, exchange requirements or law-enforcement requests, and establish, exercise or defend legal claims | Compliance with legal obligations; our legitimate interests in protecting our rights and those of others; establishment, exercise or defence of legal claims. |
Corporate transactions, restructuring, financing, acquisition or sale of all or part of our business | Our legitimate interests in managing, financing, protecting or realising the value of our business and assets; compliance with legal obligations where applicable. |
Send direct marketing about our services | Consent where required; otherwise our legitimate interests or another basis permitted by PECR and applicable data protection law, including the soft opt-in where all statutory conditions are satisfied. |
8Marketing
We may send you information about Centri Markets products, features, subscriptions, promotions or related services where we are permitted to do so by applicable law.
Where consent is required for electronic marketing, we will ask for your consent before sending it. In some circumstances, we may rely on the PECR soft opt-in, but only where the legal conditions are satisfied, including where we obtained your contact details in connection with a sale or negotiations for a sale of our products or services, the marketing concerns our own similar products or services, and we gave you a clear opportunity to opt out when we collected your details and in each subsequent message. Different rules may apply to certain business contacts and corporate subscribers.
You can opt out of marketing at any time by:
using the unsubscribe link included in a marketing email;
changing any marketing preferences made available in your Account; or
contacting us at info@centrimarkets.com.
We may retain a limited suppression record after you opt out so that we can respect your preference and avoid sending further marketing to the relevant address.
We do not sell your personal data. We will not disclose your personal data to another organisation for that organisation's own direct marketing unless we have a lawful basis to do so and, where required, your consent.
9Who we share your personal data with
We share personal data only where reasonably necessary for the purposes described in this Privacy Policy, where you ask us to do so, or where disclosure is permitted or required by law. Depending on how the Platform is configured, recipients may include:
cloud hosting, database, storage and infrastructure providers;
authentication, identity, issuer or publisher verification and security providers;
market-data, regulatory-announcement, exchange, API and related information providers where information must be exchanged to provide or license a feature;
artificial intelligence and machine-learning service providers used to generate AI Summaries or support other Platform functionality;
email, notification, customer-support and communications providers;
analytics, performance, cookie and similar technology providers, subject to any consent requirements that apply;
payment processors, billing providers and financial service providers used to process Paid Accounts;
contractors and service providers assisting with moderation, fraud prevention, security, development or operational support;
professional advisers, including lawyers, accountants, auditors and insurers, subject to appropriate confidentiality obligations;
law enforcement agencies, courts, regulators, exchanges, market operators or other competent authorities where disclosure is required or reasonably necessary for compliance, investigation or protection of rights; and
prospective purchasers, investors, lenders, advisers or other parties involved in a merger, financing, restructuring, acquisition, asset sale, insolvency or other corporate transaction, subject to appropriate safeguards.
Where a service provider processes personal data on our behalf, we require appropriate contractual and security protections. Some recipients may act as independent controllers for particular processing, in which case their own privacy information will apply.
If you would like further information about the categories of recipients with whom we share personal data, please contact us using the details in the section “How to contact us”.
10How long your personal data will be kept
We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to provide the Platform, comply with legal and regulatory obligations, resolve disputes and establish, exercise or defend legal claims. Retention periods vary according to the nature and sensitivity of the information, the reason we use it and any applicable legal requirements.
Our general retention approach is as follows:
Account and core contractual records: for the life of the Account and generally for up to six years afterwards where reasonably required for legal, contractual or claims purposes;
billing, transaction and accounting records: for the period required by applicable tax, accounting and company-law requirements, which may be up to six years or longer where required by law;
issuer, publisher and business verification records: while the relevant Account or verification remains active and afterwards for so long as reasonably necessary to demonstrate verification, investigate misuse or deal with legal or regulatory issues;
community content and profile information: while it remains published or until deleted or the Account is closed, subject to limited retention in backups, moderation records, legal records and systems where continued retention is reasonably necessary;
moderation, complaints, fraud and security records: for a period proportionate to the seriousness of the issue and any ongoing legal, regulatory, security or repeat-offender need, which may in appropriate cases extend for up to six years;
general enquiries and support correspondence: for as long as reasonably necessary to deal with the enquiry and any follow-up issue, and longer where needed for legal or claims purposes;
marketing preferences and suppression records: for as long as necessary to manage your preferences and demonstrate compliance with marketing law; and
cookie and analytics information: for the periods described in our Cookies Policy or the relevant consent interface.
At the end of the applicable retention period, we will delete or anonymise personal data unless we have a lawful reason to retain it for longer.
11Anonymised information
We may aggregate or anonymise information for analytics, product development, research, business planning or commercial purposes. Where information has been genuinely anonymised so that no individual is identifiable by us or another person using reasonably available means, it is no longer personal data and we may use or share it without the restrictions that apply to personal data.
Information that has only been pseudonymised or de-identified but from which an individual can still be identified remains personal data and will continue to be handled in accordance with this Privacy Policy and applicable law.
12AI and automated processing
The Platform uses artificial intelligence to generate summaries, headlines, classifications or other outputs from regulatory announcements and other source material. That source material is primarily company and market information, but it may contain personal data, for example the names or roles of directors, officers or other individuals mentioned in an announcement.
We may use third-party AI providers to process source material and generate outputs. Where those providers process personal data on our behalf, we will use appropriate contractual and data protection safeguards. We do not intentionally send more personal data to an AI provider than is reasonably necessary for the relevant feature.
We may also use automated tools to support security, fraud detection, moderation, analytics and service operation. We do not currently use personal data to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you within the meaning of UK data protection law.
If we introduce solely automated decision-making of that kind in the future, we will update this Privacy Policy and provide the information and safeguards required by law.
13Transferring your personal data out of the UK
Some of the service providers and systems we use may be located outside the United Kingdom, or may access personal data from another country. This means that personal data may be transferred internationally in connection with the Platform.
Where a transfer of personal data from the UK is restricted under the UK GDPR, we will use a lawful transfer mechanism. Depending on the destination and circumstances, this may include relying on UK adequacy regulations, entering into the UK International Data Transfer Agreement (IDTA), using the UK Addendum to the European Commission Standard Contractual Clauses, implementing another approved safeguard, or relying on a specific exception permitted by law. Where required, we will also carry out any appropriate transfer risk or data protection assessment.
You can contact us if you would like further information about the safeguards used for a particular category of international transfer.
14Your rights
You generally have the following rights in relation to your personal data. These rights are subject to conditions and exemptions under applicable law and can usually be exercised free of charge.
Right | What it means |
|---|---|
Access to a copy of your personal data | The right to ask for confirmation that we process your personal data and to receive a copy of personal data we hold about you, together with certain information about the processing. |
Correction (rectification) | The right to require us to correct inaccurate personal data and, in appropriate circumstances, complete incomplete personal data. |
Erasure (the right to be forgotten) | The right to require us to delete personal data in certain circumstances. |
Restriction of use | The right to require us to restrict processing of personal data in certain circumstances, for example while accuracy is being contested. |
Data portability | The right, in certain circumstances, to receive personal data you provided to us in a structured, commonly used and machine-readable format and/or have it transmitted to another controller. |
Object to processing | The right to object at any time to direct marketing, including related profiling, and in certain circumstances to object to processing based on legitimate interests. |
Rights relating to automated decision-making | The right, in circumstances covered by law, not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you. We do not currently make decisions of this kind through the Platform. |
If you would like to exercise a right, please contact us using the details below. We may ask you for information reasonably necessary to verify your identity and understand your request. Please tell us which right you want to exercise and, where relevant, the personal data or processing to which your request relates.
You can find more information about your rights on the Information Commissioner's Office (ICO) website at https://ico.org.uk/.
15Keeping your personal data secure
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures are selected having regard to the nature of the personal data, the risks involved and the technology reasonably available to us.
We restrict access to personal data to personnel, contractors and service providers who have a genuine need to access it for their role and who are subject to appropriate confidentiality and security obligations.
We maintain procedures for identifying and responding to suspected personal data breaches. Where required by law, we will notify the ICO and affected individuals of a personal data breach.
No online service can guarantee absolute security. You are responsible for keeping your Account credentials secure and should notify us promptly if you suspect unauthorised access to your Account.
16How to complain
Please contact us first if you have any questions or concerns about our handling of your personal data. We will try to resolve your concern promptly.
You also have the right to lodge a complaint with the Information Commissioner's Office. Information about making a complaint is available at https://ico.org.uk/make-a-complaint and the ICO can be contacted by telephone on 0303 123 1113.
17Changes to this privacy policy
We may update this Privacy Policy from time to time to reflect changes to the Platform, our processing activities, technology, service providers, law or regulatory guidance. We will publish the updated version and identify its effective or version date.
Where a change is material, we will take reasonable steps to bring it to your attention, for example by email, an in-app notice or another appropriate method.
18How to contact us
For questions about this Privacy Policy, our privacy practices, your rights or a complaint, please contact us using the details below:
Name: Centri Markets Ltd
Email: info@centrimarkets.com
Postal address: 28 Ockendon Road, London, England, N1 3NP