Last updated: September 2026

Goldstream Group Ltd (“Goldstream”, “we”, “us”) respects your privacy and is committed to protecting your personal information. This policy explains what we collect, why we use it and your rights.

1. Information We Collect

We may collect:

Identity and contact information, including your name, address, email and telephone number.
Account, order and transaction information.
Identity verification, KYC/AML and source-of-funds information where required.
Communications with Goldstream.
Technical information about how you use our website and services.
Marketing and cookie preferences.

Payment information may be processed securely by our payment providers.

2. How We Use Your Information

We use personal information where necessary to:

provide and administer your Goldstream account and services;
process purchases, storage, sales and deliveries;
verify identity and carry out fraud, sanctions and compliance checks;
meet legal and regulatory obligations;
protect our customers, systems and business;
respond to enquiries and provide customer support;
improve our website and services; and
send marketing where you have consented or where otherwise permitted by law.

Our lawful bases may include contract, legal obligation, legitimate interests and consent, depending on the purpose.

3. Who We Share Information With

We may share information where necessary with trusted service providers involved in payments, identity verification, technology, communications, professional services, bullion sourcing, vaulting, insurance and delivery.

We may also disclose information where required by law, a court, law-enforcement authority or other competent authority.

We do not sell your personal information.

4. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, accounting, fraud-prevention and compliance requirements.

Different records may therefore have different retention periods.

5. Security & International Transfers

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse or disclosure.

Where information is transferred outside the UK, we use appropriate safeguards where required by data-protection law.

6. Your Rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict your information, object to certain processing and request data portability. Where processing relies on consent, you may withdraw that consent.

You also have an absolute right to object to the use of your personal information for direct marketing.

See Data Requests for details.

7. Cookies

We use cookies and similar technologies for essential website functions and, where permitted, analytics and marketing.

See our Cookie Policy for further information and how to manage your preferences.

8. Contact & Complaints

Goldstream Group Ltd is the controller of personal information covered by this policy.

Email: info@gold-stream.co.uk
Company No.: 16405806
Registered Office: London WC1N 3AX

If you have concerns about how we handle your information, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO).

The ICO requires privacy information to be clear and concise while covering purposes, lawful bases, recipients, retention, international transfers and individual rights, so this is deliberately comprehensive without becoming excessive.