Thames Capital Limited (“we”, “us”, or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you interact with our website, services, and investment offerings.
Thames Capital Limited is a property bond investing firm introducing secured fixed-income investment opportunities to qualifying individuals and institutions. We are registered in the United Kingdom with our principal office at 167-169 Great Portland Street, London, W1W 5PF.
We use your personal data to:
Assess your eligibility to invest in our property bonds
Perform legal and regulatory compliance checks (e.g., KYC/AML)
Facilitate your investment and process transactions (introduction basis)
Communicate with you about investment opportunities
Deliver customer support and respond to inquiries
Send regulatory updates, market insights, and relevant news (if opted in)
We process your personal data under the following lawful bases:
Consent – where you have given clear permission for processing
Contract – to fulfil contractual obligations (e.g. investment agreements)
Legal Obligation – to comply with financial regulations and anti-money laundering laws
Legitimate Interest – to provide and improve our services and manage investor relationships
We retain your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying legal, accounting, or regulatory requirements. This typically means retaining your data for up to 6 years after the end of your relationship with us.
Under the UK GDPR, you have the right to:
Access your personal data
Request correction or deletion of your data
Object to processing or request restriction
Withdraw consent at any time (where applicable)
Request data portability
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.
If we transfer your data outside the UK or EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses or transfers to countries with adequate data protection laws.
