Last updated: 1 May 2026
1. Who we are
Yellow Stone Finance Group Ltd ("Yellow Stone", "we", "us" or "our") is a private limited company registered in England and Wales under company number 10734241, with registered office at Unit 1 Verney House, 1b Hollywood Road, London, England SW10 9HS. For the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, Yellow Stone is the data controller of your personal data.
2. Information we collect
We collect personal data that you provide directly to us, data we generate as you use our services, and data we receive from third parties. This typically includes:
Identification and contact data — full name, date of birth, nationality, residential address, email address, telephone number and a government-issued identity document.
Financial and suitability data — employment status, source of funds, trading experience, net worth, tax residency, bank account details and transaction history.
Technical data — IP address, device identifiers, browser type, operating system, login timestamps, pages visited and trading platform telemetry.
Communications data — records of telephone calls, emails, live chat sessions and support tickets exchanged with our team.
3. How we use your information
We process personal data to: (a) open, operate and maintain your trading account; (b) execute, clear and settle transactions; (c) comply with our legal and regulatory obligations including anti-money-laundering (AML), counter-terrorist-financing (CTF), sanctions screening and tax reporting; (d) detect and prevent fraud, abuse and market manipulation; (e) provide client support; (f) carry out research and improve our platforms; and (g) where you have consented, send you marketing communications about products and services we believe may interest you.
4. Lawful bases
Our lawful bases for processing under Article 6 of the UK GDPR are: contract (to provide the services you request), legal obligation (to comply with financial-services and AML regulation), legitimate interests (to operate, secure and improve our business) and consent (for direct marketing and non-essential cookies). You may withdraw consent at any time without affecting prior lawful processing.
5. Sharing your information
We disclose personal data only where necessary and on a confidential basis to: liquidity providers and execution venues; banking and payment-service partners; identity-verification and AML providers; cloud-hosting and IT-infrastructure suppliers; professional advisers (auditors, lawyers, accountants); regulators, tax authorities and law-enforcement bodies; and successors in the event of a corporate transaction. We do not sell your personal data.
6. International transfers
Some of our service providers are located outside the United Kingdom. Where we transfer personal data internationally, we rely on UK adequacy regulations or the International Data Transfer Agreement (IDTA) and apply additional safeguards where appropriate.
7. Retention
We retain personal data for as long as you remain a client and for a minimum of five years after the end of our relationship, in line with our regulatory record-keeping obligations. Telephone-call recordings related to order handling are retained for at least five years and may be retained for up to seven years where required.
8. Your rights
Under the UK GDPR you have the right to access your personal data, to request correction or erasure, to restrict or object to processing, to data portability and to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. Some rights may be limited where we have an overriding legal or regulatory obligation to retain information.
9. Security
We apply administrative, technical and physical safeguards designed to protect personal data, including TLS 1.3 in transit, AES-256 encryption at rest, role-based access controls, multi-factor authentication for staff and continuous monitoring of our infrastructure.
10. Contact us
To exercise any right or to ask a question about this policy, please contact our Data Protection team at compliance@yellowstone-financial.com or by post at the registered office address above.