This privacy policy sets out how Coop Exchange Limited uses and protects your personal data.
It is provided in a layered format so you can click through to the specific areas set out below or read the full version.
Contents
- Important information and who we are
- The types of personal data we collect about you
- How is your personal data collected?
- How we use your personal data
- Disclosures of your personal data
- International transfers
- Data security
- Data retention
- Your legal rights
- Contact details
- Complaints
- Changes to the privacy policy and your duty to inform us of changes
- Third-party links
1. Important information and who we are
This privacy policy gives you information about how Coop Exchange Limited collects and uses your personal data through your use of this website, including any data you may provide when you register, sign up to our newsletter, or request any information or service from us.
This website is not intended for children and we do not knowingly collect data relating to children.
Controller
The Coop Exchange group of companies ("Group") is made up of different legal entities:
- Coop Exchange Limited, incorporated and registered in England and Wales (Register No: 13090619) — 30 Old Bailey, London, United Kingdom, EC4M 7AU (CEL UK).
- Coop Exchange Limited, incorporated and registered in Malta (Registered No: C89967) — Unit 601, Building 1, Smart City, Kalkara SCM, Malta.
- SGRC No.1 Limited, incorporated in England and Wales (Registration No. NI657922) — 11 Carnbeg Avenue, Kilbegs Road, Antrim, United Kingdom, BT41 4RA.
This privacy policy is issued on behalf of the Group so when we mention "Coop Exchange Limited", "we", "us" or "our", we are referring to the relevant company responsible for processing your data. CEL UK is the controller for this website.
If you have any questions about this privacy policy, including requests to exercise your legal rights, please contact us — see Contact details.
2. The types of personal data we collect about you
Personal data means any information about an individual from which that person can be identified.
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data – first name, last name, previous names, username, marital status, employer, title, date of birth, and gender.
- Contact Data – home address, email address, and telephone numbers.
- Technical Data – IP address, login data, browser type/version, time zone, location, plug-in types/versions, OS, device ID, and other tech identifiers.
- Profile Data – username, password, preferences, feedback, and survey responses.
- Usage Data – how you interact with and use our website and services.
- Marketing and Communications Data – preferences in receiving marketing and your communication choices.
We also collect, use and share aggregated data such as statistics or demographics which are not personal data, as they don’t directly identify you.
3. How is your personal data collected?
We collect data through:
- Your interactions with us – by filling in online forms or corresponding by post, phone, or email. This includes subscribing to services, requesting updates, entering surveys, expressing interest in a product or service, or providing feedback.
- Automated technologies or interactions – we collect Technical Data through cookies and similar technologies.
- Third parties or publicly available sources – such as Companies House and the UK Electoral Register.
4. How we use your personal data
Legal basis
We rely on one or more of the following:
- Performance of a contract – where we need to perform a contract with you.
- Legitimate interests – where necessary to conduct business and improve services.
- Legal obligation – where required to comply with the law.
- Consent – where you actively agree (e.g., to receive newsletters).
Purposes for which we use your personal data
Purpose / Use | Type of Data | Legal Basis |
---|---|---|
Manage our relationship with you (including updates and queries) | Identity, Contact, Profile, Marketing & Comms | Consent; legal obligation; legitimate interests (relationship management). |
Conduct surveys and feedback | Identity, Contact, Profile, Usage, Marketing & Comms | Consent; legitimate interests (to study and improve our services). |
Administer and protect our business and website | Identity, Contact, Technical | Legitimate interests (security, IT services); legal obligation. |
Determine eligibility for investment opportunities | Identity, Contact | Legitimate interests; legal obligation. |
Deliver relevant content and advertising | Identity, Contact, Profile, Usage, Marketing & Comms, Technical | Legitimate interests (marketing, analytics). |
Use analytics to improve our services | Technical, Usage | Legitimate interests (business development, marketing). |
Send relevant marketing communications | Identity, Contact, Usage, Profile, Marketing & Comms | Legitimate interests (marketing, service growth). |
Conduct market research | Identity, Contact | Legitimate interests (service improvement). |
Direct marketing
We only send you updates if you have subscribed through our website.
Third-party marketing
We do not support third-party marketing. If that ever changes, we’ll obtain your consent first.
Opting out
You can opt out anytime by emailing privacy@coop.exchange.
You may still receive essential administrative updates.
Cookies
Our website uses cookies to distinguish you from other users.
We use:
- Strictly necessary cookies – required for site operation.
- Analytical/performance cookies – track usage to improve site function.
- Functionality cookies – remember preferences (e.g., language or region).
We do not use tracking cookies nor share cookie data with third parties.
5. Disclosures of your personal data
We may share data with entities involved in a sale, transfer, or merger of our business.
All third parties must treat your data securely and lawfully, processing it only per our instructions.
6. International transfers
We do not transfer your personal data outside the UK.
7. Data security
We use appropriate technical and organisational measures to prevent accidental loss, misuse, or unauthorised access.
Access is limited to those with a business need and bound by confidentiality.
8. Data retention
We retain your personal data only as long as necessary for the purposes collected, including legal, tax, and regulatory requirements.
You can request deletion of your data at any time.
In some cases, we may anonymise your data for statistical use indefinitely.
9. Your legal rights
Under data protection law, you have the right to:
- Request access to your personal data (“subject access request”).
- Request correction of inaccurate or incomplete data.
- Request erasure of data in certain cases.
- Object to processing for legitimate interests or direct marketing.
- Request transfer (data portability) of your data.
- Withdraw consent where applicable.
- Request restriction of processing in specific situations.
Requests are free of charge unless repetitive or excessive.
We aim to respond within one month.
10. Contact details
Email: privacy@coop.exchange
Address: 30 Old Bailey, London, United Kingdom, EC4M 7AU
11. Complaints
You can complain to the Information Commissioner’s Office (ICO) (www.ico.org.uk).
We’d appreciate the chance to resolve concerns before you approach them.
12. Changes to the privacy policy and your duty to inform us of changes
We keep this policy under regular review.
Please keep us informed of any changes to your personal data (e.g., new address or email).
13. Third-party links
Our website may include links to third-party websites, plug-ins, or apps.
Clicking these links may allow third parties to collect data about you.
We do not control these sites and recommend reviewing their privacy policies.