Privacy Policy

Protecting your personal data and assets is our highest priority. We are fully committed to safeguarding them.

Greenline Finthor collects and stores information essential to your trading activity on our trading platform. The way we collect, use, and store this information is outlined in the Privacy Policy below.

The following principles guide our policy:

• We are committed to being fully transparent about how we collect and store your personal data:

Our goal is to ensure you understand how we collect and process your data so you can make informed decisions. We follow clear guidelines and processes for handling information on this official website. Our policy explains how it works and the specific methods we use, giving you transparent, concrete details about how your information is used. You’re in the driver’s seat.

We’ll promptly share information whenever we determine you should be informed. Transparency is at the heart of how we operate.

Our experienced team is available to answer any questions about our processes, including our obligations under New Zealand law. Contact us at info@greenline-finthor.com.

• We will not use personal data for any purpose other than as described in our Privacy Policy.

We may process personal data for the essential operation of Greenline Finthor services and to connect trader-members with third-party trading platforms. We may also use this data to maintain and improve our official website and services, protect our rights, and meet regulatory or other legal obligations. In addition, we process personal data as needed to deliver administrative and other business functions related to the Services provided to you.

To provide better, more personalised services that meet your preferences and needs, Greenline Finthor uses personal data.

• To access and use the essential tools to protect your personal data and safeguard your rights:

You can contact us at any time to access all personal information we hold about you. We can update or delete it on request. We also support requests to transfer your data to you or to a nominated third party. These services are provided to help you exercise your rights to privacy and control.

• Safeguard your personal information:

We use bank-grade security to protect your data. While no system can be guaranteed 100%, we continually upgrade our technology and reinforce existing controls to maintain the highest possible level of protection.

We maintain a comprehensive privacy policy and industry-leading security measures.

1. The Scope?

This policy sets out our procedures for the collection, processing, and sharing of personal data relating to natural persons.

Our policy applies to all identifiable natural persons. This includes anyone who may be, or has already been, identified in connection with data entrusted to us, or data we can access and/or combine.

As defined in the Privacy Policy, data processing specifically refers to the storage, management, and organisation of personal data.

We do not collect, or seek to collect, any information about individuals under 18. We also do not permit anyone under 18 to use our platform for any purpose. If we discover any user or data relating to a person under 18, we will delete that information immediately.

2. What personal information do we store?

When you register with us, we collect the personal information needed to enable you to use our services. Where required, we may also request additional details to verify ownership of your account. To maintain and improve service quality, we collect and analyse data about how you use our platform and the services of our third-party partners.

3. You are under no obligation to provide your personal data to the company.

While you’re not obliged to provide your data, choosing not to may limit the services we can offer and could restrict your access to our platform.

4. What personal information do we collect? When you visit our website, we may collect the following personal information:

We do not collect data that could personally identify you. We do collect information such as your account activity, users’ IP addresses, and the date and time of access. For maintenance, security, and support, we retain system crash reports, browser details, and the type of device used to access your account. We also record the language associated with your account.

We only collect and store the personal data you consent to provide to us when you connect with a third‑party trading platform through us.

The personal information you provide to third-party platforms may include your full name, address, telephone number and email address.

5. Why does the company need my personal information, and is it lawful for them to collect it?

The company collects, stores, and processes your personal information solely for the purposes outlined in this Policy. All such use and processing comply with the applicable laws of New Zealand.

The company will only handle, process, or transmit your data in accordance with the relevant laws of New Zealand. The legal bases for this are:

• You have agreed that the company may store and process your personal data. By submitting your personal data to the company, you authorise us to transfer it to the relevant third-party trading platform. You have consented to the processing of your personal data for one or more purposes.
• To enhance services, establish or defend legal claims, and protect legitimate interests, among other purposes, the company may need to collect, store, and process your personal data.
• Processing your data is necessary to comply with legal obligations.

If you’d like more information about the data processing activities the company is required to undertake, please contact us via email.

Below, you’ll find a list of the specific purposes for which we may process your personal data, along with the legal bases.

6. Disclosure of Personal Data to Third Parties

To store and process IP addresses, conduct user surveys and analysis, and provide related services, the company may share anonymised personal data with third-party service providers.

When you ask us to, we may share certain personal information you’ve provided with third-party services. In such cases, your data will be handled in line with that company’s privacy policy. This may include one or more digital trading platforms.

To better serve our clients and continually improve our services, the company may share personal information with its affiliates and partner organisations.

Where required by law, or to protect the company’s rights and assets and those of our third-party partners, we may disclose data to relevant legal or regulatory authorities.

In connection with significant corporate transactions—such as the sale of the company or when seeking investment or financing—we may share relevant data in a lawful and appropriate manner. This also applies in the event of a merger, restructuring, consolidation, or bankruptcy, in accordance with applicable law.

7. Cookies and Third-Party Services

Cookies and similar technologies may be used for site analytics and in collaboration with advertising partners, in accordance with applicable laws and standard practice.

Cookies are small files stored on your device when you visit a website. We use them to collect information about your browsing behaviour and preferences so we can personalise and enhance your experience. Cookies allow us to remember your settings and tailor our services accordingly. They are also used for site analytics and to gather statistics that inform our strategic planning.

There are two main types of cookies used on this site. Session cookies are stored only for the duration of your visit and are deleted when you close your browser. Persistent cookies remain in your browser after your session ends. These help the site recognise you when you return and make the site easier to use.

Types of cookies:

Cookies may be used where necessary, for their intended purposes:

Cookies are blocked or have been deleted

If you’d like to delete cookies or prevent them from being set, you can do this in your browser settings. Follow the links below for step-by-step instructions for the most commonly used browsers.

• firefox
• Microsoft Edge
• Google Chrome
• safari

If you block cookies, some functions and site features may not work as intended.

ONLINE TRACKING NOTICE

Your personal data will be retained for as long as necessary to perform the operations described in this policy. It may be kept longer where required by local laws, regulations, or our company policies.

At your request and discretion, your personal data will be shared with third-party trading platforms for 12 months. When that period ends, and with your consent, it will be shared for a further 12 months.

As part of our operations, we regularly review all personal data to determine whether it remains necessary.

9. Transfers of personal data to third countries or international organisations

Where required to provide our services or for security reasons, we may transfer personal data to third countries (countries outside your own) and to international organisations, using robust security protocols. We maintain data security to the highest practicable standard to protect your information and ensure you retain access to legal remedies and rights in all cases.

All residents of the EEA (European Economic Area) are covered by data protection laws and safeguards.

• All data transfers are made under EU jurisdiction and competence and follow the standard data protection protocols set out in Article 45(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”).
• All data transfers between public entities or authorities comply with Article 46(2). These transfers are governed by a legally binding, enforceable agreement.
• Data transfers are conducted in accordance with the European Commission’s Standard Contractual Clauses under Article 46(2)(c) of the GDPR, which set the conditions for such transfers. The Clauses are available on the European Commission’s official website at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

To learn more about the specific security measures the company uses to protect your personal data during transfers to third countries, please email your request to info@wealthwaydigital.uk.

10. Protection of Personal Data

Personal data is safeguarded with the highest level of technical and organisational controls, in line with industry best-practice procedures. These measures help prevent unlawful or accidental destruction, as well as the loss or alteration of that data.

Although we apply the highest level of care and best-practice procedures for data protection, as required by law, we cannot guarantee that your personal data will always be completely error-free. Accordingly, we are not liable for any disclosure of personal data or for incidental, intangible, or consequential loss or damage. This includes situations beyond our control, such as transmission errors, unauthorised third-party access, or similar causes.

If we receive legally binding requests from regulators or other competent authorities, we may be required to disclose your personal information. Once disclosed under such legal obligations, we cannot control how those bodies handle, store, or safeguard your data.

Any information sent over the internet, including personal information, carries a risk of interception and is not 100% secure. The Company cannot guarantee the security of any data transmitted online.

11. Hyperlinks to third-party websites

This official website may include links to third-party applications and websites. Please note that these third parties are not our affiliates, are not verified or controlled by us, and our privacy policy does not apply to them. They have their own policies and practices for collecting and processing personal information, and we are not responsible for those activities. Please use at your own discretion.

Always read a company or service’s privacy policy on their official website before sharing any personal information. Ensure their data collection, use, and processing practices align with your preferences and priorities. Any information you choose to share should be provided directly to the service provider.

12. Policy Amendments

We may update or amend this policy at any time. We will notify you of any changes via our official website and other appropriate channels. The updated privacy policy will be published on the website and will take effect immediately upon publication, unless stated otherwise.

13. Your rights over your personal data

You have full control and the final say over how all personal data is used, including the right to verify its accuracy, correct any errors, and choose to delete it or restrict the scope and nature of our processing.

This page provides information relevant to residents of the EEA:

Your personal information is protected under the rights set out herein. You can exercise these rights immediately by emailing the address below.

Accessing Your Rights

If the personal data you have provided to us is accurate, you may access it at any time. Any of your personal data that we process is accessible to us and therefore verifiable.

You can request access to your personal data at any time for verification, and we will provide it in electronic format. If you request additional copies of the data we process beyond the first copy, a reasonable fee may apply.

Rights granted by law and under our privacy policy must not infringe on the rights of others. The company may refuse or restrict access to personal data where providing access would compromise the rights or freedoms of others.

Right to Correct Inaccuracies

Any mistakes in your personal information, whether due to omission or inaccuracy, may be corrected by you or by the Company to ensure it is processed correctly.

Erasure Rights

You have the right to request the deletion of your personal data in the following situations: 1) it has been processed without your consent or outside legal limits; 2) you ask us to remove it and the Company has no legal obligation to retain it; 3) you withdraw consent or object to any processing by us that, while lawful, is based on our or a third-party provider’s legitimate interests; and 4) we are required by law to delete it.

The right to deletion is overridden by legal obligations under EU law or the laws of any Member State. The same applies where data is required for the exercise or defence of legal claims.

Right to Restrict Data Processing

You are entitled to request that we restrict the processing of your personal information if you believe it is inaccurate.

Upon your request to restrict the use of your personal data, we will delete it unless: 1) law within the European Union or any Member State prevents this; 2) with your consent, it is necessary for the exercise or defence of legal claims; 3) deletion would compromise the rights of another natural person.

Your Right to Data Portability

You have the right to access and review any personal data you have provided, provided you have consented to its collection and the processing is carried out by automated systems.

You have the right to request the transfer of any or all of your personal data to another company or organisation, where technically feasible. This does not affect your right to have your data deleted. This right cannot be exercised if doing so would infringe the rights or freedoms of another individual.

Right to challenge the processing of your personal data

Even when the Company relies on its legitimate interests, or those of a third-party service provider, you have the right to object to the processing and request that it stop. However, this right does not apply where there is a compelling legal need to continue processing, including to establish, exercise, or defend legal claims. In such circumstances, we may continue to process your personal data.

You may request at any time that your personal data not be processed for direct marketing purposes.

Your Right to Decline or Withdraw Consent

You may withdraw your consent to our processing of your personal data at any time, with immediate effect where practicable. This does not apply retrospectively to any processing carried out before you withdrew your consent.

If you’re dissatisfied for any reason, you have the right to lodge a complaint with any relevant legal, regulatory, or other supervisory authority.

If you believe your rights and freedoms have been infringed in relation to the processing of your personal data, the Member States of the European Union have designated regulatory and supervisory authorities to handle such matters. You may lodge a complaint with the relevant authority at your discretion.

Section 13 sets out the circumstances in which your personal data rights may be limited under European Union law or the laws of its Member States.

Once we receive your request regarding your personal data and its processing, we will provide access to the information you have requested, as set out in Section 13 of this policy. We may extend this timeframe by up to two months, depending on the volume of requests and the nature of your request. If an extension is required, we will notify you of the revised deadline within one month of receiving your request.

Where possible, we will provide the requested information electronically at no charge, unless doing so would conflict with the law or the provisions of Section 13. We reserve the right to charge a reasonable fee or refuse a request if it is considered vexatious, excessive, or repetitive.

For data protection and security, we may request further proof of identity if there is any reasonable doubt about the identity of the person requesting personal data.