1. Who We Are

Ozan Limited ("we", "us", "our") is committed to protecting the privacy of our business customers and website visitors. We are registered in England and Wales (Company No. 09561722) and authorised by the Financial Conduct Authority (FRN 900482).

This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For privacy-related enquiries, contact us at enquiries@ozanuk.com or write to our registered office: Epworth House Spaces Shoreditch, 25 City Road, London EC1Y 1AA.

2. Data We Collect

We may collect and process the following categories of personal data:

• Business contact information — names, email addresses, telephone numbers, and job titles of individuals acting on behalf of our business customers
• Identity and verification documents — as required by our AML and KYC obligations under the Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017
• Transaction data — records of payment transactions processed through our services
• Website usage data — IP addresses, browser type, and pages visited, collected via standard server logs
• Correspondence — records of communications with us, including emails and complaint correspondence

3. Legal Basis for Processing

• Contractual necessity — to provide regulated payment services under our agreement with you
• Legal obligation — to comply with AML regulations, FCA rules, and other applicable law
• Legitimate interests — to operate and improve our services, prevent fraud, and manage our business securely
• Consent — where we have obtained your explicit consent, for example for optional communications

4. How We Use Your Data

• Provide and administer our regulated payment services
• Carry out customer due diligence and ongoing monitoring as required by law
• Process and record payment transactions
• Respond to enquiries and complaints
• Meet our reporting and record-keeping obligations to the FCA and other authorities
• Detect, investigate, and prevent fraud or financial crime

5. Data Sharing

We do not sell personal data to third parties. We may share data with:

• Regulators and law enforcement, where required by law (including the FCA, HMRC, and law enforcement agencies)
• Safeguarding account providers — authorised credit institutions holding client funds
• Professional advisers — legal, compliance, and audit professionals bound by confidentiality
• Technology service providers — acting as data processors under contractual data processing agreements

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with our legal and regulatory obligations. Under AML regulations, customer due diligence records are retained for a minimum of 5 years from the end of the business relationship. Transaction records are retained for a minimum of 5 years from the date of the transaction.

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — to obtain a copy of the personal data we hold about you
• Right to rectification — to have inaccurate data corrected
• Right to erasure — to request deletion of data in certain circumstances
• Right to restrict processing — to limit how we use your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to processing based on legitimate interests

To exercise any of these rights, contact us at enquiries@ozanuk.com. We will respond within one calendar month.

8. Complaints to the ICO

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk / 0303 123 1113.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be notified to affected individuals and posted on this page with an updated effective date.