Data Privacy & Protection Policy

1. Data Controller Information

Crown Global Commodities Limited (Company Registration Number: 16678856), with its registered office at 128 City Road, London, United Kingdom, EC1V 2NX, is the data controller responsible for the personal data collected through this website (crownglobalcommodities.co.uk) and during our commercial onboarding procedures.

2. Scope & Legal Basis for Processing

We process business and corporate representative personal information exclusively under the following lawful bases permitted by Article 6 of the UK GDPR:

• • Contractual Necessity: Evaluating, negotiating, and executing physical commodity Sales & Purchase Agreements (SPA).
• • Legal & Regulatory Obligation: Conducting mandatory counterparty screening, PEP audits, and anti-money laundering (AML) controls mandated by UK law and the Office of Financial Sanctions Implementation (OFSI).
• • Legitimate Interests: Responding to commercial requests for quotation (RFP), managing maritime operations, and protecting against fraudulent transactions.

3. Data Retention & Security

Trade transaction records, bills of lading, and counterparty KYC submissions are maintained for a statutory period of 6 years in accordance with UK corporate and tax law. We employ robust technological and organizational security controls to protect all data against unauthorized disclosure or alteration.

4. Your Statutory Rights

Under the Data Protection Act 2018, you possess the right to access your personal data, rectify inaccuracies, request erasure where legally applicable, or object to processing. To exercise these rights, please address our compliance department in writing at compliance@crownglobalcommodities.co.uk or via post to our London registered office.