Legal

Privacy notice

How we collect, use and protect your personal data.

Last updated: 7 October 2026

Invictus Heritage respects your privacy. This notice explains what personal data we hold about you, why we hold it and the choices you have. It applies to visitors to this website, to people who send us an enquiry and to prospective clients. It is written to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Invictus Heritage is the controller of your personal data. This means we decide how and why it is used.

London office: 22 Bishopsgate, London
Email: info@invictus-heritage.com · Telephone: 1-800-699-9424

2. Data we collect

We collect only what we need. Depending on how you deal with us, this may include:

Identity and contact details – your name, email address, telephone number and investor type, when you send an enquiry or call us.
Enquiry content – anything you choose to tell us in a message or during a consultation.
Onboarding information – if you apply to become a client, details such as date of birth, address, identification documents, financial circumstances, investment experience, source of funds and beneficiary details.
Technical data – your IP address, browser type and the pages you visit, collected when you use this website.
Correspondence records – copies of emails and, where permitted by law and notified to you, recordings of telephone calls.

We do not knowingly collect data from anyone under 18. Please do not send us special category data (such as health information) unless we specifically ask for it.

3. How we use it

To answer your enquiry and arrange a consultation with a partner.
To assess whether our services are suitable for you and whether you qualify as a qualified or professional investor.
To carry out identity, anti-money laundering and sanctions checks.
To open, administer and report on your account if you become a client.
To meet our legal, regulatory and record-keeping obligations.
To keep this website secure and working properly.
To send you market commentary or firm news, only where you have agreed or where the law allows. You can opt out at any time.

4. Lawful bases

We rely on the following lawful bases under the UK GDPR:

Contract – where we need your data to take steps before entering into an agreement with you, or to perform that agreement.
Legal obligation – where the law requires it, for example anti-money laundering checks and record keeping.
Legitimate interests – to respond to enquiries, to run and protect our business and website and to keep in touch with professional contacts. We balance these interests against your rights.
Consent – for non-essential cookies and certain marketing. You may withdraw consent at any time.

We never sell your personal data. We share it only where necessary, with:

Our offices in London, Chicago, Singapore and Dubai, so the right partner can assist you.
Service providers who act on our instructions, such as IT, hosting, email, identity verification and client portal providers.
Brokers, exchanges, clearing firms and custodians, where needed to provide services to clients.
Professional advisers, such as lawyers, auditors and insurers.
Regulators, tax authorities, law enforcement and courts, where the law requires it.

6. International transfers

Because we operate from offices in the United Kingdom, the United States, Singapore and the United Arab Emirates, your data may be transferred outside the UK. Where a country does not have UK adequacy regulations, we protect your data with appropriate safeguards, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You may ask us for a copy of the relevant safeguards.

7. How long we keep it

We keep personal data only for as long as we need it. As a guide:

Client records and anti-money laundering records: for the period required by law after the relationship ends, currently at least five years under UK anti-money laundering rules.

When data is no longer needed, we delete it securely or make it anonymous.

8. Your rights

Under data protection law you have the right to:

Ask for a copy of the personal data we hold about you.
Ask us to correct data that is wrong or incomplete.
Ask us to delete your data, where there is no good reason for us to keep it.
Ask us to restrict how we use your data.
Object to our use of your data based on legitimate interests, and to direct marketing at any time.
Ask us to transfer data you gave us to another organisation, in a common format.
Withdraw consent, where we rely on it.

To use any of these rights, email info@invictus-heritage.com. There is normally no fee and we will reply within one month. We may need to confirm your identity first. Some rights are limited where we must keep data by law.

9. Cookies

Cookies are small files stored on your device. This website uses only the cookies needed to make it work and keep it secure. If we introduce analytics or other non-essential cookies, we will ask for your consent first and update this notice. You can also block or delete cookies in your browser settings.

10. Contact and complaints

For any question about this notice or your personal data, please email info@invictus-heritage.com or call 1-800-699-9424, Monday to Friday, 9:00–17:00 (US Eastern Time).

If you are unhappy with how we have handled your data, you may complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would, however, appreciate the chance to resolve your concern first.

We may update this notice from time to time. The date at the top shows when it last changed.