Who we are
Rest Capital Ltd ("Rest Capital", "we", "us", "our") is a treasury management platform that helps UK SMEs invest idle cash in money market funds.
| Registered Address | 2 Old Yard, London, NW10 5DZ |
| Company Number | 16621533 |
| ICO Registration Number | ZC082224 |
Rest Capital Ltd is an Appointed Representative of Risksave Technologies Ltd, authorised and regulated by the Financial Conduct Authority (FRN: 775330).
Data Protection Contact:
Email: privacy@rest.capital
Post: Data Protection, Rest Capital Ltd, 2 Old Yard, London, NW10 5DZ
Email: privacy@rest.capital
Post: Data Protection, Rest Capital Ltd, 2 Old Yard, London, NW10 5DZ
What this notice covers
This notice explains how we collect, use, store, and protect your personal data when you:
- Visit our website
- Create an account with us
- Use our treasury management services
- Communicate with us
What personal data we collect
Information you provide
| Category | Examples |
|---|---|
| Identity Data | Full name, date of birth |
| Contact Data | Email address, phone number, business address |
| Business Data | Company name, company number, role/position |
| Identity Verification (KYC) | Passport or driving licence copy, proof of address |
| Financial Data | Bank account details (sort code, account number) |
| Transaction Data | Payment history, investment transactions |
Information we collect automatically
| Category | Examples |
|---|---|
| Technical Data | IP address, browser type, device information |
| Usage Data | Pages visited, features used, time spent |
Information from third parties
| Source | Data |
|---|---|
| Open Banking (Yapily) | Bank account balances, transaction history (with your consent) |
| Custody Provider (Wealthkernel) | Investment holdings, transaction confirmations |
| Identity Verification Services | KYC check results |
| Companies House | Company information for business verification |
How we use your data
| Purpose | Lawful Basis |
|---|---|
| Create and manage your account | Contract performance |
| Provide treasury management services | Contract performance |
| Connect to your bank accounts via Open Banking | Consent |
| Execute investments on your behalf | Contract performance |
| Verify your identity (KYC/AML) | Legal obligation |
| Prevent fraud and financial crime | Legal obligation |
| Comply with FCA and regulatory requirements | Legal obligation |
| Send service communications | Contract performance |
| Send marketing communications | Consent (you can opt out) |
| Improve our services | Legitimate interest |
| Monitor and fix application errors | Legitimate interest |
| Respond to your enquiries | Legitimate interest |
Who we share your data with
We share your data only where necessary:
| Recipient | Purpose | Safeguards |
|---|---|---|
| Risksave Technologies Ltd | Our FCA Principal - regulatory oversight | AR Agreement |
| Yapily Ltd | Open Banking connectivity | Data Processing Agreement |
| Wealthkernel Ltd | Investment custody and execution | Data Processing Agreement |
| AWS (Amazon Web Services) | Cloud hosting infrastructure | Data Processing Agreement, UK data centre |
| Sentry | Application error and performance monitoring | Data Processing Agreement, SCCs, EU data centre |
| Google LLC | Business productivity tools | Data Processing Agreement, SCCs |
| Identity verification providers | KYC checks | Data Processing Agreement |
| Regulators (FCA, ICO, HMRC) | Legal/regulatory compliance | Legal obligation |
| Law enforcement | When legally required | Legal obligation |
We do not sell your personal data to third parties.
International transfers
Your data is primarily stored in the UK (AWS London region). Where data is transferred outside the UK (e.g., to US-based service providers), we ensure appropriate safeguards are in place:
- UK International Data Transfer Agreement (IDTA)
- Standard Contractual Clauses with UK Addendum
- UK Extension to EU-US Data Privacy Framework (where applicable)
How long we keep your data
| Data Type | Retention Period | Reason |
|---|---|---|
| Identity and KYC documents | 6 years after relationship ends | AML regulations, STOB 12.3 |
| Transaction records | 7 years | FCA and tax requirements |
| Account information | Duration of relationship + 6 years | Legal claims limitation |
| Marketing preferences | Until you withdraw consent | Consent-based |
| Website analytics | 26 months | Service improvement |
After these periods, your data is securely deleted.
Your rights
Under UK GDPR, you have the right to:
| Right | Description |
|---|---|
| Access | Request a copy of your personal data |
| Rectification | Ask us to correct inaccurate data |
| Erasure | Ask us to delete your data (where legally permitted) |
| Restriction | Ask us to limit how we use your data |
| Portability | Receive your data in a portable format |
| Object | Object to processing based on legitimate interest |
| Withdraw consent | Withdraw consent at any time (where consent is the basis) |
| Automated decisions | Not be subject to solely automated decisions with legal effects |
To exercise any of these rights, contact us at: privacy@rest.capital
We will respond within one calendar month. This may be extended by two months for complex requests, and we will inform you if this is necessary.
Cookies
Our website uses cookies for:
- Essential functionality (session management)
- Analytics (understanding how you use our site)
- Preferences (remembering your settings)
You can manage cookie preferences through your browser settings.
Security
We take the security of your data seriously. We implement appropriate technical and organisational measures including:
- Encryption of data in transit and at rest
- Multi-factor authentication
- Regular security assessments
- Staff training and awareness
- Incident response procedures
Marketing
We may send you marketing communications about our services if you have consented or if you are an existing customer and the communications relate to similar services.
You can opt out at any time by:
- Clicking "unsubscribe" in any marketing email
- Emailing privacy@rest.capital
- Updating your preferences in your account
Changes to this notice
We may update this notice from time to time. We will notify you of significant changes via email or through our platform.
Complaints
If you are unhappy with how we have handled your data, please contact us first at privacy@rest.capital so we can try to resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: ico.org.uk
Contact us
Rest Capital Ltd
2 Old Yard, London, NW10 5DZ
Email: privacy@rest.capital
General Enquiries: hello@rest.capital
2 Old Yard, London, NW10 5DZ
Email: privacy@rest.capital
General Enquiries: hello@rest.capital