Privacy Policy

Version 1.0 · Last updated 16 October 2026

Group International Ltd ("We") are committed to protecting and respecting your privacy.

This policy, together with our terms of use, sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. Where we rely on your consent, for example for non-essential cookies or marketing communications, we will ask for it separately and you can withdraw it at any time.

About www.ukbullion.com

UK Bullion is a trading name of Group International Ltd, a company registered in England and Wales (registration number 04497345), whose registered office is at Innovation House, 410, Stafford Road, Wolverhampton, West Midlands, WV10 6AJ.

We will only process personal information which you provide to us in accordance with the UK General Data Protection Regulation (UK GDPR), the Privacy and Electronic Communications Regulations 2003 (PECR) and the Data Protection Act 2018. For the purpose of UK GDPR, the data controller is Group International Ltd.

If you have any questions in relation to our privacy policy or how we collect, use or store your personal information, you can contact us by telephone at: 01902 623256, by post at: Innovation House, 410, Stafford Road, Wolverhampton, West Midlands, WV10 6AJ, or by email at: [email protected] .

How we use your information and our lawful bases

We only use your personal information where we have a lawful basis to do so. The main lawful bases we rely on are set out below.

The information we collect

Information you give us. You may give us information about you by filling in forms on our site or by corresponding with us by phone, email or otherwise — for example when you register to use our site, subscribe to our newsletter, search for a product, place an order, or report a problem. This may include:

• Identity data — your name and date of birth, and, where required for identity verification, a personal description and photograph.
• Contact data — your postal address, telephone number and email address.
• Payment data — your billing details and records relating to a payment, such as its status. Your card details are entered directly with our payment provider, Trust Payments, when you check out; we do not collect or store your full card number ourselves.
• Account data — your login details and account preferences.
• Marketing data — your marketing preferences and whether you have subscribed to our newsletter.

Information we collect automatically. With regard to each of your visits to our site we may automatically collect:

• Technical data — the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
• Usage data — information about your visit, including the full Uniform Resource Locator (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks and mouse-overs), and methods used to browse away from the page.

Information we receive from other sources

We may receive information about you if you use any of the other websites we operate or the other services we provide. Where we collect data that may be shared internally and combined with data collected on this site, we will inform you at the time of collection. We are also working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers) and may receive information about you from them.

Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.

When you first visit the site, we ask for your consent before placing any non-essential cookies. Analytics and advertising scripts do not run until you accept the relevant category. You can change your preferences at any time using the Cookie settings link in the footer of every page.

When you make a consent choice, your preferences are saved in a consent_id cookie and also stored server-side. The server-side record holds your consent preferences, the policy version in effect at the time, and — where you are logged in — a link to your account. We store a one-way hash of your IP address for audit purposes only; we do not store your IP address itself.

The table below lists the cookies we use and what information they store.

This list covers the main cookies we use, but it may not be exhaustive. Third-party services such as Google and our other partners may occasionally set additional cookies, and the exact cookies present can change as those services are updated. We keep this list under review. You can see and control the non-essential cookies in use at any time via the Cookie settings link in the footer, and you can inspect the full set of cookies stored by your browser through your browser settings.

Uses made of the information

We use information held about you in the following ways:

• To carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us.
• To provide you with information about other goods and services we offer that are similar to those you have already purchased or enquired about.
• To send you marketing communications where you have consented or where we may do so under the soft opt-in. You can unsubscribe at any time.
• To notify you about changes to our service.
• To administer our site and for internal operations, including troubleshooting, data analysis, testing, research and survey purposes.
• To improve our site and ensure content is presented in the most effective manner for you.
• To allow you to participate in interactive features of our service when you choose to do so.
• As part of our efforts to keep our site safe and secure and to prevent fraud.
• To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you, where you have accepted advertising cookies.

Individuals connected to your business

When transacting with your business under a Trade Account we may collect information on individuals connected to your business. This information may be collected from you or other independent sources. Please ensure all relevant individuals have been made aware of this Privacy Notice, and the individual rights and information it sets out. If you, or anyone else on your behalf, has provided or provides personal information on an individual connected to your business to us, you or they must first ensure that you or they have the authority to do so.

An individual connected to your business could be a director, officer or employee of a company, partner or member of a partnership, any substantial owner, controlling person, or beneficial owner.

Recording calls

When you call us by telephone, we may record or monitor calls. We do this for the purposes of quality assurance, staff training and fraud prevention. Recordings will be retained for a period of six months and then deleted, with the exception of recordings identified as pertinent in the investigation of complaints or suspected unlawful activity.

Disclosure of your information

We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.

We do not sell your personal data. We share it only where necessary for the purposes described in this policy, where you have consented, or where required by law.

We may share your information with the following categories of third party:

• Payment processing — Trust Payments Ltd. Card transactions are processed by Trust Payments. We do not store or process full card details on our own systems.
• Identity verification — Yoti Ltd. We use Yoti for electronic identity verification to meet our anti-money laundering obligations.
• Analytics and advertising — Google. We use Google Analytics and Google Ads to measure site performance and the effectiveness of advertising. These services operate under your consent choices and Google's own data processing terms.
• Advertising — Meta. We use Meta (Facebook) advertising tools to measure the effectiveness of our advertising and to show relevant ads on Meta platforms. These load only where you have accepted advertising cookies and operate under Meta's own data processing terms.
• Advertising — Microsoft. We use Microsoft Advertising (Bing Ads) to measure the effectiveness of our advertising and to show relevant ads. These load only where you have accepted advertising cookies and operate under Microsoft's own data processing terms.
• Site search. We use a third-party search provider to power product search on the site. It processes the searches you make in order to return results.
• Transactional email — our email service provider. We use a third-party email service to send order confirmations, account notifications and other transactional messages.
• Delivery and fulfilment providers. We share the name and delivery address on your order with our courier and fulfilment partners in order to despatch your goods.
• Fraud prevention and anti-money laundering agencies. We may share information with fraud prevention agencies, law enforcement, HMRC and other regulatory bodies where we are required or permitted to do so by law.
• Infrastructure and hosting providers. Our site and data are hosted on third-party infrastructure. These providers act as data processors under appropriate contractual safeguards.
• Business transfers. In the event that we sell or buy any business or assets, we may disclose your personal data to the prospective seller or buyer. If Group International Ltd or substantially all of its assets are acquired by a third party, personal data held about customers will be one of the transferred assets.

If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements, or to protect the rights, property, or safety of Group International Ltd, our customers, or others, we will do so.

Payment processing

All payment card transactions on our site are processed by Trust Payments Ltd, a regulated payment services provider authorised by the Financial Conduct Authority. We do not store, transmit or process full card details on our own systems. Trust Payments handles your card details under its own data protection obligations, and its privacy policy is available at trustpayments.com/privacy-policy .

Identity verification

To comply with our anti-money laundering obligations we are required to verify the identity of customers. We use Yoti Ltd to carry out electronic identity verification. This process may involve Yoti collecting and processing a photograph of your face (biometric data), a scan or image of your identity document, and the personal information contained within that document. This data is processed by Yoti on our behalf under a data processing agreement. We will ask for your explicit consent before initiating identity verification. Yoti's privacy policy is available at yoti.com/legal/privacy .

Advertising measurement and enhanced conversions

If you have accepted advertising cookies, then when you complete a purchase we share details of that purchase, together with your email address in a coded form, with Google, Meta (Facebook) and Microsoft (Bing). They use this to tell us which of our adverts led to a purchase. The coded email address is still personal data, because its purpose is to match the purchase to your account on their platform. Each of these companies processes the data under its own privacy terms.

If you have declined advertising cookies, these advertising tools do not load and we do not share this data with Google, Meta or Microsoft.

Where we store your personal data

The data that we collect from you may be transferred to, and stored at, a destination outside the United Kingdom. It may also be processed by staff operating outside the UK who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. Where we transfer personal data outside the UK we ensure that appropriate safeguards are in place, such as UK adequacy regulations or standard contractual clauses approved for use under UK GDPR, to ensure your data receives an equivalent level of protection. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

All information you provide to us in electronic form is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Personal, photographic and address identity documents (or copies) sent to us will be stored on a physically isolated computer system which is fully encrypted and never connected to the internet. Once this data has been copied to the isolated system, all records of the data will be permanently deleted from the system on which we received it from you.

How long we keep your information

We retain personal data only for as long as necessary for the purpose it was collected and to meet our legal and regulatory obligations. While your account is open, your order history and account details remain available to you. We do not routinely delete this information, but you can ask us to close your account and erase data we are not legally required to keep at any time. The main retention periods we apply are set out below.

Your rights

Under UK GDPR you have the following rights in relation to your personal data. To exercise any of them, please contact us at [email protected] . We will respond within one calendar month.

• Right of access. You can request a copy of the personal data we hold about you. This is commonly known as a subject access request (SAR). We will provide this free of charge unless the request is manifestly unfounded, excessive or repetitive.
• Right to rectification. You can ask us to correct personal data that is inaccurate or incomplete.
• Right to erasure. You can ask us to delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where we have no other lawful basis to retain it. This right does not apply where we are required to keep data by law, for example for AML or tax purposes.
• Right to restriction. You can ask us to restrict processing of your personal data in certain circumstances, for example while you contest its accuracy.
• Right to data portability. Where we process your data on the basis of consent or contract and by automated means, you can ask us to provide it to you in a structured, commonly used and machine-readable format, or to transmit it directly to another controller where technically feasible.
• Right to object. You can object at any time to processing of your personal data for direct marketing, and we will stop immediately. You can also object to processing based on legitimate interests; we will stop unless we have compelling grounds that override your interests or the processing is necessary for legal claims.
• Right to withdraw consent. Where we rely on your consent to process personal data, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to complain. You have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Fraud prevention and automated checks

To protect our customers and our business we carry out fraud prevention checks on orders and accounts. This may involve automated assessment of order details, payment signals, account history and device information to calculate a risk score. Orders flagged as higher risk may be subject to additional manual review before being processed. We do not make decisions that produce legal or similarly significant effects about you by solely automated means: a decision to delay, decline or cancel an order is always taken by a member of our staff. We may also share data with fraud prevention agencies and law enforcement where required.

We are also required by law to carry out anti-money laundering (AML) checks. This involves verifying your identity and, in some cases, the source of funds for high-value transactions. While we use Yoti to capture and check identity documents electronically, the outcome of every identity verification is reviewed and confirmed by a member of our staff; identity is never approved or rejected by an automated process alone. These checks are a legal obligation and cannot be opted out of. Where an AML check cannot be completed satisfactorily we may be unable to process your order.

Children's privacy

Our website and services are intended for adults and are not directed at children. You must be at least 18 years old to open an account or place an order with us. We do not knowingly collect personal data from anyone under the age of 18. If you believe that a child has provided us with their personal data, please contact us at [email protected] and we will take steps to delete it.

Changes to our privacy policy

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.

Contact

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to [email protected] .