1. Who we are
Met Capital Ltd (“Met Capital”, “we”, “us”) is a company registered in England and Wales (Company No. 12735600), with operations in London and research activities in Zurich. We are the controller of the personal data described in this policy.
This policy explains what personal data we collect through this website (met.capital), the client portal, the staff portal, and our contact and careers forms; why we collect it; who we share it with; and the rights you have. Where we act for clients under separate agreements, those agreements and any accompanying privacy notices take precedence over this policy.
2. Data we collect
The data we collect depends on how you interact with us:
- Website visitors. Technical data such as IP address, browser type, device, pages viewed, and approximate location, collected through analytics cookies (see section 8).
- Contact and careers forms. Your name, email address, and the content of your message. For career enquiries, also your area of interest and any profile or portfolio link you choose to provide.
- Client portal users. Identity and contact details (name, address, phone, email, date of birth, nationality), tax residency and identification numbers, source-of-funds and occupation information, identity documents (such as passport copies) and proof of address, bank and payout account details, records of your investment vehicles and balances, documents we share with you, and the requests you submit (address, bank, document, and withdrawal requests) including their review status.
- Staff portal users (employees). Employment records including job details, personal and emergency contact details, home address, time-off requests and balances, and documents exchanged with HR.
- Security logs. Authentication events and, for the staff portal, records of failed login attempts used to prevent abuse.
3. How we use your data
We use personal data to:
- operate and secure this website and its portals, including authenticating you and maintaining your session;
- respond to enquiries and evaluate career applications;
- provide client services, including maintaining account records, processing withdrawal and change requests, and sharing documents;
- meet legal and regulatory obligations, in particular customer due diligence, anti-money-laundering and counter-terrorist-financing requirements, and record-keeping duties;
- administer employment, including time off, HR records, and workplace obligations;
- detect, investigate, and prevent fraud and unauthorised access;
- understand how the website is used so we can improve it.
4. Legal bases
Under UK data protection law (UK GDPR and the Data Protection Act 2018) we rely on the following bases:
- Contract — to provide the services you have engaged us for, or to take steps at your request before entering into a contract, including responding to enquiries and applications.
- Legal obligation — to satisfy customer due diligence, anti-money-laundering, tax reporting, employment, and record-keeping requirements.
- Legitimate interests — to secure our systems, prevent fraud, administer our business, and improve our website, where these interests are not overridden by your rights.
- Consent — for analytics cookies, which you can decline through your browser settings or by disabling cookies for this site.
5. Who we share data with
We do not sell personal data. We share it only with service providers who process it on our behalf under contractual confidentiality and security obligations, and with authorities where the law requires it. Our current infrastructure providers are:
- Netlify, Inc. — website hosting, form submissions, serverless functions, and storage for the staff portal.
- Supabase, Inc. — database, authentication, and document storage for the client portal.
- Google LLC — website analytics (Google Analytics).
We may also disclose data to regulators, law enforcement, courts, or professional advisers where necessary to comply with legal obligations, protect our rights, or in connection with a reorganisation of our business.
6. International transfers
Our service providers may process data outside the United Kingdom and Switzerland, including in the United States and the European Economic Area. Where data leaves the UK we rely on safeguards recognised under UK law, such as the UK’s adequacy regulations, the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
7. How long we keep data
We keep personal data only as long as necessary for the purposes above. Client identification and transaction records are kept for at least five years after the end of the relationship, as required by anti-money-laundering rules, and longer where other legal duties apply. Employment records are kept for the duration of employment and for the periods required by employment and tax law. Contact and careers form submissions are kept for up to twelve months unless a relationship follows. Analytics data is retained according to the settings of our analytics provider.
8. Cookies and analytics
This website uses Google Analytics, which sets cookies to distinguish visitors and measure how the site is used. This data is aggregated and does not identify you to us by name. The client and staff portals use strictly necessary cookies and browser storage to keep you signed in; these cannot be disabled without losing access to the portals. You can control or delete cookies through your browser settings.
9. Security
We protect personal data with encryption in transit, access controls that restrict data to the people who need it, row-level security in our databases, hashed storage of passwords, and audit logging. Sensitive changes — such as changes to a client’s address or payout bank account, or a withdrawal request — are never applied automatically and are verified with the client directly before taking effect. No system is entirely secure; if you believe your credentials have been compromised, please contact us immediately.
10. Your rights
Subject to applicable law, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected and, in certain circumstances, erased;
- restrict or object to processing based on legitimate interests;
- receive data you provided to us in a portable format;
- withdraw consent where processing is based on consent;
- lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk) or, where Swiss law applies, the Federal Data Protection and Information Commissioner.
Some rights are limited where we are legally required to retain data, for example under anti-money-laundering rules. To exercise your rights, contact us through the contact form on this website. We will respond within one month.
11. Children
Our services are not directed at anyone under 18, and we do not knowingly collect personal data from children.
12. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised. Material changes affecting client or staff portal users will be communicated through the relevant portal.
13. Contact
Questions about this policy or about how we handle personal data can be raised through the contact form. Please note that met.capital is the only official website of Met Capital Ltd; do not share personal data with any other site or account claiming to represent us.