KYC · AML · DATA PROTECTION

Compliance & Data Protection in Onboarding

Our onboarding combines risk-based identity and compliance review with controlled data processing. This page explains what we do operationally and what commonly used regulatory abbreviations mean, without implying a regulatory status or authorisation that has not been confirmed for a specific activity.

No acronym marketing

MiFID, FinSA, AMLA, GDPR and PRIIPs are not used here as trust badges. A regime is described as applicable only where the actual role, activity, investor category and jurisdiction support that conclusion.

What KYC reviews

Identity and document validity; for legal entities, existence, authority and beneficial ownership. Depending on risk, PEP/sanctions screening, Source of Funds, Source of Wealth, tax/residence information and additional evidence may be required.

Data minimisation & purpose limitation

We collect data for defined onboarding, compliance, contractual, payment, register, security and legal purposes and seek to process only information reasonably necessary for those purposes.

No sale of investor data

Personal data and KYC records are not sold and are not disclosed for unrelated third-party marketing. Disclosure occurs only where necessary and lawful, for example to approved verification/IT providers, banks, the Paying Agent, professional advisers or competent authorities.

Partner access is restricted

Attributing an investor to a Sales Person, Family Office or Introducer does not automatically grant access to KYC documents, identity evidence, bank/wallet data, Source-of-Funds/Wealth records or internal compliance notes.

Technical & organisational controls

Protected areas use MFA, role-based access, private document storage, audit trails, controlled document delivery and automatic inactivity sign-out. Sensitive changes may require additional confirmation or manual review.

Sharing, transfers & authorities

Necessary recipients and cross-border processing are handled under applicable data-protection law and appropriate safeguards. Legal disclosure, court, tax, regulatory or law-enforcement requirements may permit or require data sharing.

REGULATORY VOCABULARY

What the abbreviations mean in our context

TermMeaningProgramme relevance

KYC / CDD

Know Your Customer / Customer Due Diligence

Identity, authority, beneficial ownership and risk-based verification used during onboarding.

AML / CTF

Anti-Money Laundering / Counter-Terrorist Financing

Risk-based controls, PEP/sanctions screening and enhanced due diligence where appropriate. The precise statutory perimeter depends on role and jurisdiction.

PEP / UBO / SoF / SoW

Politically Exposed Person / Ultimate Beneficial Owner / Source of Funds / Source of Wealth

Operational compliance concepts used for risk, ownership and source-of-funds review.

OFSI / UK Sanctions

Office of Financial Sanctions Implementation / UK Sanctions

UK sanctions apply to legal entities established under UK law, including when activities take place outside the UK. Sanctions screening is therefore a directly relevant compliance control.

UK GDPR / DPA 2018

UK data-protection framework

Framework for transparent, purpose-limited, secure and accountable processing of personal data by the UK controller.

FADP / DSG

Swiss Federal Act on Data Protection

May be relevant where Swiss data subjects, recipients or cross-border processing are involved.

EU GDPR

EU General Data Protection Regulation

May additionally apply where its territorial scope is engaged; it is not claimed generically for every investor relationship.

MiFID II / UK MiFID

Markets in Financial Instruments framework

Principally concerns investment services, investment firms and distribution. It is not a generic KYC certification and does not apply to an issuer merely because a bond is a financial instrument.

FinSA / FIDLEG

Swiss Financial Services Act

May be relevant to financial services, client segmentation, conduct and offering activity in Switzerland. The perimeter depends on the activity and role.

Prospectus / FSMA

Prospectus and offering perimeter

Relevant to whether an offer is public and whether a prospectus requirement or exemption applies. Private-offering analysis remains transaction-specific.

PRIIPs

Retail product-disclosure framework

Relevant only where the product, investor category and distribution route fall within scope; it is not a generic quality or compliance seal.

FATCA / CRS

International tax-reporting frameworks

May be relevant depending on entity/account classification, tax status and the financial institutions involved.

PRIMARY SOURCES & FURTHER INFORMATION

Verify regulatory information independently

FCA · UK MiFID framework ↗UK MLR 2017 · Customer Due Diligence ↗FINMA · AML due diligence ↗OFSI · UK financial sanctions ↗ICO · UK GDPR security ↗FDPIC / EDÖB · FADP transparency ↗

These links are provided for transparency and do not mean that every rule described there applies directly to every GLOBAL FIX BOND transaction.