1. Legal Basis & Statutory Due Diligence:
Your Business Admin collects and processes client identification, beneficial ownership, and financial records pursuant to the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLR 2017, as amended 2019), the Proceeds of Crime Act 2002 (POCA), and the Sanctions and Anti-Money Laundering Act 2018. Completing this due diligence is a mandatory legal pre-condition prior to engagement.
2. Mandatory Five-Year (5-Year) Record Retention:
Under Regulation 40 of MLR 2017, all customer due diligence (CDD) records, identity verifications, beneficial owner documents, and source-of-funds evidence will be securely retained for a statutory retention period of five (5) years beginning on the date the ongoing business relationship ends or an occasional transaction is concluded, after which data is securely expunged.
3. UK GDPR / Data Protection Act 2018 & Document Security:
Personal data is processed strictly under the lawful bases of Legal Obligation (Article 6(1)(c) UK GDPR) and Substantial Public Interest (DPA 2018, Schedule 1, Part 2) to combat financial crime. Data is stored on secure, encrypted UK servers, restricted to certified compliance officers, and will never be utilized for marketing or shared with third parties other than statutory authorities (e.g., NCA, HMRC) upon legal demand.