Regulatory and compliance

The Group responds to lawful requests from regulators and authorities in any country where it or its partners work. This includes court orders, production orders and requests under the Proceeds of Crime Act 2002. Personal data is disclosed only where the law allows it, in particular under Article 6(1)(c) UK GDPR and Schedule 2, Part 1, paragraph 2 of the Data Protection Act 2018 (crime and taxation), and only to the extent necessary. The Company does not tell a person about a request where the law prohibits it (tipping off, section 333A of the Proceeds of Crime Act 2002). Format. Please attach the request as a PDF or Word document with searchable text, on official letterhead, signed and dated, with a reference number and a deadline for the reply; scanned images may delay the response. Which company. Address the request to the company that holds the information. The Company answers under the law of England and Wales. Neo Bankers sp. z o.o. is a separate legal entity and answers requests under Polish law; requests about it should be addressed to it directly. Requests from outside the United Kingdom are answered through the applicable international co-operation arrangements, such as mutual legal assistance under the Crime (International Co-operation) Act 2003, unless UK law allows the Company to respond directly. Use the form and state the authority, the legal basis of the request, the information sought and the deadline. Information about the Group’s structure, ownership, governance and policies is available to authorities on request. The Company’s regulatory position is stated under Statements.

Questions on anti-money-laundering and counter-terrorist-financing controls, sanctions, the Group’s policies, or a counterparty’s dealings with the Group. The Group acknowledges every enquiry within three business days and replies within ten business days.

Anyone — employees, contractors, partners, suppliers or members of the public — may report suspected wrongdoing connected with the Group, including:

• financial crime, money laundering or a breach of sanctions;
• fraud, bribery or financial misconduct;
• a breach of a legal or regulatory obligation;
• danger to health, safety or the environment;
• the deliberate concealment of any of these.

Concerns are treated in confidence so far as the law and a proper investigation permit, and are acknowledged within three business days. A worker who makes a disclosure in the public interest is protected by the Public Interest Disclosure Act 1998 against detriment and dismissal; the Group does not tolerate retaliation against anyone who raises a concern in good faith.

Anonymous reports. Until the Group’s secure reporting channel is live, a report sent through the form reaches the Group from your own e-mail address. To remain anonymous, write by post to the registered office, marked “Confidential — Whistleblowing”, without a sender name.

Reporting to a prescribed person. You may report instead to, or as well as to, the Group, a prescribed person under the Public Interest Disclosure (Prescribed Persons) Order 2014 — for example the Financial Conduct Authority, HM Revenue & Customs, the Serious Fraud Office or the Information Commissioner’s Office.

Data protection requests (use Data protection), press enquiries (use Press and Media Resources) and general correspondence (use General enquiry). The Group provides no services to the public, so there is no service-complaints route; complaints about the Group’s own conduct are handled under the Complaints Policy.

Open the regulatory and compliance form →

See also: Whistleblowing Policy · AML and Sanctions Policy · Complaints Policy

Content last updated: 27 October 2026