Data Protection — Subject Rights

Data Protection Request

Use this form to exercise your rights under UK GDPR, EU GDPR or the Swiss revFADP in respect of personal data held by The NeoBankers Group Limited.

To route your message correctly, we need to know who you are. We should be grateful if you would complete the form below. To protect your personal data, we may ask you to confirm your identity before we act on your request. All information provided is treated as strictly confidential.

About You

Title

First Name

Last Name

Email Address Please enter a valid email address.

Telephone Number (optional)

Country

Your Relationship with the Group

Reference (Optional)

Your Request

Which right(s) do you wish to exercise?

Access — a copy of the personal data held about you, and information on how it is processed (Art. 15).

Rectification — correction of inaccurate or incomplete personal data (Art. 16).

Erasure — deletion of your personal data where the conditions are met (Art. 17).

Restriction — restriction of the processing of your personal data (Art. 18).

Portability — receipt of your data in a structured, commonly used, machine-readable format (Art. 20).

Objection — objection to the processing of your personal data (Art. 21).

Withdrawal of consent — withdrawal of consent previously given, where processing is based on consent (Art. 7(3)).

Please select at least one right.

Details of Your Request

How We Handle Your Request

Response time: we respond within one month of receipt. This period may be extended by up to two further months where the request is complex or numerous; if so, we will inform you within the first month (Art. 12(3)).

No fee: requests are handled free of charge, save where a request is manifestly unfounded or excessive (Art. 12(5)).

Identity verification: to protect your personal data against unauthorised disclosure, we may ask you to provide information reasonably necessary to confirm your identity before we act on the request (Art. 12(6)).

Data Protection — UK GDPR, EU GDPR and Swiss revFADP

Data controller: The NeoBankers Group Limited, 167-169 Great Portland Street, 5th Floor, London, W1W 5PF (Company No. 13821747).

EU and EEA representative (Art. 27 GDPR) and Swiss representative (Art. 14 revFADP): not required at present, because the Company offers no goods or services to, and does not monitor the behaviour of, persons in the EEA or Switzerland. The Company will appoint representatives before any such activity begins. Until then, requests from the EEA and Switzerland are handled by the data protection team through the Data protection request form.

Data protection contact, United Kingdom: Matvei Hutman.

Contact: the Company may be contacted through the Data protection request form.

Purpose: to receive, verify and respond to your data protection request and to maintain a record of it.

Legal basis: Art. 6(1)(c) UK GDPR / EU GDPR — compliance with a legal obligation to which the controller is subject (Arts. 12 and 15–22); equivalent obligations apply under the Swiss revFADP.

Recipients: legal advisers and, where required, regulatory authorities. No data sold to third parties.

Retention: the request and the Company's response are retained for 6 years (Limitation Act 1980) as a record of compliance.

International transfers: personal data is processed within the UK and EEA. Any transfer outside the UK/EEA, or from Switzerland, is made only under an adequacy decision or appropriate safeguards (UK IDTA or Standard Contractual Clauses) per Art. 46 UK GDPR / EU GDPR and the equivalent provisions of the revFADP.

Automated decision-making: no automated decision-making or profiling within the meaning of Art. 22 GDPR is carried out in connection with this form.

Complaints: you may lodge a complaint with a supervisory authority — in the United Kingdom, the Information Commissioner's Office (ico.org.uk); in the European Union, the data protection authority of your country of residence; in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

Please complete the required fields before submitting.

✓

Your request has been submitted

Your data protection request has been submitted to The NeoBankers Group Limited. We will acknowledge it and respond within one month, as required by law. We may contact you at the email address provided to verify your identity.

Name	Type	Vendor / Purpose	Duration
tnbg_cookie_consent	1P	The NeoBankers Group — localStorage record storing your consent choices, timestamp, and Preference Centre version (consent proof)	13 months (persistent)
tnbg-location	1P	The NeoBankers Group — localStorage record of the country and language you selected in the welcome window and your answer to the US-person question, so that the window is not shown again and information appropriate to your jurisdiction is presented (strictly necessary). The country is pre-selected from the country associated with your IP address, as reported by the website’s hosting provider, or, where that is not available, from your device’s time zone; where the two differ (for example when a VPN or proxy is in use), no country is pre-selected and you are asked to choose it, and the record notes that they differed; your IP address is not stored in this record or passed to any other party for this purpose	13 months (persistent)
__cf_bm	1P	Cloudflare, Inc. — only if the website is served through Cloudflare: bot management, distinguishes humans from automated traffic (security)	30 minutes
cf_clearance	1P	Cloudflare, Inc. — only if the website is served through Cloudflare: records successful completion of a security challenge (security)	Up to 12 months

Name	Type	Vendor / Purpose	Duration
_ga	1P	Google LLC — GA4, pseudonymous client identifier (persistent)	2 years (vendor default; ~13 months browser-enforced in Chrome)
_ga_*	1P	Google LLC — GA4, session state and engagement metrics; GS2 format since May 2025 (persistent)	2 years (vendor default; ~13 months browser-enforced)
_gid	1P	Google LLC — GA4, distinguishes users for 24-hour analytics aggregation	24 hours
_gat	1P	Google LLC — GA4, request rate limiting (throttle)	1 minute
_clck	1P	Microsoft Corporation — Clarity, pseudonymous user ID for heatmaps and session replay (persistent)	12 months
_clsk	1P	Microsoft Corporation — Clarity, session-level page view aggregation (session)	Session
MUID	3P	Microsoft Corporation — Clarity/Bing, cross-site user identification (bing.com)	12 months
CLID	3P	Microsoft Corporation — Clarity, cross-site session linking (c.bing.com)	12 months
ANONCHK	3P	Microsoft Corporation — Clarity, session integrity check (c.bing.com)	10 minutes

Name	Type	Vendor / Purpose	Duration
lang	1P	The Neobankers Group — stores selected language preference (persistent)	12 months
region	1P	The Neobankers Group — stores selected regional settings (persistent)	12 months

Name	Type	Vendor / Purpose	Duration
li_sugr	3P	LinkedIn Corporation — Insight Tag, member identification for ad targeting and conversion analytics (persistent). Note: not set for users in EEA/Designated Countries.	3 months
li_fat_id	1P	LinkedIn Corporation — Insight Tag, first-party member identification for environments blocking third-party cookies (persistent)	30 days
_fbp	1P	Meta Platforms, Inc. — Pixel, tracks user activity for advertising campaign measurement (persistent)	3 months
_fbc	1P	Meta Platforms, Inc. — Pixel, click attribution linking ad interactions to website activity (persistent)	3 months
fr	3P	Meta Platforms, Inc. — advertising targeting and measurement (facebook.com; blocked by Safari ITP and Firefox ETP)	3 months
_gcl_au	1P	Google LLC — Ads, links website interaction to conversion events for attribution (persistent)	3 months
_gcl_aw	1P	Google LLC — Ads, stores Google Ads click identifier for conversion tracking (persistent)	3 months
_gcl_dc	1P	Google LLC — Ads, stores DoubleClick/Display click identifier (persistent)	3 months
IDE	3P	Google LLC — DoubleClick, advertising targeting across Google ad network (doubleclick.net)	13 months