Privacy policy

Last updated: 29 October 2026

Who we are

Invictus Remittance is a trading name of Invictus Ventures Ltd, which is authorised and regulated by the Financial Conduct Authority. Invictus Ventures Ltd is the data controller for the personal data described here. This policy covers the Invictus Remittance web portal and the Invictus mobile app, which share one account. Questions about this policy or your data can go to remittance@invictusventures.co.uk.

What we collect

• Account details: your name, email address and password, which we store only as a secure hash.
• Profile details: date of birth, home address, country of residence and identity document type and number.
• Identity verification: photos of your identity document and a selfie or short liveness video, collected through our verification provider.
• Transfer details: amounts, currencies, exchange rates, fees, dates, the purpose of each transfer and its status.
• Recipient details: your recipients' names, addresses, countries, bank account numbers or IBANs, mobile wallet numbers and, for cash collection, national identity card numbers.
• Payment details: the reference and status of each payment from your bank. You sign in to your bank through our payment provider, and we never see your online banking credentials.
• Device and technical data: app installation and device identifiers, IP address, browser or device type and app version, used to deliver app updates, keep your account secure and prevent fraud.

How we use it, and why we are allowed to

• To provide the service (performing our contract with you): creating your account, quoting and processing transfers, paying out to your recipients and sending you updates about them.
• To meet our legal obligations: verifying your identity, anti-money laundering and counter-terrorist financing checks, sanctions screening, keeping records and reporting to regulators and law enforcement when the law requires it.
• To protect you and us (our legitimate interests): preventing fraud, securing accounts, handling complaints and improving the service.

We do not use your data for advertising, we do not use advertising identifiers, and we never sell your personal data.

Who we share it with

We share personal data only where needed to run the service or where the law requires it:

• Sumsub: identity verification and liveness checks.
• Plaid: connecting to your bank so you can pay for a transfer.
• Clear Junction: receiving and confirming the payments you send us.
• Payout partners: National Bank of Pakistan and our partner bank in Serbia receive your name and the recipient's details so they can pay the recipient.
• Microsoft Azure: hosting, our databases and the emails we send you.
• Expo: delivering updates to the mobile app.
• Authorities: regulators, law enforcement and courts, when the law requires us to share information.

Service providers may use your data only to provide their service to us and must keep it secure.

International transfers

We store your data in the United Kingdom. Sending money abroad means your name and your recipient's details must go to the payout bank in the destination country, such as Pakistan or Serbia, and that transfer is necessary to carry out the payment you asked for. Some of our service providers may process data outside the UK; where they do, we rely on UK adequacy regulations or the UK's approved data transfer agreements to protect it.

How long we keep it

We keep your data while your account is open. After it is closed, we keep identity verification records, transfer and payment records and the records of our fraud and anti-money laundering checks for 5 years, as required by the UK Money Laundering Regulations 2017, and then delete them securely. Records linked to an open complaint, dispute or investigation are kept until it is resolved. Everything else is deleted when your account is closed.

Deleting your account

You can ask us to delete your account at any time. See how to delete your account for the steps and for what we delete and what we must keep.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you
• correct data that is wrong or incomplete
• delete your data, subject to the records the law requires us to keep
• restrict or object to how we use your data
• send your data to you or another provider in a portable format

Email remittance@invictusventures.co.uk to use any of these rights. We will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

The web portal uses only the cookies it needs to work: one that keeps you signed in and one that protects forms from forgery. We do not use advertising or analytics cookies.

Security

Your data is encrypted in transit, passwords are stored only as secure hashes, and access to customer data is restricted to staff who need it for their work. The app can also be locked with your device's fingerprint or face unlock.

Changes to this policy

We will update this page when our practices change and show the date of the latest version at the top. If a change materially affects how we use your data, we will tell you by email or in the app.