This Privacy Policy explains how Mueasa Ltd collects, uses, shares, and protects your personal information when you use our website and financial analytics platform. We are committed to transparency and to safeguarding the data you entrust to us.
Last Updated: January 15, 2026
Mueasa Ltd ("Mueasa", "we", "us", or "our") is the data controller responsible for the personal data processed through the website mueasa.com and the Mueasa financial analytics platform. We are a company registered in England and Wales, with our registered office located at 71 Queen Victoria Street, London, EC4V 4AY, United Kingdom.
This Privacy Policy applies to all visitors, registered users, and subscribers of our website and platform services. It describes the categories of personal data we collect, the purposes for which we process that data, the legal grounds we rely upon, and the choices and rights available to you regarding your personal information.
We take our responsibilities under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) seriously. Where our services are used by individuals in the European Economic Area, we also comply with the EU General Data Protection Regulation (EU GDPR). Our goal is to process only the data we genuinely need, to keep it secure, and to be transparent about everything we do with it.
By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, we ask that you refrain from using our website and services.
We collect several types of personal data depending on how you interact with our website and platform. Below is a detailed breakdown of the categories of data we may process:
When you create an account or subscribe to our services, we collect your full name, email address, and the password you choose (stored in hashed form). If you subscribe to a paid plan, we also collect your billing address and payment card details, though payment card information is processed directly by our payment processor (Stripe) and is never stored on our servers.
When you reach out to us through our contact form, email, or telephone, we collect the information you provide, including your name, email address, phone number (if supplied), and the content of your message. If you subscribe to our newsletter, we collect the email address you provide for that purpose.
When you visit our website, our servers and analytics tools automatically collect certain technical information. This includes your Internet Protocol (IP) address, browser type and version, operating system, device type and screen resolution, time zone setting, referring URL, pages visited on our site, time spent on each page, click patterns, and the date and time of your visit. We also collect data on how you interact with specific features of our platform, such as which tools you use, how frequently you access certain dashboards, and your preferred settings.
We use cookies and similar tracking technologies to collect data about your browsing behavior on our website. The types of cookies we use and their purposes are described in detail in the Cookies section of this policy below.
If you use our portfolio tracking features and choose to link external brokerage or financial accounts, we receive read-only access to your account holdings, transaction history, and balance information through secure API connections provided by third-party aggregation services. We do not have the ability to execute trades or transfer funds from your linked accounts. This data is used exclusively to provide you with portfolio analytics and related services within the Mueasa platform.
We collect personal data through the following methods:
Under the UK GDPR and EU GDPR, we must have a valid legal basis for processing your personal data. We rely on the following legal grounds, depending on the specific processing activity:
Contract Performance (Article 6(1)(b))
We process your account data, billing data, and financial platform data as necessary to provide you with the services you have subscribed to. Without this data, we cannot create your account, deliver platform features, or manage your subscription.
Consent (Article 6(1)(a))
We rely on your consent for sending marketing emails and newsletters, placing non-essential cookies (analytics and marketing cookies), and processing data through the Meta Pixel. You can withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Legitimate Interest (Article 6(1)(f))
We rely on our legitimate interests to process technical and usage data for improving our website performance and user experience, ensuring the security of our platform, responding to your inquiries and support requests, and conducting internal analytics to understand how our services are used. We have performed a balancing test for each of these activities to confirm that our interests do not override your fundamental rights and freedoms.
Legal Obligation (Article 6(1)(c))
We may process certain data to comply with legal obligations, such as maintaining financial records for tax purposes or responding to lawful requests from regulatory authorities.
We use the personal data we collect for the following specific purposes:
We do not use your personal data for automated decision-making or profiling that produces legal effects or similarly significant effects on you. Our platform provides analytical tools and data to support your own decision-making, but all investment decisions remain entirely yours.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Below are the specific retention periods we apply to each category of data:
| Data Category | Retention Period |
|---|---|
| Account data | Duration of account + 12 months after deletion |
| Billing and transaction records | 7 years (UK tax and accounting requirements) |
| Contact form submissions | 2 years from the date of submission |
| Newsletter subscription data | Until you unsubscribe + 30 days |
| Analytics and usage data | 26 months (anonymized after this period) |
| Server logs | 90 days |
| Cookie data | Up to 13 months (varies by cookie type) |
| Linked financial account data | Until you disconnect the account + 30 days |
When the retention period for a particular category of data expires, we securely delete or anonymize the data so that it can no longer be associated with you. In some cases, we may retain anonymized, aggregated data indefinitely for statistical and research purposes, as this data cannot be used to identify any individual.
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only with the following categories of recipients, and only to the extent necessary for the specified purposes:
All third-party service providers who process data on our behalf are bound by Data Processing Agreements that require them to implement appropriate technical and organizational security measures, process data only in accordance with our instructions, and delete or return data upon termination of the service agreement.
Our primary data storage is within the European Union. However, some of our third-party service providers may process data outside the EEA or the United Kingdom. When personal data is transferred to a country that has not been deemed to provide an adequate level of data protection by the UK Government or the European Commission, we ensure that appropriate safeguards are in place:
You may request a copy of the safeguards we have put in place for international data transfers by contacting us at the details provided below.
Under the UK GDPR and EU GDPR (Articles 15 through 22), you have the following rights in relation to your personal data:
Right of Access (Article 15)
You have the right to request a copy of the personal data we hold about you, along with information about how we process it. We will provide this information within 30 days of receiving your verified request.
Right to Rectification (Article 16)
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you. You can also update most of your account information directly through your account settings.
Right to Erasure (Article 17)
You have the right to request that we delete your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw consent, or when there is no other legal basis for continued processing. Certain data may be retained if we have a legal obligation to do so.
Right to Restrict Processing (Article 18)
You have the right to request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when processing is unlawful but you do not want the data to be erased.
Right to Data Portability (Article 20)
You have the right to receive the personal data you provided to us in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another controller without hindrance.
Right to Object (Article 21)
You have the right to object to processing based on legitimate interests or for direct marketing purposes. If you object to direct marketing, we will stop processing your data for that purpose immediately.
Right to Withdraw Consent
Where we rely on your consent as the legal basis for processing, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew consent.
How to exercise your rights: You can submit a request by emailing us at [email protected]. We may need to verify your identity before processing your request. We will respond to all valid requests within 30 days. If your request is complex or we receive a large number of requests, we may extend this period by an additional 60 days, in which case we will inform you of the extension and the reasons for it.
Right to lodge a complaint: If you believe that our processing of your personal data violates your rights under data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters. The ICO can be contacted at ico.org.uk or by telephone at 0303 123 1113. If you are located in the EEA, you may also contact your local data protection authority.
Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take immediate steps to delete that data from our systems. If you believe that a child under 16 has provided us with personal data, please contact us at [email protected] so we can investigate and take appropriate action.
In addition, our financial analytics services require users to be at least 18 years of age, as access to investment-related tools and data is intended for adults who are legally able to make financial decisions in their jurisdiction.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on our website with a revised "Last Updated" date at the top of the page. For significant changes that materially affect how we process your personal data, we will also notify registered users via email at least 14 days before the changes take effect.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of our website and services after the effective date of an updated policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should discontinue use of our services and contact us to request deletion of your data.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal information, please contact us using the details below:
Data Controller
Mueasa Ltd
Registered Address
71 Queen Victoria Street, London, EC4V 4AY, United Kingdom
Privacy Contact Email
General Contact Email
Telephone
Supervisory Authority
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk | Telephone: 0303 123 1113