Privacy Policy

Effective Date: December 9, 2025

This Privacy Policy explains how LEI REGISTRY LTD (LEI24 UK), acting as a local branch of its parent company, GCBS LTD (LEI24) (a GLEIF-compliant Registration Agent and official Registration Agent for our GLEIF-accredited Local Operating Unit (LOU), Nasdaq CSD SE), collects, uses, stores, and protects Personal Data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the. GLEIF RA Governance Framework.

1. Data Controller and Our Structure

1.1. Data Controller Details

The Data Controller responsible for the processing of your Personal Data is the parent company:

  • Company Name: GCBS LTD
  • Company Number: HE 469314
  • LEI: 6367000JXG942DHDPK43
  • Registered Address: 34 Makarios III Avenue, 2nd Floor, Flat 203, Hadjiyiannis Building, 3065 Limassol, Cyprus.
  • Website: www.g-cbs.com

1.2. UK Operating Structure & Representative

GCBS LTD processes data through its local specialist branches. For clients in the United Kingdom, the local representative and primary contact point is:

  • Company Name: LEI REGISTRY LTD
  • Company Number: 16468289
  • LEI: 64882T0XLM634IXO8268
  • Registered Address: 20 Elswick Street, London, SW6 2QR, United Kingdom.
  • Website: www.lei24.co.uk
  • Data Protection Contact: info@lei24.co.uk

2. Data Collection, Purpose, and Legal Basis

We collect Personal Data solely for the purpose of initiating, maintaining, and renewing Legal Entity Identifier (LEI) services in compliance with global financial regulations.

2.1. Categories of Data Processed

We process the following specific categories of data based on the defined legal grounds:

  • Contact Person Data:
    • Data: Name, Title, E-mail address, and Phone number of the entity’s authorized representative.
    • Legal Basis: Contract (necessary for the performance of the LEI service agreement) and Legal Obligation (required by GLEIF validation protocols).
  • Legal Entity Data:
    • Data: Official Company Name, Address, Registration Number, and Level 2 (Parent) Data.
    • Legal Basis: Legal Obligation (compliance with ISO 17442 standards and GLEIF regulatory mandates).
  • Payment & Billing Data:
    • Data: Transaction details, billing address, and VAT numbers.
    • Legal Basis: Contract (to process payments) and Legal Obligation (compliance with tax and accounting laws).
  • Technical Data & Cookies:
    • Data: IP address, browser type, device information, and cookies.
    • Legal Basis: Legitimate Interest (ensuring security and functionality) and Consent (for non-essential cookies, managed via our Cookie Banner).

3. Data Sharing and International Transfers

3.1. Sharing with our GLEIF-accredited LOU

To facilitate your LEI service, we must share the necessary Contact Person Data and Legal Entity Data with our accredited Local Operating Unit (LOU):

3.2. Public Disclosure (Global LEI Index)

The Client acknowledges that strictly defined Legal Entity Data (including the LEI code, name, and Level 2 parent relationships) is mandated by the GLEIF framework to be publicly available via the Global LEI Index. Personal data of contact persons is NOT published.

3.3. International Transfers

As LEI Registry LTD (LEI24 UK) is part of a global structure, data is processed by the parent company in Cyprus (EEA). Transfers between the UK and the EEA are governed by the UK’s adequacy regulations. Any transfers to GLEIF (Switzerland) are performed under the UK Adequacy Decision for Switzerland.

4. Data Security and Retention

4.1. Security Commitment

We maintain high technical and organizational security standards (TOMs) to protect your Personal Data, aligning with ISO 27001 standards and GLEIF requirements.

4.2. Retention Period

  • LEI Service Data: Due to regulatory requirements and our agreement with the LOU (Nasdaq CSD SE), data related to LEI issuance and maintenance is retained for a period of 10 years following the termination of the service.
  • Financial Records: Data required for tax and accounting purposes is retained for 7 years in accordance with UK and Cypriot tax laws.

5. Your Rights (UK GDPR)

As a data subject, you have the following rights concerning your Personal Data:

  1. Right to Access: To obtain confirmation about the processing of your data and a copy thereof.
  2. Right to Rectification: To have inaccurate or incomplete data corrected.
  3. Right to Erasure: To request deletion of your data (“Right to be Forgotten”), provided that legal obligations (such as the mandatory 10-year retention for LEI audit trails) do not require us to keep it.
  4. Right to Restriction: To request temporary limitation of processing.
  5. Right to Portability: To receive your provided data in a structured, machine-readable format.
  6. Right to Object: To object to processing based on legitimate interests, including direct marketing.

5.1. Filing a Complaint

We encourage you to contact us first at info@lei24.co.uk. You also have the right to lodge a complaint with the relevant Supervisory Authorities:

  • UK Authority: Information Commissioner’s Office (ICO) | www.ico.org.uk
  • Controller’s Authority: Office of the Commissioner for Personal Data Protection | Iasonos 1, 1082 Nicosia, Cyprus | www.dataprotection.gov.cy

6. Policy Updates

LEI REGISTRY LTD (LEI24 UK) reserves the right to amend this Privacy Policy at any time to reflect changes in legal requirements or our service. The most current version will always be posted on the www.lei24.co.uk website

Amir Mechouk

Amir Mechouk

CTO
Shane Healey

Shane Healey

Chief Financial Officer
Darko Brzica

Darko Brzica

Chief Technology Officer
Robert Andersson

Robert Andersson

Senior Advisor
Polina Bojilova Taliana

Polina Bojilova Taliana

Managing Director