Privacy.
What we hold about you, why we hold it, and what you can ask us to do about it.
This notice covers gallium-ip.com and the investor portal at portal.gallium-ip.com. Last updated 22 August 2026.
Who we are.
Gallium Investment Partners Ltd is the controller of the personal data described here. We are incorporated in the United Kingdom, company number 15095144, at 68 Pall Mall, London SW1Y 5ES, and authorised and regulated by the Financial Conduct Authority under FRN 1033604. We are registered with the Information Commissioner's Office under registration number ZB602689.
For any question about privacy, or to make any of the requests below, please contact info@gallium-ip.com.
Visiting this website.
Browsing gallium-ip.com sets no cookies and requires no account. Two things are kept in your own browser and never sent to us: the Gallium office nearest you, and map tiles for the contact page. Both are listed on our cookies page.
We count page views, and nothing else, using a service that is cookieless: it stores nothing on your device and does not follow you between sites. We do this to know whether anyone is reading the site, which is our legitimate interest, and it does not identify you.
Using the investor portal.
The portal shows you information about products you hold. Most of what it contains is not collected from you at all: it is the record of your holdings, which we keep in order to do our work.
| What | Why | Lawful basis |
|---|---|---|
| Your name, email address and telephone numbers | To identify you, sign you in, and show you the right account. | Legitimate interests |
| The account you belong to, and what it holds | Products, notional amounts, trade dates and prices, valuations, documents and statements. This is the portal's whole purpose. | Legitimate interests |
| Sign-in identity held by Microsoft | Sign-in and the one-time passcode sent to your email address. | Legitimate interests |
| A record of what you did in the portal | Every sign-in, document download, statement download and section view, with the time, your IP address and a short device description such as “Safari on macOS”. Kept so that access to financial information can be accounted for, including access by our own staff. | Legitimate interests |
| Your acceptance of the portal terms | Which version you accepted, when, and the IP address you accepted from, as evidence of the acceptance. | Legal obligation and legitimate interests |
| Your preferences | Reporting currency, pinned pages, which panels you folded away. So the portal looks the way you left it. | Legitimate interests |
| Valuation email subscriptions | If you opt in: which products, how often, and which figures you asked for. | Consent |
Why legitimate interests.
Our interest is in giving you a clear view of the products you hold, and in being able to account for who has seen that information, including our own staff. We consider that to be in your interest as well, and it goes no further than is needed to do it.
You can object to processing carried out on that basis. If you object to the portal itself, the practical effect is that we close your access; the underlying records are kept, because we are required to keep them.
Who else is involved.
We do not sell personal data and we do not share it for marketing. These are the kinds of service we rely on, each acting on our instructions and under contract. We will tell you which providers they are if you ask.
| What | Why | Where |
|---|---|---|
| Identity and sign-in | Verifying who you are, and sending the one-time passcode that signs you in. | European Economic Area |
| Client records | Our record of contacts, accounts, holdings, documents and the portal activity log. | France |
| Hosting and measurement | Running this website and the portal, and counting page views without cookies. | France |
| Map tiles | The map on the contact page. No account information is involved. | Public map service |
Where it is processed.
Our client records are held in Salesforce in France, and the portal's server-side processing runs in France as well, so your data stays inside the European Economic Area.
One exception, stated for completeness: the small piece of code that decides whether you are signed in runs at whichever of our hosting provider's network locations is nearest you, which in practice means London or Paris. It reads only the sign-in cookie and touches nothing else.
How long we keep it.
The record of what you did in the portal is deleted automatically after three months. That is enforced by a scheduled job rather than by a promise to remember.
Client records, including your contact details and your holdings, are kept while you hold a product and afterwards for as long as our legal and regulatory obligations require. Those obligations, rather than our preference, set the period.
Preferences kept in your browser last until you clear them, and clearing them breaks nothing.
Your rights.
You can ask us for a copy of the personal data we hold about you, to correct it if it is wrong, to delete it, to restrict what we do with it, to receive it in a portable form, and to object to processing based on legitimate interests. Where we rely on your consent, for valuation emails, you can withdraw it at any time from the product page or by asking us.
We would rather say this plainly than bury it: a request to delete client records will usually be refused, because we are required to keep them. We will always tell you what we have kept and why.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, and if you are in France, to the CNIL.
Changes.
If we change this notice materially we will tell you rather than quietly amend it. If you use the investor portal, we will tell you there.