What we keep, and why.

What we keep, and why

Who we are. MARBIN is run by MARBIN Investments Ltd, registered in England and Wales (company number 17507734), registered office 138 Upton Road, London, DA6 8LX. MARBIN Investments Ltd is responsible for the personal data described here (the data controller).

Sign-ups. When you register your interest or subscribe to the newsletter, MARBIN keeps your email, your name if you give it, what you signed up for, and when, with the words you agreed to. It uses them only for that: to tell you when MARBIN opens to individuals, or to send the newsletter. The lawful basis is your consent.

Where. On Cloudflare (MARBIN's website host), in the UK and EU, and in MARBIN's own email. Never sold, never shared for anyone else's marketing.

How long. Until you ask us to delete it, or for two years after our last email to you, whichever comes first.

Requests to join the beta. If you ask to join MARBIN's private beta, we keep the email address you signed in with, your name, your WhatsApp number, your broker and, if you tell us, how you heard about MARBIN, so the MARBIN team can review your request and contact you about it. Our administrators are told your name and broker. If your request is approved, these details become part of your membership invitation. If it isn't, we erase your name and contact details 90 days after the decision.

News from MARBIN. If you agree, we may send you occasional news about MARBIN by email or WhatsApp, as you choose. Each is optional, and you can unsubscribe at any time in My details or by replying to us.

Members. For invited members, MARBIN keeps what it needs to run their account: their name, email, WhatsApp number, broker connection (the key locked, never readable), their answers to the suitability check, and their account's records, on MARBIN's own server and in its encrypted off-site backups. The lawful basis is the contract with you and MARBIN's legal obligations.

Identity checks. To verify your identity we use Didit, as UK anti-money-laundering rules require before trading starts (these checks are being introduced). You complete the check on Didit's own page: an ID document and, once the full check is on, a short selfie video and a screening of your name against sanctions lists. Didit holds the documents and images under its own retention and data-processing terms, and we keep only the result, with the name, date of birth and country read from the document, while you are a member and for five years after, as those rules require.

Suitability. Before you invest, and every 12 months, we ask about your finances, investment horizon, attitude to risk and experience, to check MARBIN suits you. We keep your answers and the result while you are a member and for 5 years after you leave. If you choose your own settings for MARBIN's rules (where your membership offers it), we also keep your answers to a short knowledge test, the settings you choose and each change to them, for the same time.

The MARBIN app. Our members' app shows your own account from your MARBIN portal. It keeps nothing about your account on your phone apart from your sign-in, your app-lock setting and, for up to 24 hours, the choices in an account you are part-way through adding (never your broker key), and it is excluded from phone backups. Face ID or your fingerprint unlocks it on the phone itself: MARBIN never receives your face or fingerprint. The camera is used only on Didit's page, for the identity check. You sign in inside the app, with a code we email you, or with Google or Apple: from Google or Apple we receive only that they have confirmed your email address (and, from Apple the first time, the name you let it share). If you sign in with Apple, Apple also gives us a token for that sign-in, which we keep encrypted only so that we can ask Apple to end MARBIN's access when you unlink Apple or close your account; it is then deleted. Your sign-in is kept in your phone's secure storage (Keychain or Keystore). So you can see and sign out the phones signed in as you, we keep for each one its name and type, how it signed in, when it was last used and the network address it last came from, while it stays signed in and 30 days after. It has no advertising, no third-party analytics and no tracking.

Connecting your broker. When you paste your broker key, the app or the members' page asks your broker straight away whether it works, and keeps nothing from that check; the key is kept only when you connect the account, encrypted. If you use the setup help (“Stuck? Get help”), we count which help steps are used and whether they solved the problem, with nobody named and nothing you type kept, for 60 days, so we can improve the steps. If you open a Trading 212 account through the invitation link we show, Trading 212 may give MARBIN a free share as well as you; Trading 212 handles that under its own terms, and we receive no information about you from it.

App notifications. If you allow notifications, your phone gives the app a notification token, which we store with your membership record so we can tell you about trades and your weekly and monthly summaries. Notifications are delivered by Google (Firebase Cloud Messaging) and, on iPhone, Apple. They never contain amounts or holdings. The token is deleted when you sign out of the app or remove it, and you can turn each kind of notification off in the app.

Whether our messages arrive. For each email, WhatsApp message or app notification we send, we keep a short delivery record for 90 days: when, which kind of message, how it was sent, whether it got through (and if not, a short reason) and the email or phone number shown only in part (for example m***@gmail.com), never in full and never the message itself. It is used only to check that our messages arrive and to fix them when they don't. The lawful basis is MARBIN's legitimate interest in running the service reliably.

The zakat calculator. If you use it, we keep your zakat choices (your zakat date and calendar, the nisab standard, your currency, when to remind you), anything you add from outside MARBIN (bank cash, gold and silver by weight, other investments, money owed to you, debts due now), the figures for each zakat date for your yearly statement, and the zakat you mark as paid. It is private to you: it is never used for trading, and MARBIN's staff see only that you use the calculator, not what you entered. You can delete all of it at any time in My or the app (Delete my zakat calculator data); otherwise we delete it when you leave. The lawful basis is your consent.

Inviting a friend. If you ask MARBIN to invite someone, we keep their name and email to send the invitation and to tell you whether they joined; if we don't invite them, both are deleted after 90 days.

Who else handles it. Only what each needs, for MARBIN's own use, under data agreements: your broker (Trading 212 or Interactive Brokers), where your account is; Didit, for the identity check; Cloudflare, which hosts our websites and secures sign-in; our email providers (Brevo, Resend), for MARBIN's emails; Google (Firebase Cloud Messaging) and Apple, for the app's notifications; and WhatsApp, for the reports you choose to receive. Data may be processed outside the UK and the EU only with the safeguards UK law requires.

Not for children. MARBIN is for adults (18 and over) only.

Deleting your account. You can delete your MARBIN account yourself at any time: in the app (My details, Delete my account) or on your members' page (Profile, Delete my account), confirmed by typing DELETE. It takes effect at once: we stop trading for you on every account, erase your broker key, sign you out on every device, end Sign in with Apple, and delete your WhatsApp number, notification tokens and zakat calculator data. Nothing is sold: your money, holdings and any stop orders stay in your own broker account. We keep only the records UK law requires us to keep, for as long as it requires: your accounts' trading records and daily books (each for six years from when it was made), and your identity check's result and suitability answers (five years after you leave); they are then deleted. Your name and email stay with those records, as the law requires, and are used for nothing else; they are deleted with the last of them, six years after you leave. Copies in our encrypted backups go as those backups are replaced, within 12 months. Anything that needs a person (for example ending a paid membership) is done within 30 days, and we email you a confirmation. You can also write to legal@marbin.co.uk from your sign-in email.

Your rights. You can ask what we hold about you, ask us to correct or delete it, or withdraw your consent, at any time: write to hello@marbin.co.uk, or reply to any email from it. Statements and reports come from statements@marbin.co.uk and security emails from no-reply@marbin.co.uk; those two don't receive replies. You can also complain to the Information Commissioner's Office (ico.org.uk).

This website sets no tracking or advertising cookies and uses no analytics. Members' pages use a sign-in cookie, which is needed for signing in.

MARBIN Investments Ltd, hello@marbin.co.uk. Last updated 26 October 2026.