Anti-Money Laundering (AML) & Know Your Customer (KYC) Policy

1. Policy Statement

PreviaLook Ltd (“the Company”) is committed to full compliance with all applicable requirements under UK and EU law, including The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLR 2017), as amended, the Proceeds of Crime Act 2002, the Terrorism Act 2000, and other relevant international standards. This policy applies to all financial transactions processed through the PreviaLook platform, including Partner Program payouts.

2. Scope

This policy covers:

• All users requesting financial payouts through the PreviaLook Partner Program;
• All transactions involving the transfer of funds from PreviaLook to external recipients;
• The collection, verification, and retention of identity documents.

3. Customer Due Diligence (CDD) & KYC Verification

Consistent and effective Customer Due Diligence is a cornerstone of this policy. Before processing any financial payout, PreviaLook requires the following identity verification:

3.1. Information Collected

During the verification process, the user is required to provide:

• Government-issued photo ID — a clear scan or photograph of a valid passport, national identity card, or driver's licence. The document must be current (not expired) and show the full name, date of birth, and photograph.
• Proof of address — a recent utility bill (gas, electricity, water, internet), bank statement, or government correspondence showing the user's full name and residential address. The document must be dated within the last 3 months.

3.2. Verification Process

1. The user uploads the required documents through their PreviaLook account dashboard.
2. PreviaLook staff review the documents within 1–2 business days.
3. If the documents meet the requirements, the KYC status is marked as “Approved” and the user is notified by email.
4. If the documents are insufficient, unclear, or expired, the user is notified and asked to re-submit.

3.3. Enhanced Due Diligence (EDD)

In cases where the Company identifies higher-risk indicators — including but not limited to unusually large transaction volumes, geographic risk factors, or inconsistent information — enhanced due diligence measures may be applied. This can include requests for additional documentation, source of funds verification, or delays in processing.

3.4. Payout Account Matching (Card Scheme & Network Rules)

To prevent payout fraud and comply with Visa, Mastercard, and banking network operating regulations, financial payouts will exclusively be disbursed to a payment card issued in the exact, verified legal name of the user as established during the KYC process. Payouts to third-party accounts, unverified entities, or anonymous payment methods are strictly prohibited.

4. Transaction Monitoring

PreviaLook monitors partner transactions for unusual patterns, including:

• Unusually high volumes of referral sign-ups in a short period;
• Self-referral or circular referral patterns;
• Multiple accounts linked to the same person or payment method;
• Transactions from sanctioned jurisdictions.

Suspicious activity is escalated internally to PreviaLook's designated Nominated Officer / Money Laundering Reporting Officer (MLRO). Where the MLRO evaluates an internal disclosure and determines there is knowledge or suspicion of money laundering or terrorist financing, a formal Suspicious Activity Report (SAR) will be submitted to the UK National Crime Agency (NCA) in accordance with our legal obligations under the Proceeds of Crime Act 2002.

5. Sanctions Screening

All users requesting payouts are screened against applicable sanctions lists, including but not limited to UK HM Treasury sanctions, EU consolidated sanctions, UN Security Council sanctions, and OFAC (US) sanctions lists.

In addition, in accordance with Regulation 35 of the MLR 2017, PreviaLook screens payout recipients to determine whether they are a Politically Exposed Person (PEP), or a family member or known close associate of a PEP. Domestic and international PEPs will be subject to risk-based Enhanced Due Diligence (EDD) and require senior management sign-off prior to any financial disbursal.

6. Record Keeping

All AML records, including evidence of identity verification, transaction history, and any correspondence related to due diligence, are maintained for a minimum of five (5) years after the business relationship with the user has ended. These records will be made available to law enforcement or regulatory bodies upon legitimate request.

7. Staff Training

All PreviaLook staff involved in processing payouts or reviewing KYC documentation receive appropriate training on AML/CFT obligations, recognising suspicious activity, and internal escalation procedures.

8. Data Protection

All personal data collected for KYC purposes is processed in accordance with our Privacy Policy and applicable data protection legislation (UK GDPR / EU GDPR). Documents are stored securely with encryption at rest and access restricted to authorised personnel only.

Personal data collected explicitly for identity verification and anti-money laundering compliance is processed under the lawful basis of legal obligation (UK GDPR Article 6(1)(c)). These documents are kept entirely siloed from general platform usage data and are completely distinct from the temporary 3-day storage ecosystem utilized for virtual try-on images.

9. Senior Management Approval

This policy has been reviewed and approved by the senior management of PreviaLook Ltd. It is subject to periodic review and will be updated as necessary to reflect changes in applicable law or business practices.

10. Contact

If you have questions about this policy or the verification process, please contact us:

• Email: compliance@previalook.com
• General enquiries: hello@previalook.com

Last updated: June 2026