Pfft
The company clearly had poor legal advice and/or didn't think things through, yet they want my money and personal data? At the very least, you should consider this error analogous to the Van Halen 'no Brown M&Ms rider', in that it flags sloppy practice elsewhere [1].
[1] https://www.insider.com/van-halen-brown-m-ms-contract-2016-9
Also, their About Us page suggests that they are staffed by people from relevant financial services companies. Plus they are backed by some VCs who would not take risks by handing money to a company if they thought the legal side wasn't up to par.
We don't know why there wasn't an annoying cookie popup. So assuming that the company in general plays "fast and loose" doesn't seem warranted.
Frequently satirised in Private Eye [1] as the 'Fundamentally Complicit Authority' :-)