Until you are not opening up for public/crowd funding, I do not think any STO/ICO rule will be applied to you. Anyways these are rule currently followed in USA, UK might have some other rules.
Let speak, even ICO is legit and have known team but did not it look stupid to provide the all the hard cap amount to them without any MVP available and they have all of your money without any responsibility towards you. This is fully on trust now with no checks. Are they can be held responsible for creating a bad product or failing to create the product?
I checked for https://www.icumulate.io/ ICO (utility token offering), they claimed that they are registered in Gibraltar but Gibraltar Financial Services Commission replied as below.
The GFSC does not currently regulate ICOs, however, the Gibraltar Government is planning on issuing Token Regulations in future. You will be able to find more information on this in the “Token Legislation plans: press release February 2018” PDF on our website at the following URL: http://www.fsc.gi/downloads?section=19&type=0
For future reference, you can find a list of authorised DLT Providers on our website at the following URL: http://www.fsc.gi/regulated-entities/dlt-providers-38
They were late in providing the response, icumulate.io already cancelled the ICO till then and I was not able to question them.