1. Introduction and Scope
Equiworthen ("we", "our", or "us") takes the protection of personal data and privacy with the utmost seriousness. This Privacy Policy outlines our procedures and technical mechanisms for processing, storing, and securing personal data in adherence to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy applies to individuals who register on our website, interact with our trading algorithms, configure automated API integrations, or communicate with our operations desk.
2. Data Controller
The data controller responsible for the processing of your personal information is Equiworthen, located at Corn Street 93, EC4N 7BJ London, United Kingdom. You may address questions, compliance requests, or regulatory queries to our Data Protection Officer at [email protected].
3. Categories of Information We Collect
In operating our trading infrastructure, we may gather the following types of data:
- Identity and Contact Data: Full name, verified residential address, telephone number, and email address.
- Technical & System Information: Internet Protocol (IP) address, operating system, browser specifications, time zone settings, device fingerprints, and platform interaction logs.
- Integration & API Parameters: Read/write API keys provided to execute automated orders (private withdrawal permissions are rejected by our validation system), trading venue preferences, and algorithm threshold parameters.
- Financial Interaction Records: Billing identifiers, subscription payment receipts, and anonymized volume metrics. (We do not store complete bank account details or credit card CVV numbers).
4. Legal Grounds for Processing
We process your personal information strictly on validated legal grounds under UK data protection law:
- Contract Performance: Processing necessary to provision software services, run model configurations, and maintain user access under the Terms of Service.
- Legal and Regulatory Compliance: Fulfilling statutory duties regarding fraud prevention, anti-money laundering (AML) controls, and UK statutory record-keeping.
- Legitimate Interests: Enhancing algorithm resilience, preventing distributed denial of service (DDoS) events, auditing network security, and optimizing platform latency.
- Consent: Where explicitly given, for analytical cookies or direct communications regarding platform updates.
5. Data Disclosure and Third-Party Sharing
Equiworthen does not sell, rent, or lease personal identifiers to commercial advertisers. We disclose data solely to trusted external processors under strict confidentiality contracts, including:
- Cloud hosting and distributed server providers located in secure UK and European data centers.
- Identity verification and anti-fraud analysis services executing sanctioned-entity screenings.
- Secure payment gateways handling subscription billing transactions.
- Competent government authorities, courts, or law enforcement entities when required by binding UK statutory obligations.
6. Data Security and Cryptographic Controls
We deploy bank-grade security protocols designed to prevent unauthorized access, alteration, or disclosure of user data. API credentials are stored utilizing AES-256 hardware-level encryption with isolated key vaults. Network transmissions are guarded by TLS 1.3 protocol standards. Internal access to database clusters is gated by strict multi-factor authentication (MFA) and least-privilege role architecture.
7. Data Retention Policy
Personal data is retained only for as long as is necessary to deliver the requested services or to comply with applicable statutory retention requirements. When an account is terminated, operational logs and identity tokens are archived in encrypted cold storage for up to 6 years in accordance with UK corporate record retention statutes, after which they are irreversibly erased or anonymized.
8. Your Statutory Rights
Under the UK GDPR, you maintain comprehensive rights concerning your personal information:
- Right of Access: You may request copies of personal information held by us.
- Right to Rectification: You may ask us to correct inaccurate or incomplete data.
- Right to Erasure: You can request deletion of personal records where legal retention grounds no longer apply.
- Right to Restriction and Objection: You may restrict or object to the processing of personal data under specific conditions.
- Right to Data Portability: You may receive machine-readable exports of your provided data.
To exercise any of these statutory rights, please submit a formal request to [email protected]. If you believe your data has been handled improperly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Contact Us
For data protection inquiries or policy questions, please contact:
Equiworthen — Data Protection Officer
Corn Street 93, EC4N 7BJ London, GB
Email: [email protected]
Telephone: +44 20 7946 2753