Privacy Policy

1. Data Controller and Governance

Ipe Capitanca ("we", "us", or "our") acts as the data controller responsible for the processing of personal data collected through our official web ecosystem and computational endpoints. Our organizational address is Park Row 106, WC1V 6AA Manchester, United Kingdom.

We strictly adhere to data protection regulations applicable within the United Kingdom, including the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), maintaining robust technical and administrative barriers against unauthorized disclosure.

2. Categories of Information We Collect

To provide high-performance algorithmic execution and comply with applicable statutory duties, we collect the following classifications of user data:

• Identity and Contact Data: Legal full name, email address, telecommunication contact details, and proof of address provided during onboarding;
• Technical and Telemetry Data: IP address, browser footprint, operating system specifications, network latency diagnostics, session timestamps, and device identifiers;
• Trading Configuration Data: User-selected parameters, backtest settings, risk tolerance bounds, and read/trade exchange API tokens (encrypted with AES-256 at rest);
• Communications Data: Customer support records, incident tickets, feedback submissions, and administrative correspondence.

3. Legal Bases for Processing Personal Data

We process your personal data solely under defined lawful grounds pursuant to Article 6 of the UK GDPR:

• Contractual Performance: Necessary for initializing your account, providing automated bot functionality, and delivering execution notifications;
• Legal Obligations: Compliance with statutory anti-money laundering (AML), fraud prevention, counter-terrorist financing, and tax reporting requirements;
• Legitimate Interests: Protecting platform integrity, preventing automated attacks or market abuse, optimizing server latency, and improving trading algorithms;
• Consent: Explicit approval for analytical cookie placement and non-essential product advisories, revocable at any stage.

4. Cookies and Analytical Trackers

The Platform employs lightweight, performance-focused cookies and local storage tokens strictly required for session continuity, multi-factor authentication states, and interface latency measurement. We do not sell user data to advertising aggregators or deploy intrusive cross-site behavioural trackers.

You may manage or disable cookies directly within your browser settings; however, disabling critical operational tokens may diminish platform responsiveness or prevent secure login persistence.

5. Data Retention and Safeguarding

We implement bank-level cryptographic standards, including end-to-end TLS 1.3 transport security, role-based hardware access boundaries, and segregated key-management services. Account data is retained only for the duration necessary to satisfy operational needs and regulatory audit mandates (typically up to five years post-account closure under financial record retention rules).

When records are no longer mandatory for regulatory or contractual justifications, they are irreversibly anonymized or securely purged from active production databases.

6. Third-Party Disclosures and International Transfers

We do not commercialize or rent personal records. We may share limited datasets with selected, vetted third parties strictly under confidentiality agreements, including:

• Cloud hosting, computational nodes, and enterprise infrastructure providers situated within secure UK, EU, or approved equivalence territories;
• Regulatory agencies, law enforcement, or financial supervisory authorities upon receipt of a valid, enforceable court order;
• Identity verification partners performing automated sanctions and PEP screenings.

Any international data transfer outside the United Kingdom is conducted pursuant to Standard Contractual Clauses (SCCs) or International Data Transfer Agreements (IDTAs) ensuring equivalent safeguards.

7. Your Statutory Privacy Rights

Under UK data protection law, you hold fundamental rights regarding your information, which include:

• The right to obtain confirmation and access copies of your personal data;
• The right to rectify inaccurate, outdated, or incomplete records;
• The right to request the erasure of your data ("right to be forgotten"), subject to statutory record-keeping exemptions;
• The right to restrict or object to specific automated processing workflows;
• The right to data portability in a machine-readable structured JSON format.

8. Data Protection Officer and Inquiries

To exercise your statutory data subject rights or obtain clarification on our privacy architecture, you may contact our appointed Data Protection Officer via email at [email protected] or via telephone at +44 20 7946 1555. You also maintain the right to lodge a complaint with the UK Information Commissioner's Office (ICO) should you believe your rights have not been respected.