Privacy Policy
Finarvex ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website at finarvex.org.uk and our AI-assisted cryptocurrency trading platform (collectively, the "Service"). Please read this Privacy Policy carefully. By using the Service, you consent to the practices described in this policy.
1. Information We Collect
We collect several types of information from and about users of our Service:
1.1 Personal Information You Provide
When you register for an account or use the Service, you may provide us with personal information, including:
- Name, email address, and contact details;
- Date of birth and nationality;
- Government-issued identification documents for verification purposes;
- Payment and financial account information;
- Trading preferences and investment objectives;
- Communications you send to us, including support enquiries.
1.2 Automatically Collected Information
When you access the Service, we automatically collect certain information about your device and usage patterns, including:
- IP address, browser type, and operating system;
- Device identifiers and mobile network information;
- Pages viewed, time spent on pages, and navigation paths;
- Referring website addresses and search terms;
- Log data, including access times and error reports.
1.3 Cookies and Similar Technologies
We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities and preferences. You can control cookie settings through your browser, though disabling cookies may limit certain functionality of the Service.
1.4 Trading and Transaction Data
We collect information about your trading activity, including transaction history, account balances, deposit and withdrawal records, and interaction with our trading algorithms.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service provision: To create and manage your account, process transactions, and deliver the trading services you request;
- Verification and security: To verify your identity, prevent fraud, detect and prevent security threats, and comply with legal obligations;
- Communication: To send you service-related notifications, updates, security alerts, and customer support messages;
- Improvement and analytics: To analyse usage patterns, improve our algorithms, enhance user experience, and develop new features;
- Marketing: To send promotional communications about our services, where you have consented to receive such messages (you may opt out at any time);
- Legal compliance: To comply with applicable laws, regulations, legal processes, and enforce our Terms of Service.
3. Legal Basis for Processing (UK GDPR)
Under the UK General Data Protection Regulation (UK GDPR), we process your personal information based on the following lawful grounds:
- Contractual necessity: Processing is necessary to perform our contract with you and provide the Service;
- Legal obligation: Processing is required to comply with our legal and regulatory obligations;
- Legitimate interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, and service improvement, provided these interests do not override your fundamental rights;
- Consent: Where you have given explicit consent for specific processing activities, such as marketing communications.
4. How We Share Your Information
We do not sell your personal information. We may share your information with third parties in the following circumstances:
4.1 Service Providers
We engage trusted third-party service providers to perform functions on our behalf, including payment processing, identity verification, cloud hosting, data analytics, customer support, and email delivery. These providers have access to your personal information only to perform specific tasks and are obligated to protect your information.
4.2 Business Transfers
In the event of a merger, acquisition, reorganisation, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity.
4.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to meet national security, law enforcement, or regulatory requirements.
4.4 Protection of Rights
We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving threats to the safety of any person, or violations of our Terms of Service.
5. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When your account is closed, we may retain certain information for compliance, dispute resolution, fraud prevention, and record-keeping purposes. Retention periods vary depending on the type of data and applicable legal requirements.
6. Your Rights
Under the UK GDPR, you have the following rights regarding your personal information:
- Right of access: You may request a copy of the personal information we hold about you;
- Right to rectification: You may request correction of inaccurate or incomplete information;
- Right to erasure: You may request deletion of your personal information in certain circumstances;
- Right to restriction: You may request that we limit the processing of your information;
- Right to data portability: You may request a copy of your information in a structured, commonly used format;
- Right to object: You may object to processing based on legitimate interests or for direct marketing purposes;
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us using the contact information provided on our website. We will respond to your request within one month, subject to verification of your identity.
7. Data Security
We implement appropriate technical and organisational security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure socket layer (SSL) technology, firewalls, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
8. International Data Transfers
Your personal information may be transferred to and processed in countries outside the United Kingdom. Where we transfer data to countries that do not provide an adequate level of data protection, we implement appropriate safeguards, such as standard contractual clauses approved by the UK authorities, to ensure your information is protected.
9. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly.
10. Third-Party Links
The Service may contain links to third-party websites or services that are not controlled by Finarvex. This Privacy Policy does not apply to such third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on the Service and updating the "Last Updated" date. Your continued use of the Service after such changes constitutes your acceptance of the revised Privacy Policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the contact information provided on our website at finarvex.org.uk.
13. Supervisory Authority
If you believe that we have not handled your personal information in accordance with applicable data protection laws, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection matters.