Privacy Policy

1. Who we are

This Privacy Policy explains how Volatitan ("we", "us", "our") collects and uses personal data when you visit our website, create an Account or use our trading dashboard and related Services. For the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, Volatitan is the controller of the personal data described here.

2. Personal data we collect

We may collect the following categories of personal data:

• Identity and contact data, such as your name, email address, telephone number and postal address.
• Account data, such as login credentials (stored in hashed form), preferences and settings for Trading Bots and risk controls.
• Verification data, where required by law or by our payment providers, such as proof of identity and address.
• Financial and transaction data, such as subscription payments and records of activity within the dashboard.
• Technical data, such as IP address, device type, browser information and log-in timestamps.
• Usage data, such as pages viewed, features used and calculator settings.

3. How we use your data and our legal bases

We process personal data only where we have a lawful basis to do so. We rely on performance of a contract to provide the Services and manage your Account. We rely on legal obligation to meet anti-money laundering, tax and record-keeping duties. We rely on legitimate interests to secure our systems, prevent fraud, improve the Services and handle enquiries, always balancing those interests against your rights. Where we send marketing communications, we do so on the basis of your consent or our legitimate interest in promoting similar services, and you may opt out at any time.

4. Automated analysis

The Services use automated processes to analyse market data and operate Trading Bots. These processes analyse market information rather than making decisions about you that produce legal or similarly significant effects. Where automated processing affects your account, you may request human review by contacting us.

5. Sharing your data

We do not sell personal data. We may share data with trusted service providers who host our infrastructure, process payments, provide identity verification, deliver customer support or supply analytics, and only under written contracts requiring appropriate safeguards. We may also disclose data where required by law, by a court, or by a regulator, or to protect the rights and safety of our users.

6. International transfers

Some of our providers may process data outside the United Kingdom. Where this occurs, we ensure that an adequate level of protection is in place, for example through UK-approved international data transfer agreements or other safeguards recognised under UK data protection law.

7. Cookies and similar technologies

We use strictly necessary cookies to operate the site and, where you consent, analytics and preference cookies. You can manage non-essential cookies through your browser settings or the consent controls provided on our website. Blocking some cookies may affect how the Services function.

8. Retention

We keep personal data only for as long as necessary for the purposes described in this policy. Account data is generally retained for the life of your Account and for a limited period afterwards to meet legal, tax and dispute-resolution obligations. Verification and transaction records are kept for the periods required by applicable law. When data is no longer needed, we delete or anonymise it securely.

9. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls, role-based permissions, monitoring and regular security reviews. No system is completely secure, so we cannot guarantee absolute security. Please keep your login details confidential.

10. Your rights

Under UK data protection law you have the right to be informed, to access your personal data, to have inaccurate data rectified, to have data erased in certain circumstances, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. To exercise these rights, contact us using the details below. We will respond within one month, extendable where the law permits.

11. Children

The Services are not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can delete it.

12. Complaints

If you have concerns about how we handle your data, please contact us first so that we can address them. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.

13. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or the law. The current version will always be published on this page with its latest revision date. Material changes will be notified to you through the Services or by email where appropriate.

14. Contact us

Data protection enquiries can be sent to [email protected] or by telephone on +44 20 7946 9156. Postal correspondence may be addressed to High Holborn 154, EC3M 4AJ Edinburgh, GB.