Privacy Policy
1. Introduction & Data Controller
Crystaliris ("we", "us", "our") is committed to protecting and respecting your personal privacy. This Privacy Policy details how we collect, store, process, and safeguard personal information obtained through our official website and algorithmic software interfaces.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is Crystaliris, located at Corn Street 231, EC4N 7BJ London, United Kingdom.
2. Categories of Data We Collect
Depending on your interaction with our platform, we may process the following types of personal information:
- Identity and Contact Data: Full name, verified email address, telephone contact number, and country of residence provided during communication or access requests.
- Technical Telemetry Data: IP addresses, browser specifications, operating system details, time-zone settings, referring URLs, and diagnostic session identifiers.
- Trading Configuration Data: Algorithmic risk preferences, simulated parameter inputs, trading pair choices, and feature usage telemetry.
- Communication Records: Transcripts of customer support inquiries, technical service tickets, and compliance correspondence.
3. Lawful Grounds for Processing
Under UK data protection law, we process your personal data exclusively under one or more recognized legal bases:
- Contractual Necessity: To deliver requested platform features, maintain user accounts, and execute requested services.
- Legitimate Interests: To enhance algorithmic efficiency, ensure server resilience, detect malicious traffic, and optimize site functionality.
- Legal and Regulatory Compliance: To satisfy fraud detection, anti-money laundering (AML), and security auditing statutory obligations.
- Explicit Consent: Where you have expressly consented to receiving direct technical updates or non-essential telemetry tracking.
4. How We Use Personal Information
We use information collected strictly for legitimate administrative and operational aims, including:
- Provisioning and maintaining access to our automated trading algorithms and analytics.
- Verifying user identity and preventing platform fraud, spoofing, or unauthorised API scraping.
- Facilitating secure integrations with independent brokerage environments requested by the user.
- Responding to technical support tickets and general customer service communications.
- Conducting quantitative analysis to upgrade mathematical execution models and server response times.
5. Data Disclosure and Third-Party Transfers
Crystaliris does not sell, lease, or monetize your personal information. We may share information only with trusted third parties under stringent confidentiality obligations:
- Secure cloud infrastructure and hosting providers operating within the UK and European Economic Area (EEA).
- Independent partner brokerages when you deliberately choose to connect your trading workspace.
- Regulatory authorities, law enforcement bodies, or judicial agencies when compelled under mandatory UK statutory disclosure rules.
6. International Data Transfers
Where processing involves data transmission outside the United Kingdom, Crystaliris ensures adequate security protections are in place through UK International Data Transfer Agreements (IDTAs) or European Commission Standard Contractual Clauses with UK addendums, guaranteeing that your personal data receives equivalent protection.
7. Data Retention & Security Standards
We maintain rigorous enterprise-grade security protocols, including AES-256 encryption at rest, TLS 1.3 encryption in transit, strict role-based access restrictions, and persistent vulnerability monitoring. We retain personal data only as long as necessary to fulfill contractual services, resolve ongoing disputes, and fulfill statutory legal record-keeping requirements.
8. Your Statutory Rights
Under the UK GDPR, you maintain comprehensive rights regarding your personal information, including:
- Right of Access: Request a copy of the personal information we maintain concerning your profile.
- Right to Rectification: Request correction of inaccurate, incomplete, or outdated data.
- Right to Erasure: Request the deletion of your personal records ("Right to be Forgotten") where no continuing legal ground exists.
- Right to Restrict Processing: Request suspension of data processing under certain contested circumstances.
- Right to Data Portability: Obtain your structured personal information in a machine-readable format.
- Right to Object: Object to data processing based on legitimate commercial interests or direct messaging.
9. Cookie Policy Summary
We deploy essential technical cookies necessary for platform operation, routing, and user authentication. Analytical cookies are utilized only with consent to assess platform traffic patterns and resolve performance bottlenecks. You can manage or disable cookies via your browser settings at any time.
10. Regulatory Complaints and Contact
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection Officer at:
Email: [email protected]
Postal Address: Corn Street 231, EC4N 7BJ London, United Kingdom
Telephone: +44 20 7946 7797
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your personal data has been handled inconsistently with applicable legislation.