Privacy Policy

At Firme Capitaveo (“we”, “us”, “our”), protecting the integrity of your personal information and handling it with strict confidentiality is a fundamental operating tenet. This Privacy Policy outlines the categories of data we gather, why we collect it, how it is safeguarded, and your statutory rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller Information

For the purposes of applicable data protection legislation in the United Kingdom, Firme Capitaveo operates as the data controller regarding personal details collected through our platform, online infrastructure, and technical communication channels.

2. Categories of Information We Process

We collect and process personal data strictly in connection with providing our software platform and algorithmic monitoring tools:

• Identity and Contact Data: Including your first name, last name, email address, telephone contact number, and country of residence provided during onboarding.
• Technical and Telemetry Data: Including Internet Protocol (IP) address, browser client architecture, operating system version, access timestamps, routing paths, and device hardware telemetry.
• Configuration and Usage Data: Preferences regarding crypto and currency tracking pairs, algorithmic frequency variables, and telemetry logs related to interface utilization.
• Transaction & Broker Link Metadata: Non-sensitive identifiers necessary to synchronize signal flows between your client session and designated execution endpoints (note: we do not hold or store direct banking card records or custodian passwords on our servers).

3. Legal Bases for Data Processing

Under UK data protection laws, we rely upon the following lawful grounds to process your information:

• Contractual Performance: Necessary to activate your user profile, deliver real-time analytical feeds, and maintain access to our software utilities.
• Legitimate Interests: Necessary to detect platform intrusion, protect algorithmic assets, debug performance bottlenecks, and refine system latency.
• Legal and Regulatory Compliance: Necessary to fulfill anti-fraud, record-keeping, and security compliance obligations under UK legal standards.
• Consent: Where you have voluntarily opted in to receive non-essential technical notices or promotional updates (which can be withdrawn at any time).

4. Data Sharing & Third Parties

Firme Capitaveo does not sell, lease, or monetize your personal information to third-party data brokers. We share information only with trusted third parties under stringent confidentiality agreements:

• Partner Brokerages & Execution Venues: When you request integration to a partner broker, your contact and setup parameters are transmitted to facilitate onboarding and API linkage.
• Cloud Infrastructure Providers: Secure enterprise hosting, encrypted storage, and real-time database clusters located within the UK or European Economic Area (EEA).
• Regulatory & Statutory Authorities: When legally compelled by court orders, statutory bodies, or law enforcement entities under applicable United Kingdom jurisdiction.

5. International Data Transfers

Where personal data is transferred or hosted outside the United Kingdom, we ensure that appropriate safeguards are instituted in compliance with UK GDPR standards. These safeguards may include Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA), or operating exclusively within jurisdictions recognized as providing an adequate standard of personal data protection.

6. Data Security and Storage

We deploy robust technological and operational safeguards, including multi-tier TLS 1.3 encryption in transit, AES-256 encryption at rest, restricted internal privilege trees, and automated anomaly monitoring. While we maintain industry-leading measures, no digital data transmission over the public web is unconditionally impregnable, and you share responsibility for securing your individual entry credentials.

7. Data Retention Periods

We keep your personal information solely for the duration required to fulfill the objectives delineated in this Policy, comply with our auditing and financial obligations, resolve potential claims, and maintain platform integrity. When data is no longer necessary, it is permanently deleted or anonymized using cryptographic hashing techniques.

8. Your Statutory Rights

Subject to conditions established under UK GDPR, you have the right to:

• Request Access: Receive confirmation of whether your personal information is processed and obtain a copy of held records.
• Request Rectification: Rectify inaccurate, outdated, or incomplete data held by our systems.
• Request Erasure: Ask for the deletion of personal data where there is no overriding legitimate ground for continued retention.
• Object to Processing: Challenge processing reliant upon legitimate interests or direct informational updates.
• Request Restriction: Suspend processing under certain factual disputes.
• Data Portability: Receive your data in a structured, commonly used, and machine-readable format.

To exercise any of these statutory rights or lodge an inquiry regarding data privacy practices, please contact our data compliance coordinator through our formal support infrastructure.