This Privacy Policy describes how Lorvinyx ("we", "us", or "our") collects, holds, utilizes, protects, and discloses personal information obtained through our institutional-grade algorithmic software ecosystem and web presence. We are committed to processing all data in rigorous compliance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller Information
The designated Data Controller responsible for your personal data is:
Lorvinyx Operations
Corn Street 19, LS1 5AT Leeds, GB
Company Telephone: +44 20 7946 4221
Data Protection Enquiries: [email protected]
2. Categories of Information We Collect
Depending on your interaction with the Platform, we may collect and process the following categories of information:
- Identity and Contact Data: Full name, verified email address, telephone contact number, country of domicile, and communication records;
- Technical and Telemetry Data: Internet Protocol (IP) address, operating system, browser profile, device architecture, access timestamps, and diagnostic log files;
- Configuration and Operational Data: User-defined algorithmic parameters, risk thresholds, simulated portfolio allocations, and terminal UI preferences;
- API Credential Tokens: Encrypted, read-and-trade API keys provided by you to enable broker integration. We do not store or request withdrawal-enabled credentials.
3. Lawful Bases for Processing
We process your personal information only when a legitimate legal basis exists under applicable regulations, specifically:
- Contractual Performance: Providing algorithmic order routing, managing account authorization, and delivering customer service requested by you;
- Legitimate Interests: Hardening cybersecurity defenses, optimizing machine learning telemetry, preventing fraudulent platform exploitation, and maintaining system stability;
- Legal and Regulatory Compliance: Satisfying anti-fraud directives, responding to statutory legal demands, and preserving record-keeping obligations;
- Consent: Where you have granted explicit consent for direct technical updates or non-essential telemetry tracking (which you may withdraw at any time).
4. Technical and Organisational Safeguards
Lorvinyx implements institutional-grade protective measures to defend against unauthorized destruction, alteration, or interception of personal data. All data transfers employ modern TLS 1.3 protocol encryption, while data at rest is secured via AES-256 standards. Our operational network enforces zero-trust architecture, multi-factor privilege access controls, and routine penetration audit regimes.
5. Disclosures and Third-Party Processors
We do not sell, rent, or trade your personal data. We disclose information strictly on a need-to-know basis to vetted technological subcontractors, including:
- Cloud hosting providers and edge computing networks located in certified data centres;
- Cybersecurity monitoring, DDoS mitigation, and intrusion prevention services;
- Professional legal, regulatory, and auditing consultants bound by professional confidentiality.
In all instances, international data transfers are protected under approved Standard Contractual Clauses or equivalent adequacy frameworks under UK law.
6. Data Retention Schedule
We retain your personal data only for as long as strictly necessary to fulfill the purposes for which it was gathered, including satisfying legal, accounting, dispute-resolution, and reporting obligations. Upon account closure or termination of platform access, relevant telemetry and contact archives are scheduled for automated cryptographic wiping or anonymization within statutory time limits.
7. Your Statutory Rights
Under UK data protection laws, you possess significant rights regarding your personal information, including:
- Right of Access: The right to request copies of the personal records we hold concerning you;
- Right to Rectification: The right to request correction of inaccurate, incomplete, or obsolete information;
- Right to Erasure ("Right to be Forgotten"): The right to demand deletion of your records where retention is no longer justified;
- Right to Restriction and Objection: The right to pause or object to specific automated processing pipelines;
- Right to Data Portability: The right to receive your provided personal data in a structured, machine-readable format.
To exercise any statutory right, please submit a verified request to [email protected]. We respond to all legitimate requests within 30 calendar days.
8. Policy Amendments
We may amend this Privacy Policy to reflect evolving system capabilities or supervisory mandates. Any revisions will be published here with an updated effective date. We encourage regular review to maintain current awareness of our security protocols.