Spectral Trading Ltd. a company registered in England and Wales with company number 14271235 and have its registered office at 86-90 Paul Street, London, EC2A 4NE, United Kingdom ("Company", "we", "us" or "our") is aware of the importance of the protection of personal data and, therefore, it has adopted this general data protection policy ("Privacy Policy").
Website: We are the exclusive owner and operator of the website located at https://spectralalpha.com ("Website").
Software: the software developed by Spectral Trading Ltd. in order to provides educational content on how algorithms trade the financial markets. The Software is available through the Website https://spectralalpha.com.
This Privacy Policy explains how we, as the data controller, collect, use, store, disclose and otherwise process your personal data provided to us (whether via the Website, or by any other means) or otherwise held by us.
Collection and processing of your personal data is conducted in accordance with the applicable data protection legislation, in particular, the General Data Protection Regulation.
Personal Data Collected and Purposes of its Processing
We process your personal data only to the extent determined by the particular services we provide to you via Website or other purposes of processing as specified below.
1. When you register on our Website. During the registration with our services, we ask for your name, phone number, email address and password. In common with most websites, we also log the IP address of all requests to our servers. Once you've registered, we will send you a confirmation email acknowledging your new account to the address that you supplied. We need to process the aforementioned personal data to enable you the use of our services offered through the Website. Legal basis for such processing is performance of a contract to which you are a party (i.e. provision of our services you have registered for), and the collected personal data will be processed for the period of the duration of our contractual relationship.
2. While on the Website, we automatically log certain information about how you're using this Website that may be regarded as personal data. This information includes the URL that you just came from, your intellectual property address, the pages you visit while using the Website, the number of pages viewed, browser identification and operating system, the device from which you come, traffic data and recording of some visits to the Website.
3. If you contact us, we may keep a record of that correspondence in order to provide services upon a mutual agreement. We will keep details of transactions you carry out through the Website and of the fulfilment of your orders and your historic trading track-record, and information about any trades from the point you start reporting them to us. Legal basis for such processing is performance of a contract to which you are a party (i.e. provision of the requested service), and the collected personal data will be processed for the period of the duration of the contractual relationship.
4. From time to time, we may contact you in order for us to improve the quality of our Website and, as the case may be, to develop new services related to them. For this purpose, we may process the collected personal data (please see above for the scope of your personal data). Such processing is based on your consent and the personal data will be processed for the duration of the consent.
5. If we need to keep data for potential claims in future. In addition, we need to process and store all the collected personal data (please see above for the scope of your personal data) for the purpose of potential legal claims in the future. This processing is based on our legitimate interest as we might need to keep evidence for any potential dispute that may arise. The personal data will be processed for the period necessary to fulfil this purpose, however, no longer than for the period of 10 years from the commencement of the statutory limitation period in each particular case.
6. If you register with us or sign up for any of our products or services, we may process your electronic contact details, such as your e-mail address or phone number, for purposes of promotion of our products and services. You can unsubscribe from such commercial communications at any time by contacting us. You will also have the option to unsubscribe from receiving this kind of communication in each message you receive from us. Details of your electronic contact will be processed for the period of the duration of the contractual relationship or until you unsubscribe, whichever comes first.
7. By using the Software, whether during a free trial or otherwise, you acknowledge and accept for us to collect information about your use of the Services, such as exchange balance information, deposits, withdrawals, trades, and payment notifications. The data will be processed for the purpose to provide such Services as outlined in our Terms.
Security
We are committed to protecting your personal data. All information that you provide to us is stored on secure servers managed by us or otherwise as referred to in our Terms and Conditions. Access to personalised areas of the Website is password-protected for your privacy and security. You are responsible for maintaining the secrecy of your passwords and/or any account information. If you need to change your password, please follow the steps set out on the Website.
To ensure maximal protection of your personal data when you register with or log in to our services, we use a third-party service provider, Auth0, which securely stores passwords and performs user authentication when logging in. To ensure maximum protection of the API keys you enter when connecting to services provided by third parties, we use a third-party service provider, Digital Ocean (DO), which ensures security according to the most available technological procedures.
Personal Data Sharing and Disclosure
Your personal data will be, to the scope we process them, transferred to other controllers within our group to be processed if it is necessary for administrative purposes. In addition, your personal data will be disclosed to reliable third parties that provide us with administrative or technical support, ensuring accounting, analysis of the traffic on the Website, processing payment transactions and providing marketing research.
We may also share your personal data with government authorities or law enforcement bodies if required by law, with external advisors and with other personnel who are subject to confidentiality obligation. Only a limited number of our employees will have access to your personal data. The employees are obliged to keep your personal data and measures taken for their protection strictly confidential. They are entitled to handle personal data only upon our explicit instructions.
On any forum we may operate (and anywhere else on the Website), you are publicly identified by your user or screen name. If you choose your full name as your username, you have voluntarily disclosed that information to anyone reading the Website. Similarly, any information you provide in your public profile is for public consumption. The same is true for any personal data you include in any forum or related posts.
Other Data Controllers
Many of our partners, such as brokerages and merchants, link from the Website to areas on their own websites where they sell their own goods and services. If you follow these links from the Website to their websites, you should be aware that these other websites have their own privacy and data processing practices.
The Website may also include social media features, such as Facebook, Twitter, Instagram, WhatsApp, Telegram or LinkedIn plug-ins. These plug-ins may collect certain information about visitors of the Website, such as IP address or browsing history and may implement cookies to the browser of the visitors. You should note that processing of the collected data is governed by policies adopted by operators of the social media networks.
Some visits to the website and application may be recorded for the purpose of optimizing the user experience. The recording is through a third party, Hotjar. All data Hotjar collects is stored electronically in Ireland, Europe on the Amazon Web Services infrastructure, eu-west-1 datacenter. IP addresses of visitors are always suppressed before being stored. The recordings are stored for the duration of 30 days.
We are not responsible or liable for the independent policies of other data controllers. For more information regarding a third-party website and its privacy policies, check that website.
Transfer of Your Personal Data to Third Countries
Your personal data may from time to time be transferred to someone who provides a service to us in other countries and it may be processed, stored or otherwise used by us outside of the European Economic Area ("EEA"). Currently, we will transfer your personal data to the United States of America.
Such transfers will only happen for the specific purposes mentioned above, and we will always ensure that appropriate safeguards are in place for such transfers as set out below:
• we will provide appropriate safeguards for the transfer through the use of "Model Contracts for the Transfer of Personal Data to Third Countries", as published by the Commission of the European Union, or any other contractual agreement approved by the competent authorities.
• we will disclose your personal data to the EU-US Privacy Shield certified companies.
Period of Processing of Personal Data
We retain your personal data for no longer than is necessary to fulfil the purpose of the processing in question, i.e. typically for the duration of our contractual relationship. Where we process your personal data based on your consent, such personal data will only be processed for the duration of the consent which you may revoke or restrict at any time. If you do so, we will stop processing the personal data concerned for the purpose for which the consent has been revoked or restricted. Where we process your data based on legitimate interest, you can object to this processing anytime (please see below). Specific information about retention of your personal data is stated above.
Your Right to Object and Other Rights
If you grant us your consent to the processing of your personal data, you do so entirely voluntarily and, therefore, you have the right to revoke or restrict the consent at any time. In certain circumstances, you have the right to object to the processing of your data by us, in particular where your personal data is processed on the basis of a legitimate interest; in such case we will assess your objection and inform you about the result.
You also have the right to access your personal data and to request a copy thereof. You also have the right to ask us to rectify, complete and delete your personal data, to restrict its processing, and to 'port' your personal data (that is, to ask us to provide it to you in a structured, commonly used and machine readable format and to transmit it directly to another organisation).
However, there are exceptions to these rights. For example, it will not be possible for us to delete your data if we are required by law to keep it. Similarly, access to your data may be refused if making the information available would reveal personal information about another person or if we are legally prevented from disclosing such information.
In addition, you have the right to make a complaint to the relevant data protection authority or to seek a remedy through courts if you believe that your rights have been breached.
Changes to this Privacy Policy
Any changes to this Privacy Policy will be posted on the Website so you are always aware of what personal data we collect and how we use it. In case of important changes we will inform you by sending an e-mail or through pop-up notifications.
Contact Details
In case of any personal data protection request or withdrawal of consent to further processing of your personal data, you can contact us at support@spectralalpha.com.
In this regard, we would like to inform you that we may require you to prove your identity to us in an appropriate way so that we can verify your identity. This is a precautionary security measure to prevent unauthorized persons from accessing your personal data.