Privacy Policy

1. Data Controller Information

Deft Warrantorship operates as the data controller responsible for the collection and processing of personal data gathered via this website and our operational interfaces. When you interact with our platform, we handle your data in accordance with the regulatory standards established in the United Kingdom and relevant international data protection laws.

2. Categories of Data Collected

We collect and process various categories of data to provide, optimize, and safeguard our services, including:

• Identity and Contact Data: Name, email address, telephone contact details, and country of residence submitted during account onboarding or inquiry workflows;
• Technical and Device Data: Internet Protocol (IP) addresses, operating system specifications, browser attributes, hardware profiles, time-zone settings, and network access timestamps;
• Usage and Interaction Data: Analytical clickstream information, navigation routes, feature utilization, signal response interactions, and error logs;
• Transactional Metadata: API connection indicators, account balance timestamps, and system audit trails (excluding sensitive payment card numbers handled by payment service providers).

3. Lawful Bases for Processing

Under UK GDPR, we process personal data under the following lawful bases:

• Performance of Contract: To administer platform accounts, maintain system uptime, and fulfill user requests;
• Legitimate Interests: To enhance platform functionality, detect malicious activities, prevent cyber threats, and improve algorithmic responsiveness;
• Legal and Regulatory Compliance: To satisfy statutory anti-money laundering (AML), fraud prevention, and audit requirements;
• Consent: Where you provide explicit opt-in confirmation for marketing communications or optional analytical tracking cookies.

4. Cookies and Analytical Technologies

Deft Warrantorship utilizes essential, functional, and performance cookies to enable interface security, maintain active sessions, and analyze traffic distributions. Essential cookies are deployed automatically to ensure website integrity. Non-essential analytical cookies are placed solely with user authorization, which can be modified or withdrawn at any time through your browser configuration settings.

5. Information Sharing and Disclosure

We do not sell, rent, or lease personal identifiers to third parties. We may disclose personal data to select entities strictly under confidential and controlled frameworks:

• Approved infrastructure providers, hosting facilities, and cloud computing nodes;
• Integrated brokerages and liquidity connectivity partners necessary for account routing;
• Professional legal advisors, auditors, and regulatory bodies when mandated by applicable UK statutes or court subpoenas.

6. Cross-Border Data Transfers

When user data is transferred outside the United Kingdom or the European Economic Area, Deft Warrantorship implements recognized safeguards to protect data integrity. Such mechanisms include the UK International Data Transfer Agreement (IDTA), UK Addendum to the EU Standard Contractual Clauses (SCCs), or processing within territories officially acknowledged for adequate statutory data protection.

7. Data Retention Policy

We retain collected personal data only as long as necessary to fulfill the purposes described in this policy, satisfy active account commitments, and comply with mandatory legal, tax, and auditing record-keeping mandates. When data is no longer required, it is permanently erased, securely destroyed, or fully anonymized using cryptographic measures.

8. Your Statutory Rights

Under the UK Data Protection Act 2018 and UK GDPR, you maintain comprehensive rights regarding your personal information, including:

• Right of Access: Obtain confirmation of processing and request copies of personal data held;
• Right to Rectification: Request correction of inaccurate, misleading, or incomplete records;
• Right to Erasure: Request permanent removal of your data where statutory grounds permit;
• Right to Restriction and Objection: Limit or challenge the scope of data processing conducted under legitimate interests;
• Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.

9. Security Architecture

We deploy robust organizational and technological safeguards, including end-to-end transport layer security (TLS) encryption, strict internal access controls, multi-factor credential authentication, and continuous network vulnerability assessments to shield your information from unauthorized access, accidental alteration, or disclosure.

10. Regulatory Authority and Contacts

If you have questions regarding this Privacy Policy, wish to exercise your data rights, or submit a formal inquiry, please contact our Data Protection Team at [email protected]. If you consider that our processing breaches UK data protection regulations, you have the statutory right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.