Privacy Notice

1. Identity of the Data Controller

Thriftidom operates the platform accessible via its official web properties. For the purposes of applicable data protection legislation in the United Kingdom, Thriftidom serves as the Data Controller responsible for determining the purposes and means of processing your personal information.

2. Categories of Information We Collect

To provide our algorithmic dashboard, secure user authentication, and ensure continuous technical optimization, we collect and process several categories of information:

• Identification and Contact Details: Full name, verified email address, phone contact number, and country of residence provided during platform registration.
• Technical and Device Telemetry: Internet Protocol (IP) address, operating system, browser configuration, timezone, device identifiers, and hardware specifications.
• Usage and Interaction Records: Time-stamped login sessions, feature usage frequency, navigational paths, execution log traces, and preference settings within the application interface.
• Verification and Compliance Data: Information required to adhere to anti-money laundering (AML) directives, combatting financial crime frameworks, and jurisdictional access verification.

3. Lawful Grounds for Data Processing

We process your personal data under the following legal bases recognized within the UK GDPR framework:

• Performance of a Contract: Processing essential for registering your account, deploying automated algorithmic tools, and executing service obligations outlined in our Terms of Service.
• Legitimate Interests: Monitoring technological infrastructure performance, preventing abusive market access, safeguarding cryptographic data keys, and preventing unauthorized software exploitation.
• Compliance with Legal Obligations: Fulfilling statutory record-keeping, law enforcement liaison requests, and regulatory reporting requirements.
• Explicit Consent: Where you have opted in to receive non-transactional system releases, market updates, or promotional technology releases, which can be withdrawn at any time.

4. How We Utilize Your Information

Your data is processed strictly for the following operational reasons:

• To provision, authenticate, and maintain your Thriftidom platform profile.
• To configure technical routing between your client environment and supported execution venues or liquidity providers.
• To maintain system integrity, detect network penetration attempts, and safeguard encrypted communications.
• To provide technical troubleshooting and customer onboarding support.

5. Data Sharing and Cross-Border Transfers

We do not monetize, rent, or trade your personal information to unassociated third-party advertising brokers. Data is shared exclusively under strict confidentiality arrangements with:

• Cloud hosting providers and cybersecurity infrastructure vendors maintaining Tier-3 or higher enterprise data centres.
• Regulated partner liquidity channels and execution venues that you explicitly choose to connect with.
• Legal counsel, compliance auditors, or competent governmental bodies when legally mandated under court order or statutory requirements.

If personal data is transferred outside the United Kingdom or the European Economic Area, we implement robust contractual safeguards, including standard contractual clauses approved by the Information Commissioner's Office (ICO), ensuring an equivalent level of security.

6. Security Infrastructure and Cryptographic Protections

We utilize comprehensive technical, administrative, and physical security measures to shield your data from accidental loss, destruction, alteration, or unauthorized disclosure. These protections include Transport Layer Security (TLS 1.3) data encryption in transit, AES-256 encryption for data at rest, zero-trust network segregation, and stringent internal access credentials.

7. Data Retention Guidelines

We retain personal data only for as long as necessary to accomplish the operational purposes for which it was originally gathered, or to comply with statutory legal, auditing, and dispute resolution timeframes. Once retention thresholds expire, records are permanently erased, overwritten, or irreversibly anonymized.

8. Your Statutory Rights Under UK GDPR

Subject to certain statutory criteria, you hold key rights regarding your personal records, including:

• Right of Access: You may request copies of personal records stored in our systems.
• Right to Rectification: You may demand correction of incomplete or outdated personal information.
• Right to Erasure: You can request deletion of personal information where processing is no longer legally grounded.
• Right to Restrict or Object: You hold the right to limit or object to our processing activities under specific conditions.
• Right to Portability: You may request transmission of your personal data to another service provider in a structured, commonly used machine-readable format.

9. Cookies and Analytical Tracking

Our website utilizes strictly essential session cookies for security authentications and routing stability, alongside aggregated analytical scripts to monitor web server loads. You retain the ability to disable non-essential cookies via browser settings, though certain interface components may exhibit limited functionality.

10. Regulatory Supervision and Inquiries

If you have any questions, wish to exercise any of your statutory rights, or have concerns regarding our privacy methodologies, you may contact our dedicated privacy governance team. If you feel our response does not adequately address your concern, you also hold the right to lodge a formal complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.