Privacy Notice

This Privacy Notice explains how Bold Reckonavence (“we”, “our”, or “us”) processes, maintains, protects, and discloses personal data collected through our algorithmic crypto intelligence platform, website, and related customer communication channels. We act as data controller in respect of your personal data under the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Categories of Personal Data We Process

Depending on your interactions with the Platform, we may collect and process the following classes of information:

• Identity and Contact Data: Full legal name, email address, telephone contact number, country of residence, and communication records;
• Technical and Network Telemetry: Internet Protocol (IP) addresses, cryptographic session identifiers, operating system versions, browser fingerprints, hardware screen dimensions, and execution latency logs;
• Platform Usage Data: Pages viewed, interaction durations, analytical tool configurations, charting indicator preferences, and navigation clickstream paths;
• Transactional and API Data: Read-only exchange API keys (where provided for algorithmic synchronization), execution timestamps, and simulation telemetry. We do not store private wallet keys or custodial banking credentials.

2. Lawful Bases for Processing

In adherence to the UK GDPR, we process personal data exclusively under defined statutory legal grounds:

• Performance of a Contract: To provision platform services, establish user sessions, and deliver requested quantitative analysis;
• Legitimate Interests: To detect algorithmic abuse, prevent distributed denial-of-service (DDoS) incidents, enhance software stability, and ensure cryptographic data integrity;
• Legal and Regulatory Compliance: To satisfy mandatory statutory obligations, tax reporting standards, and responses to competent regulatory authorities;
• Consent: Where you have expressly consented to non-essential performance tracking or direct analytical email briefings. You may withdraw consent at any time.

3. How We Utilize Your Information

We leverage personal and technical records to operate, sustain, and improve our services, including to:

• Authenticate user accounts and verify interface session continuity;
• Distribute sub-millisecond market alerts, risk threshold notifications, and computational model updates;
• Monitor server workloads, optimize distributed cloud infrastructure, and diagnose pipeline latency;
• Defend against malicious automated attacks, credential stuffing, and unauthorized scraping.

4. Disclosure of Data to Third Parties

We do not broker or vend your information. We may transfer information to vetted service providers bound by strict confidentiality and data protection obligations:

• Infrastructure & Hosting: Enterprise cloud hosts and distributed edge networks located within the UK and European Economic Area;
• Security & DDoS Shielding: Cybersecurity providers specializing in bot identification and high-volume packet inspection;
• Independent Execution Partners: Authorized execution brokers or exchange partners when you voluntarily initiate external connectivity via platform modules;
• Statutory Authorities: Law enforcement agencies or judicial bodies only when compelled by valid court orders or mandatory legal procedures.

5. International Data Transfers

Where personal data is transferred outside the United Kingdom, we guarantee that appropriate safeguards are implemented. Such safeguards include processing within jurisdictions recognized as having adequate data protection laws or executing UK International Data Transfer Agreements (IDTAs) alongside standard contractual clauses.

6. Data Security and Cryptographic Standards

We deploy defensive technical and organisational safeguards, including Transport Layer Security (TLS 1.3), database field-level encryption at rest using AES-256, multi-factor credential authentication, and segregated zero-trust network boundaries. Access to client information is restricted strictly to authorized engineering personnel on a need-to-know basis.

7. Data Retention Policy

We retain personal information only for as long as necessary to fulfill the objectives specified in this Notice, unless a longer retention period is mandated by law (such as statutory accounting or compliance rules). Upon expiration of the operational retention term, data is securely erased or rendered permanently anonymous.

8. Your Statutory Privacy Rights

Under United Kingdom data protection law, you possess enforceable rights regarding your data:

• Right of Access: Request a copy of the personal data we hold concerning your account;
• Right to Rectification: Request correction of inaccurate or incomplete personal records;
• Right to Erasure (“Right to be Forgotten”): Request deletion of personal records where statutory grounds apply;
• Right to Restriction: Request restriction of processing under specified dispute circumstances;
• Right to Data Portability: Obtain your digital records in a structured, machine-readable format;
• Right to Object: Contest processing founded on our legitimate commercial interests.

9. Contact and Regulatory Escalation

To exercise your statutory rights or submit a privacy inquiry, contact our Data Protection Officer at [email protected]. If you consider our processing non-compliant with data privacy legislation, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.