1. Commitment to Privacy
Rong Kimvuong (“we,” “our,” or “us”) is committed to protecting the integrity, confidentiality, and security of your personal data. This Privacy Policy details the types of information we collect when you visit our website, connect client applications, and utilize algorithmic trading infrastructure, alongside how that information is maintained and governed in conformity with the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).
2. Data We Collect
Depending on your engagement with our systems, we collect and process several categories of information necessary to guarantee platform security and functional stability:
- Identity and Contact Data: Name, email address, telecommunication numbers, and country of residence provided during verification or communications.
- Technical and Telemetry Data: IP address, browser type and version, hardware operating platform, session durations, network route indicators, time-zone settings, and diagnostic latency logs.
- Trading Telemetry and API Keys: Encrypted read/trade API credentials provided to establish exchange connectivity, portfolio balance telemetry, algorithm configuration parameters, and recorded execution event logs. (Note: We do not request or store withdrawal-authorized API permissions).
- Usage and Analytics Data: Interactivity metrics with platform features, calculator usage patterns, backtest queries, and performance monitoring telemetry.
3. Lawful Bases and Purposes for Processing
We process your personal information strictly under established lawful grounds recognised by UK data protection standards:
- Performance of a Contract: To register your account, maintain automated algorithmic routing, deliver customer care, and facilitate user configurations.
- Legal and Regulatory Compliance: To satisfy fraud prevention obligations, enforce anti-money laundering frameworks, and verify compliance with regional digital asset constraints.
- Legitimate Interests: To optimize algorithm throughput, protect our computational networks from denial-of-service attempts, monitor system anomalies, and safeguard proprietary codebase assets.
- Consent: Where explicitly sought for analytical cookies, voluntary performance surveys, or supplemental educational communications.
4. Data Sharing and Third-Party Disclosures
We do not monetize, rent, or sell your personal details to advertising networks. Information may only be disclosed under strict confidentiality protocols to the following recipient categories:
- Infrastructure Providers: Cloud storage vendors, database hosting facilities, and high-speed network routing systems adhering to ISO 27001 and SOC 2 Type II compliance standards.
- Security & Fraud Prevention Partners: Specialist verification software and anomaly-detection engines deployed to prevent identity deception or automated attacks.
- Statutory & Law Enforcement Bodies: Official regulatory authorities or judicial bodies when strictly mandated by enforceable court orders or UK legal obligations.
5. International Data Transfers
Because distributed cloud infrastructure powers algorithmic execution networks globally, data may occasionally be transferred, stored, or processed in jurisdictions outside the United Kingdom. Whenever cross-border transfers occur, we implement robust safeguard mechanisms including UK International Data Transfer Agreements (IDTA), standard contractual clauses, and strict cryptographic encapsulation to ensure that your rights remain equivalently protected.
6. Security Measures and Encryption Standards
Rong Kimvuong enforces institutional-grade cybersecurity controls. All data transmitted between your browser and our network is protected via TLS 1.3 cryptographic protocols. Stored API keys, trading secrets, and authentication digests are encrypted at rest utilizing AES-256 standards with distributed key isolation. In addition, internal staff access to production clusters is strictly partitioned through zero-trust privilege architecture.
7. Data Retention Guidelines
We retain your personal information only for as long as necessary to fulfill the operational purposes for which it was gathered, including satisfying legal, tax, accounting, or security requirements. When account relationships cease, telemetry logs and identifying records are subjected to systematic anonymization or permanent deletion in accordance with our data destruction timetable.
8. Your Rights Under UK Data Protection Law
Subject to applicable limitations under the UK GDPR, you hold comprehensive rights concerning your personal records:
- Right of Access: You may request copies of personal information maintained in our data repositories.
- Right to Rectification: You may ask us to amend inaccurate or incomplete personal records.
- Right to Erasure: You may request the deletion of your personal data where retention is no longer legally justified.
- Right to Restrict or Object: You can dispute processing founded upon legitimate interests or demand processing suspension.
- Right to Data Portability: You can request transfer of digital records to another service in a structured, commonly used format.
To exercise any of these privileges, submit an inquiry to our designated privacy officer via [email protected].
9. Policy Revisions
We may amend this Privacy Policy periodically to reflect technological adjustments, architectural updates, or regulatory revisions. We encourage you to review this page periodically. Continued utilization of our services confirms your ongoing understanding of our updated privacy practices.