Vrestavia ← Return to Homepage
Data Protection

Privacy Policy

Last Updated: January 18, 2026 • Compliant with UK Data Protection Act 2018 / UK GDPR

1. Overview and Scope

Vrestavia ("we", "us", or "our") respects your privacy and is dedicated to protecting your personal data. This Privacy Policy informs you about how we handle personal data when you visit our website, utilize our algorithmic intelligence platform, interact with our market dashboards, or communicate with our operations team.

As a data controller registered and operating in the United Kingdom, we process personal data in strict compliance with the Data Protection Act 2018 and the retained UK General Data Protection Regulation (UK GDPR).

2. Data We Collect

We may collect, use, store, and transfer different categories of personal information categorized as follows:

  • Identity and Contact Data: Includes first name, last name, email address, telephone contact numbers, and country of residence provided during platform registration or inquiries.
  • Technical and Telemetry Data: Includes Internet Protocol (IP) addresses, browser type, operating system version, time zone settings, device identifiers, and platform navigation statistics.
  • Usage and Analytical Data: Information regarding how you interact with our platform calculators, algorithmic strategy modules, backtest simulation tools, and page links.
  • Communication Data: Records of correspondence, customer support requests, and feedback submitted via electronic mail or direct messaging.

Vrestavia does not collect special category personal data (e.g., health, racial origins, political beliefs) or criminal conviction records.

3. Legal Bases for Processing

We process your personal information only when authorized by legal grounds recognized under UK GDPR:

  • Performance of a Contract: Processing necessary to deliver algorithmic tools, configure platform settings, or fulfill contractual commitments.
  • Legitimate Interests: Processing necessary to improve algorithmic accuracy, monitor cyber threats, safeguard server uptime, and prevent platform fraud.
  • Legal and Regulatory Obligations: Compliance with applicable anti-money laundering (AML), tax reporting, or supervisory agency requests.
  • Consent: Where you have granted explicit consent for direct marketing communications or non-essential analytical cookies (which may be withdrawn at any time).

4. Data Sharing and Cross-Border Transfers

We do not sell, rent, or trade your personal data. We may share specific data sets with trusted service providers who assist us in operating our infrastructure, such as cloud hosting vendors, security audit firms, and transactional delivery platforms.

All third-party partners are vetted for stringent data security practices and are bound by Data Processing Agreements. When data is transferred outside the United Kingdom, we implement Standard Contractual Clauses (SCCs) or International Data Transfer Agreements (IDTAs) to ensure adequate protection.

5. Data Retention and Security Measures

We retain personal information only for as long as necessary to fulfill the purposes for which it was gathered, including satisfying legal, regulatory, or reporting requirements. Typically, account records are archived for six (6) years following account termination.

We employ enterprise-grade technical safeguards including TLS 1.3 encryption in transit, AES-256 encryption at rest, isolated database containers, role-based access permissions, and periodic vulnerability testing to safeguard against unauthorized access or breaches.

6. Your Statutory Privacy Rights

Under United Kingdom data protection legislation, you possess several enforceable rights regarding your personal information:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of incomplete or inaccurate records.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of data where no compelling legal ground exists for continued processing.
  • Right to Restriction: Request suspension of data processing during formal disputes.
  • Right to Data Portability: Request transmission of your structured machine-readable data to another provider.
  • Right to Object: Object to data processing predicated on our legitimate business interests.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We respond to verified requests within one calendar month without charge.

7. Supervisory Authority and Complaints

You maintain the right to register a complaint at any time with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the opportunity to address your concerns directly prior to escalating to the ICO.

8. Contacting the Data Controller

If you have questions, comments, or requests regarding this Privacy Policy, please contact:

Vrestavia Data Protection Officer
Email: [email protected]
Postal Address: King William Street 155, EC4N 7BJ London, United Kingdom
Phone: +44 20 7946 4074