Privacy and Personal Information Notice

Vidalytics treats responsible handling of personal information as a core duty. We use data openly and for clearly stated purposes, while meeting relevant requirements such as the UK GDPR. This notice sets out what we obtain, why we use it, how long we keep it and the safeguards in place.

1. Who controls your personal information

For UK GDPR purposes, the website operator and the Vidalytics platform are responsible as controllers for your personal information. Our legal notice contains the applicable contact details and further information. Privacy queries may also be directed to our data protection officer.

2. Personal information collected

We obtain and use information needed to provide the service, meet legal responsibilities and keep the platform secure. This may include:

  • Identity information: first name, family name and date of birth, used to establish your identity and verify your age.
  • Contact information: email address, telephone number if provided, country of residence and, where relevant, postal address.
  • Account and payment information: payment details, deposits, withdrawals and records associated with transactions.
  • Technical and activity information: IP address, browser and device data, sign-in times and network details.
  • Verification information: identity documents, proof of address and other material needed for applicable KYC/AML checks.

We normally do not seek special-category information, such as medical details or religious views, unless legislation requires it or you have specifically agreed to its use.

3. Sources of your information

Your information may reach us through several safeguarded sources, including:

  • Information you provide: for instance, when you create an account, update your profile, submit documents or contact support.
  • Information collected automatically: such as cookies, server records, analytics data and technical details generated while you use the platform.
  • Information from other organisations: including payment firms supporting deposits or withdrawals, KYC/AML screening providers and social sign-in services where you allow access.

4. How personal information is used

When applicable, we handle personal information for defined lawful reasons, including:

  • Creating, administering and assisting with your account and the platform functions made available to you.
  • Processing and securing payment activity, including funds added to or taken from your account.
  • Providing appropriate support and responding to your questions, requests and reported difficulties.
  • Meeting legal and regulatory responsibilities, including KYC, AML and taxation obligations.
  • Securing our services and identifying or stopping fraud, misuse and attempted unauthorised entry.
  • Refining the user experience and enhancing platform functionality over time.
  • Providing service announcements or promotional messages where you have chosen to receive them.

5. Lawful bases for processing

  • Delivering our contract with you or taking steps you request before entering into one (Article 6(1)(b) UK GDPR).
  • Meeting legal obligations (Article 6(1)(c) UK GDPR), including anti-money-laundering duties.
  • Advancing legitimate interests (Article 6(1)(f) UK GDPR), such as platform protection, continuity and reliable service delivery.
  • Using your clear consent (Article 6(1)(a) UK GDPR), for example for marketing or non-essential functions.

6. When information may be shared

Information is shared only when needed, with selected recipients and service providers such as:

  • Banks and payment services that receive deposits or arrange withdrawals.
  • Approved specialist firms carrying out KYC and AML checks.
  • Cloud infrastructure and technical suppliers operating under suitable data-processing agreements.
  • Analytics and cyber-security providers, with anonymised or pseudonymised information used where reasonably practicable.
  • Professional advisers, including legal and tax specialists, when regulatory or legal guidance is needed.
  • Courts and public bodies where disclosure is legally required or necessary to bring, pursue or defend legal proceedings.

We do not trade personal information or provide it to third parties for their independent commercial activities.

7. International information transfers

Some suppliers, including hosting and analytics companies, may operate outside the UK or European Economic Area. Where information crosses borders, we use recognised protections such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, binding corporate rules or an applicable adequacy decision to maintain suitable safeguards.

8. Protecting your information

We protect personal information through a combination of technical safeguards and organisational procedures:

  • Secure connections using up-to-date protocols, including TLS 1.3 or a subsequent version.
  • Robust encryption for sensitive information stored in our systems, including AES-256 where suitable.
  • Scheduled security checks, penetration tests and reviews conducted by independent experts.
  • Ongoing monitoring designed to identify unusual behaviour and attempted security incidents.
  • Access permissions allocated according to each employee’s role and operational need.
  • Client money maintained in segregated accounts through regulated service providers.

Every online service retains some security risk; these controls are designed to reduce reasonably foreseeable threats.

9. How long information is retained

We keep personal information only for the time needed for the purposes explained here or for the period required by law:

  • Throughout the life of your account and contractual relationship.
  • Following closure, for the period required by applicable rules, which may mean retaining tax or regulatory records for 5–10 years.
  • Where consent is the lawful basis, such as for marketing, until you withdraw that consent.

When information is no longer required, we securely remove it or make it anonymous.

10. Your data protection rights

Data protection law gives you a range of rights over your personal information, including the ability to:

  • Ask whether we process or retain personal information relating to you.
  • Request correction of inaccurate details or completion of incomplete information.
  • Seek deletion where no lawful reason remains for keeping the information.
  • Request a pause or limitation on processing in circumstances provided for by law.
  • Obtain your information in a structured, commonly used and machine-readable form for transfer to another provider.
  • Withdraw consent at any point when consent is the legal basis for processing.
  • Raise a concern with the appropriate data protection supervisory authority.

11. Cookies and related tools

Cookies and related tools help the website operate, show how visitors interact with it and inform improvements. Necessary cookies are enabled by default; analytics and advertising cookies are used only after consent. Further information is available in our separate cookie notice.

12. Updates to this privacy notice

We may update this notice from time to time to reflect legal, regulatory or platform developments. The current version will be published on our website. Where a change materially affects you, we will notify you by email or through an in-platform message.

13. Privacy contact details

For privacy questions, enquiries about this notice or requests to exercise your rights, email $site_gmail or complete our website contact form. Our data protection officer will assess your request and aim to reply within a reasonable timeframe.

When you use Vidalytics, you confirm that you have reviewed this notice and accept its provisions.