Privacy & Data Governance

Privacy Notice

Last updated: 14 January 2026 · Compliant with UK GDPR & Data Protection Act 2018

Pine Vestmere ("Pine Vestmere", "we", "us", or "our") is dedicated to upholding the highest standards of confidentiality, transparency, and data privacy. This Privacy Notice outlines our procedures concerning the collection, processing, storage, and protection of personal data belonging to users who visit our website or interact with our computational trading interfaces.

1. Data Controller Information

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Pine Vestmere serves as the data controller responsible for determining the purposes and means of processing personal data collected through the Platform. If you have inquiries regarding this policy or our data practices, you may direct them to our privacy compliance team via our designated support channels.

2. Categories of Information We Collect

We process only the minimum personal data required to provide our quantitative market analysis and maintain technical operations:

Identity and Contact Data: Name, email address, telecommunication details, and verification data submitted during account setup.
Technical and System Data: Internet Protocol (IP) addresses, browser type, operating system version, hardware identifiers, timezone configuration, access timestamps, and diagnostic error logs.
Usage and Interaction Data: Analytical interaction metrics, page load speeds, interface feature usage, signal viewing patterns, and referral sources.
Configuration and Preference Data: User-configured risk thresholds, market indicator subscriptions, notification channels, and UI display settings.

3. Lawful Bases for Data Processing

Under the UK GDPR, we process personal information under the following lawful bases:

Contractual Performance: Necessary for delivering analytical tools, algorithmic alert transmissions, and account management services requested by you.
Legitimate Interests: Necessary for securing our network infrastructure, preventing platform abuse, monitoring cybersecurity threats, and improving algorithmic reliability.
Legal and Regulatory Compliance: Necessary to satisfy statutory duties, financial crime prevention standards, and requests from competent regulatory authorities.
Consent: Where explicitly provided for optional telemetry tracking or specific product communications, which may be withdrawn at any time.

4. Data Sharing and Third-Party Disclosures

Pine Vestmere does not sell, rent, or trade your personal data. We disclose personal data only to vetted service providers and professional entities under rigorous confidentiality obligations:

Cloud infrastructure and data storage providers operating secure regional data centres.
Cybersecurity auditing and anti-fraud monitoring partners.
Regulated liquidity or broker integrations that you expressly choose to link to your account.
Law enforcement or supervisory authorities where mandated by valid legal process or applicable United Kingdom legislation.

5. International Data Transfers

Where personal data is transferred outside the United Kingdom, we implement appropriate safeguards to ensure equivalent data protection. Such safeguards include the use of UK International Data Transfer Agreements (IDTAs), European Commission Standard Contractual Clauses with the UK Addendum, or transfers to jurisdictions recognised by the UK Secretary of State as providing adequate statutory protection.

6. Data Security and Storage Integrity

We maintain industry-standard physical, electronic, and procedural safeguards designed to protect personal data against accidental loss, unauthorised alteration, disclosure, or destructive access. These include transport layer encryption (TLS 1.3), end-to-end credential hashing, strict role-based access management, and periodic security evaluations. However, no data transmission across the public Internet can be guaranteed fully immune from systemic disruption.

7. Retention Periods

We retain personal information only for as long as necessary to fulfil the operational purposes for which it was originally collected, including the satisfaction of statutory accounting, reporting, and dispute-resolution obligations. Once retention periods expire, personal records are securely deleted or irreversibly anonymised.

8. Your Statutory Rights

Under UK data protection legislation, you are entitled to exercise the following rights regarding your personal records:

Right of Access: Request confirmation and copies of personal data held about you.
Right to Rectification: Request correction of inaccurate or incomplete records.
Right to Erasure: Request deletion of personal records where there is no legal requirement for continued retention.
Right to Restrict Processing: Request suspension of active processing under specific conditions.
Right to Data Portability: Request transmission of your data in a structured, machine-readable format.
Right to Object: Object to processing founded on our legitimate commercial interests.

You also maintain the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe our data processing fails to meet statutory requirements.