Notice on Privacy and Personal Data

Aurora Finspirex regards careful personal-information management as a fundamental responsibility. We handle data transparently, for stated purposes and in accordance with applicable rules, including the UK GDPR. This notice explains what we collect, why we use it, how long we retain it and the protections applied.

1. Responsibility for your data

Under the UK GDPR, the website operator and the Aurora Finspirex platform act as controllers of your personal data. Our legal notice provides the relevant contact information and additional details. You may also send privacy-related queries to our data protection officer.

2. Personal data collected

We collect and use the data required to provide the service, fulfil legal responsibilities and protect the platform. This can include:

Identity details: first name, surname and date of birth, used to verify who you are and confirm your age.
Contact details: email address, telephone number where provided, country of residence and, when applicable, postal address.
Account and payment details: payment information, deposits, withdrawals and records connected with transactions.
Technical and usage details: IP address, browser and device information, sign-in times and connection logs.
Verification records: identity evidence, address documentation and other material required for KYC/AML checks where legally necessary.

We generally avoid collecting special-category data, including health information or religious views, unless legislation requires it or you have given explicit permission.

3. Where your information comes from

Your information may reach us from a number of protected sources:

Details you submit: for example, during registration, profile changes, document uploads or communications with us.
Data gathered automatically: including cookies, server logs, analytics information and technical data created as you interact with the platform.
Data received from other organisations: such as payment providers handling deposits or withdrawals, KYC/AML screening services and social-login providers where you permit access.

4. Uses of your information

We use personal data for particular lawful purposes, including where relevant:

To set up, manage and provide your account together with the platform features available to you.
To process and protect payment activity, including deposits and withdrawals.
To deliver suitable assistance and deal with your questions, requests and reported problems.
To satisfy legal and regulatory responsibilities, including KYC, AML and tax obligations.
To defend our systems and detect or prevent fraud, improper use and attempted unauthorised access.
To make the service easier to use and improve its features over time.
To send operational updates or marketing communications when you have opted in to receive them.

5. Legal bases for processing

Delivering our agreement with you or taking requested pre-contract steps (Article 6(1)(b) UK GDPR).
Complying with legal obligations (Article 6(1)(c) UK GDPR), including anti-money laundering rules.
Pursuing legitimate interests (Article 6(1)(f) UK GDPR), such as platform security, resilience and dependable service operation.
Using your express consent (Article 6(1)(a) UK GDPR), for example for marketing or optional features.

6. Circumstances for sharing data

We share information only where necessary, with selected recipients and service providers such as:

Banks and payment providers involved in receiving deposits or arranging withdrawals.
Dedicated providers engaged to carry out KYC and AML checks.
Cloud infrastructure and technology suppliers working under appropriate data-processing agreements.
Analytics and security providers that use anonymised or pseudonymised data where reasonably feasible.
Professional consultants, such as solicitors and tax advisers, where required for legal or compliance matters.
Courts and government bodies when disclosure is required by law or needed to bring, establish or defend legal proceedings.

We do not sell personal data or disclose it to third parties for their own separate commercial purposes.

7. International transfers

Certain suppliers, including hosting and analytics companies, may be based outside the UK or European Economic Area. For international transfers, we apply suitable safeguards, which can include the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, binding corporate rules or an applicable adequacy decision, to preserve an appropriate level of protection.

8. Personal data security

A mix of technical safeguards and organisational measures is used to help protect your personal data:

Encrypted data transmission using current security protocols, including TLS 1.3 or newer versions.
Strong encryption for sensitive data held on our systems, including AES-256 where appropriate.
Regular security checks, penetration testing and reviews carried out by independent specialists.
Continuous monitoring designed to flag unusual activity and attempted security breaches.
Restricted permissions allocated in line with each team member’s role and responsibilities.
Client funds held in segregated accounts via regulated service providers.

Although no online system can eliminate every security threat, these measures are intended to limit foreseeable exposure.

9. Data retention periods

We retain personal data only for as long as necessary for the purposes explained here or for a period required by law:

For as long as your account is active and our contractual relationship remains in place.
After account closure, for the period required under applicable law, which may include 5–10 years for tax or regulatory records.
Where consent is the legal basis, such as for marketing, until you withdraw that consent.

Once data is no longer needed, we securely delete it or convert it into anonymous information.

10. Your privacy rights

Data protection legislation provides several rights concerning your personal data, including the right to:

Ask whether we hold or use personal data about you and request confirmation.
Request correction of incorrect information or completion of incomplete records.
Request erasure when there is no legal reason for us to keep the data.
Request a restriction on processing in situations allowed by law.
Receive your data in a structured, widely used and machine-readable format so it can be transferred.
Revoke consent at any point for future processing based on that consent.
Raise a concern with the relevant data protection supervisory authority.

11. Cookies and similar technologies

Cookies and similar technologies allow the site to function, show how visitors interact with it and guide service improvements. Essential cookies operate automatically; analytics and advertising cookies are placed only when you consent. Further information is available in our separate cookie notice.

12. Changes to this notice

This notice may be revised periodically to reflect changes in law, regulation or the platform. The latest version will appear on our website. If a change is significant, we will notify you by email or through the platform.

13. How to contact us about privacy

For questions about privacy, this notice or your data rights, email $site_gmail or submit a message through the website contact form. Our data protection officer will review your enquiry and seek to respond within a reasonable period.

By using Aurora Finspirex, you acknowledge that you have read this notice and agree to its terms.