Privacy Policy
This policy explains how Petrel Wertium collects and uses personal data when you visit our website, create an account, or use our trading software. It is written to comply with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
1. Who we are
Petrel Wertium is the data controller responsible for your personal data. Our registered office is at Park Row 26, EC4N 7BJ London, United Kingdom. You can contact us about privacy matters at [email protected].
2. Personal data we collect
Depending on how you interact with us, we may collect:
- Identity and contact details, such as your name, email address, telephone number and postal address;
- Account data, such as login credentials (stored in hashed form), preferences and settings;
- Verification data, such as identity documents, where required for certain features;
- Usage data, such as pages viewed, features used, device type, browser and approximate location;
- Communications, such as messages you send to our support team.
We do not ask you to provide special category data unless it is strictly necessary and you consent or the law requires it.
3. How we use your data and our legal bases
We process personal data only where we have a lawful basis to do so. These include performing a contract with you (providing accounts and platform features), complying with legal obligations (such as anti-money laundering checks), pursuing our legitimate interests (securing and improving the Services and preventing fraud), and, where required, your consent (for example, for certain marketing messages). You may withdraw consent at any time.
4. Cookies and similar technologies
We use cookies and similar technologies to keep you signed in, remember preferences and understand how the website is used. Where required by the Privacy and Electronic Communications Regulations, we will ask for your consent before setting non-essential cookies. You can manage cookie settings through your browser.
5. Sharing your data
We do not sell your personal data. We may share it with trusted service providers who process data on our behalf, such as hosting, analytics, payment and customer support providers, under written contracts requiring appropriate safeguards. We may also disclose data where required by law, by a court, or by a regulator, or to protect the rights and safety of our users.
6. International transfers
Some of our providers may be located outside the United Kingdom. Where we transfer personal data internationally, we rely on mechanisms recognised under UK data protection law, such as adequacy regulations or the International Data Transfer Agreement, and we assess the protection offered by the destination.
7. Retention
We keep personal data only for as long as necessary for the purposes described above. Account data is generally retained for the life of your account and for a limited period afterwards to meet legal, accounting and dispute-resolution requirements. Verification records and transaction-related records may be kept for longer where anti-money laundering rules require it.
8. Security
We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, logging and staff confidentiality obligations. No system is completely secure, so we cannot guarantee absolute security. Please keep your credentials confidential and tell us promptly if you believe your account has been compromised.
9. Your rights
Under UK GDPR you have the right to request access to your personal data, rectification of inaccurate data, erasure in certain circumstances, restriction or objection to processing, data portability, and withdrawal of consent. To exercise these rights, contact us using the details above. We may need to verify your identity before responding, and we will normally respond within one month.
10. Complaints
If you are concerned about how we handle your data, please contact us first so that we can try to put things right. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
11. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page with an updated date. Where changes are significant, we will notify you through the platform or by email.