Trevportkey

Privacy Policy

Effective Date: January 1, 2026 • Last Revised: February 2026 • Compliance: UK GDPR / Data Protection Act 2018

This Privacy Policy explains how Trevportkey ("Trevportkey", "we", "us", or "our") processes, protects, and handles personal data obtained through your interactions with our automated trading software, web endpoints, and customer assistance channels. We are dedicated to maintaining the highest privacy and data integrity protocols in alignment with the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Identity of the Data Controller

For the purposes of applicable data protection statutes, the data controller is Trevportkey, having operational facilities located at Park Row 203, EC4N 7BJ London, United Kingdom. You may direct any inquiries regarding data protection to our privacy team via [email protected].

2. Categories of Information Collected

In operating our algorithmic execution tools and user portals, we collect information belonging to the following categories:

  • Identity & Contact Data: Name, communication address, verified email address, contact telephone number, and verification records where mandated by security controls;
  • Technical & Telemetry Data: IP addresses, browser specifications, operating system versions, device telemetry, access timestamps, and analytical crash logs;
  • Trading Configuration Data: Algorithmic parameters selected, simulation criteria, exchange pairing preferences, and historical execution performance metrics;
  • API Integration Keys: Public and private API credentials provided to establish exchange interconnectivity (stored exclusively in encrypted format).

3. Lawful Grounds for Processing

Under the UK GDPR, we process your personal data under the following legitimate legal bases:

  • Performance of a Contract: To provision the analytical software, maintain exchange connections, and deliver the user services specified in our Terms;
  • Compliance with Legal Obligations: To satisfy mandatory statutory, accounting, anti-fraud, and cybersecurity reporting duties;
  • Legitimate Interests: To detect malicious network behavior, optimize computational algorithms, and preserve platform infrastructure integrity, provided such interests do not override your fundamental freedoms;
  • Consent: Where explicitly provided for optional telemetry modules or non-essential cookies.

4. Cryptographic Safeguards and API Token Protection

Trevportkey implements robust technical and organisational security controls designed to prevent accidental loss, unauthorized destruction, or unauthorized disclosure of user information. API credentials utilized for automated order routing are encrypted using advanced cryptographic protocols (AES-256 at rest, TLS 1.3 in transit). Access to administrative tools is restricted according to zero-trust principles, requiring hardware-backed multi-factor authorization.

5. Cookies and Telemetry Technologies

We deploy session-critical cookies and anonymous performance tokens to maintain authenticated sessions, record user display preferences, and measure interface responsiveness. Users may configure their browser parameters to refuse non-essential tracking cookies, though certain dynamic analytics modules may experience diminished performance.

6. Sharing and International Transfers

We do not commercialise, sell, or rent personal data to third-party data brokers. Information may be shared strictly under following circumstances:

  • Infrastructure Providers: Cloud hosting facilities, distributed server networks, and encrypted communication vendors bound by strict confidentiality and data processing agreements;
  • Professional Advisors: Legal, financial, and compliance auditors acting under professional conduct duties;
  • Statutory Authorities: Law enforcement and regulatory authorities where compelled by valid court orders or mandatory legislative mandates.

Where data is transferred beyond the United Kingdom or European Economic Area, we implement recognized transfer mechanisms, including the UK International Data Transfer Addendum or Standard Contractual Clauses (SCCs), ensuring equivalent protection.

7. Data Retention Schedule

We store personal data only as long as necessary to fulfill the operational purposes for which it was assembled, to resolve technical disputes, and to satisfy regulatory retention obligations. Account-related logs are retained for the duration of an active user profile and up to six (6) years following account termination in compliance with standard commercial limitation guidelines.

8. Your Statutory Privacy Rights

Subject to statutory qualifications under UK data protection law, you possess enforceable rights regarding your personal information, including:

  • The right to request access to the personal data we hold about you;
  • The right to demand rectification of inaccurate or outdated information;
  • The right to request the erasure of your data ("right to be forgotten");
  • The right to restrict or object to specific algorithmic processing activities;
  • The right to receive your data in a structured, portable, machine-readable format.

To exercise any of these rights, submit your request to [email protected]. You also possess the statutory right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO).

9. Periodic Updates

We may modify this Privacy Policy to mirror technological revisions, algorithmic system modifications, or statutory amendments. Material revisions will be highlighted on this page with an updated revision date.