Meridian Vestik (“we”, “us”, or “our”) is committed to protecting and respecting your personal privacy. This Privacy Policy details our practices concerning the collection, processing, retention, storage, and transfer of personal information collected through our official portal, trading software, and automated interfaces.
We process personal data in strict alignment with United Kingdom data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For the purpose of applicable data protection legislation, Meridian Vestik acts as the primary Data Controller.
1. Information We Collect
We may collect and process the following categories of data depending on your interactions with the Platform:
- Identification and Contact Details: Full name, verified email address, telephone contact details, and country of residence provided during onboarding or communications.
- Technical and Device Identifiers: Internet Protocol (IP) address, browser type and build, hardware specifications, operating system, network telemetry, and approximate geographic location.
- Operational Telemetry: Log files, analytical performance metric tracking, API call frequency, session duration, and feature navigation history.
- Verification Information: Documentation submitted in fulfillment of anti-money laundering (AML) and know-your-customer (KYC) requirements where platform integrations require compliance review.
2. Lawful Grounds for Processing
Under the UK GDPR, we rely upon the following lawful bases to process your personal data:
- Contractual Performance: Necessary for entering into or fulfilling our Terms of Service with you.
- Legal and Regulatory Compliance: Necessary to comply with mandatory statutory obligations, financial oversight guidelines, anti-fraud regulations, and official law enforcement requests.
- Legitimate Interests: Necessary for our legitimate business interests, including network infrastructure security, algorithm debugging, fraud prevention, and performance enhancements, balanced against your individual privacy rights.
- Explicit Consent: Where you provide direct consent for specific optional communications, newsletters, or third-party cookies.
Note on Financial Data: Meridian Vestik does not store or process your bank account numbers or credit card credentials directly. Third-party payment processors or integrated brokerages handle settlement activities under their independent security certifications.
3. How We Use Collected Data
We utilize collected information to maintain, support, and enhance our analytical software suite, specifically:
- Configuring and securing user accounts and algorithmic dashboard preferences;
- Calibrating latency, API response times, and machine-learning execution routines;
- Sending technical advisories, critical platform patches, and regulatory disclosures;
- Detecting and mitigating unauthorized intrusion attempts, distributed denial of service (DDoS) vectors, or algorithmic fraud;
- Evaluating operational compliance with market abuse regulations and relevant sanctions lists.
4. Disclosure of Personal Information
We do not sell, rent, or trade your personal data to commercial advertisers. We disclose personal information only to trusted service partners operating under strict contractual data protection agreements:
- Cloud Infrastructure and Hosting: Tier-one hosting providers ensuring end-to-end encryption and ISO/IEC 27001 compliant storage;
- Security and Fraud Prevention: Automated cybersecurity auditors and risk intelligence providers;
- Regulators and Law Enforcement: Competent judicial authorities, statutory watchdogs, or law enforcement bodies when mandated by applicable law or a binding court order.
5. International Data Transfers
Where personal information is transferred or stored outside of the United Kingdom or the European Economic Area, we implement robust contractual safeguards, including standard contractual clauses (SCCs) and International Data Transfer Agreements (IDTAs) approved by the UK Information Commissioner’s Office (ICO), ensuring your personal data receives a level of protection equivalent to domestic standards.
6. Data Retention Protocols
We retain personal information only for as long as necessary to satisfy the objectives for which it was collected, including contractual, operational, accounting, or statutory legal reporting obligations. When data is no longer required, it is either securely deleted or anonymized using cryptographic hashing techniques so it can no longer be associated with you.
7. Your Statutory Rights
Under United Kingdom data protection statutes, you possess explicit rights regarding your personal information:
- Right of Access: Request a copy of the personal information we hold about you;
- Right to Rectification: Request correction of inaccurate, obsolete, or incomplete records;
- Right to Erasure (“Right to be Forgotten”): Request the permanent deletion of personal records when retention is no longer justified;
- Right to Restrict Processing: Request the temporary restriction of processing in case of disputes;
- Right to Data Portability: Request transmission of your data in a structured, machine-readable format;
- Right to Object: Object to processing predicated on our legitimate interests or direct marketing activities.
8. Cookies and Technical Tracking
Our website utilizes standard session cookies and minimal analytical identifiers strictly to guarantee system stability, balance server loads, and preserve user preferences during active sessions. You can configure your internet browser to refuse non-essential cookies at any time without compromising platform accessibility.
9. Data Controller Inquiries
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, or if you wish to exercise your statutory rights, please contact our Data Protection Officer at [email protected]. You also retain the right to submit a complaint directly to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (ico.org.uk).