erisavino
Information Architecture

Privacy Policy

Last Updated: 14 January 2026

1. Overview and Data Controller

erisavino is committed to safeguarding the confidentiality, security, and integrity of personal data entrusted to us. This Privacy Policy details our operational practices regarding data gathering, handling, storage, and transfers when you utilize our algorithmic interface and associated digital services.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the designated Data Controller is erisavino, operating from High Holborn 24, EC3M 4AJ Edinburgh, GB. Inquiries may be directed to our Data Protection Officer at [email protected].

2. Categories of Information Collected

To provide high-frequency execution monitoring and maintain platform security, we process several categories of information:

  • Direct Identification Data: Full names, contact telephone numbers, email addresses, and communication logs submitted during correspondence;
  • Technical and Network Telemetry: Internet Protocol (IP) addresses, cryptographic session tokens, browser configuration, hardware profiles, screen resolution, operating system details, and timestamps of interaction;
  • Execution & Configuration Data: User-selected algorithmic parameters, trading pair preferences, simulated risk thresholds, API access keys (stored in encrypted format), and latency logs;
  • Analytical and Cookie Identifiers: Anonymous usage patterns, navigational pathways, and interaction telemetry collected through cryptographic local cookies and session storage.

3. Legal Grounds for Data Processing

We process personal information under the stringent requirements of Article 6 of the UK GDPR, relying on the following lawful bases:

  • Contractual Performance: Necessary for the provision and maintenance of the erisavino software environment requested by the user;
  • Legitimate Interests: Necessary to defend system infrastructure against Distributed Denial of Service (DDoS) attacks, detect algorithmic arbitrage anomalies, prevent illicit fraud, and optimize computational performance;
  • Legal and Regulatory Compliance: Fulfilling our obligations under UK statutory financial reporting directives and law enforcement frameworks;
  • Informed Consent: Where you have expressly consented to receiving platform feature alerts and system health notifications.

4. Data Retention and Safeguards

Personal data is retained only for the duration strictly necessary to fulfil operational, technical, and regulatory requirements. Technical logs and network connection logs are purged or securely anonymized on rolling cycles not exceeding 24 months, unless formal statutory inquiries demand longer custody.

All sensitive communication channels are encrypted utilizing TLS 1.3 cryptographic protocols with modern cipher suites. Inactive data repositories are protected by AES-256 bit encryption at rest, accompanied by strict role-based access control (RBAC), multi-factor hardware authentication, and periodic third-party penetration audits.

5. Information Sharing and International Transfers

erisavino strictly adheres to a policy of never selling, leasing, or commercializing personal information to external marketing brokers. Data transfers occur solely under narrow circumstances:

  • Specialist infrastructure service providers, such as cloud computation hosts and DDoS mitigation networks operating under rigorous Data Processing Agreements (DPAs);
  • Accredited professional auditors, legal advisors, and regulatory bodies where mandated by legal process, subpoena, or court order in the United Kingdom;
  • Successor entities in the event of corporate mergers, acquisitions, or restructuring, subject to identical confidentiality covenants.

Where personal data is transferred outside the United Kingdom or European Economic Area, we implement UK International Data Transfer Agreements (IDTAs) or European Commission Standard Contractual Clauses with supplementary security assessments.

6. Your Statutory Rights

Under the UK Data Protection Act 2018 and UK GDPR, you maintain substantial statutory entitlements regarding your personal information:

  • Right of Access: Request a comprehensive copy of your personal data held within our systems;
  • Right to Rectification: Require prompt correction of inaccurate, obsolete, or incomplete records;
  • Right to Erasure: Request permanent deletion of data where retention is no longer justified;
  • Right to Restrict or Object: Restrict algorithmic profiling or object to processing based on legitimate interests;
  • Right to Data Portability: Obtain your records in a structured, commonly used, and machine-readable format;
  • Right to Lodge Complaints: File an administrative complaint directly with the UK Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies and Tracking Mechanisms

Our website utilizes strictly essential session cookies to authenticate access and remember analytical preferences. Optional performance metrics cookies may be declined via browser configurations without hindering platform functionality.

8. Contact Our Privacy Office

To exercise statutory data rights or request detailed information regarding our data management practices, please contact our team via email at [email protected] or via phone at +44 20 7946 4029.