Privacy Policy
Last updated: 1 January 2026
1. Who we are
This Privacy Policy explains how XenvarioQuant ("we", "us", "our") collects, uses, stores and protects personal data when you visit our website or use our trading dashboard and analytics services. For the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018, XenvarioQuant is the controller of the personal data described here. Our registered contact address is King William Street 47, WC1V 6AA Manchester, United Kingdom.
2. Personal data we collect
Depending on how you interact with us, we may collect:
- Identity and contact data, such as your name, email address and telephone number, including details you submit when requesting private access;
- Account data, such as login credentials (stored in hashed form), preferences and settings;
- Verification data, where identity checks are required by law or by our payment providers;
- Technical data, such as IP address, browser type, device identifiers and log-in timestamps;
- Usage data, such as pages viewed, features used and interaction with the calculator and dashboard.
We do not knowingly collect special category data. Please do not send us information that is not needed for the purposes described below.
3. How we use your data
We use personal data to provide and secure the Services, to respond to enquiries, to manage Accounts, to process payments, to improve the performance and reliability of our platform, to communicate service updates, and to comply with legal obligations such as anti-money laundering checks and tax reporting. We do not use personal data for automated decisions that produce legal or similarly significant effects on you.
4. Lawful bases
We rely on the following lawful bases under Article 6 of the UK GDPR: performance of a contract with you; compliance with legal obligations; our legitimate interests in operating, securing and improving the Services, where these are not overridden by your rights; and your consent, where we ask for it, for example for optional marketing messages. You may withdraw consent at any time without affecting the lawfulness of earlier processing.
5. Sharing your data
We share personal data only where necessary with trusted categories of recipients, including hosting and infrastructure providers, payment processors, identity verification providers, professional advisers and regulators where required by law. Each recipient is bound by contractual obligations to protect your data and to use it only for specified purposes. We do not sell your personal data.
6. International transfers
Some of our service providers may process data outside the United Kingdom. Where this occurs, we ensure an appropriate safeguard is in place, such as an adequacy regulation, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
7. Retention
We keep personal data only for as long as necessary for the purposes for which it was collected. Account data is generally retained for the life of the Account and for a limited period afterwards to meet legal, accounting and dispute resolution requirements. Technical logs are kept for a shorter period. When data is no longer needed, we delete or anonymise it securely.
8. Cookies and similar technologies
We use strictly necessary technologies to keep the Services working, such as session management and security tokens. Where we use analytics or other non-essential technologies, we will request your consent where required by the Privacy and Electronic Communications Regulations. You can control cookies through your browser settings, although disabling essential cookies may affect how the Services work.
9. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and disclosure. These include encryption in transit, access controls, role-based permissions and regular reviews of our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, and we encourage you to use a strong, unique password.
10. Your rights
Subject to certain exemptions, you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request erasure of your data in certain circumstances;
- restrict or object to certain processing, including direct marketing;
- request portability of data you provided to us; and
- withdraw consent where processing is based on consent.
To exercise these rights, contact us at [email protected]. We will respond within one month, extendable where the law allows. We may ask you to verify your identity before acting on a request.
11. Complaints
If you have a concern about how we handle your personal data, please contact us first so that we can try to resolve it. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk, the UK supervisory authority for data protection.
12. Changes to this policy
We may update this Privacy Policy to reflect changes in our practices or in the law. The current version will always be published on this page, with the date of the latest revision shown above. Material changes will be notified to registered users where appropriate.