Spornadike Return to Home
Data Protection

Privacy Policy

Last Updated: January 10, 2026 • Effective Date: January 1, 2026

1. Overview and Data Controller

Spornadike ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy informs you how we collect, store, handle, and safeguard your data when you visit our website, use our automated algorithmic services, or interact with our support desk.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is Spornadike, Corn Street 8, BS1 5LJ Bristol, United Kingdom. You may reach our Data Protection Officer at [email protected].

2. Information We Collect

We may process diverse categories of personal and technical data depending on your engagement with our platform:

  • Identity Data: First name, last name, and account identifiers.
  • Contact Data: Email address, telephone number, and residential jurisdiction.
  • Technical Data: Internet protocol (IP) address, browser model, operating system, time zone configuration, hardware fingerprinting, and session telemetry.
  • Trading & Integration Data: Read-only or trade-restricted exchange API tokens, transaction execution IDs, and simulated risk configurations. We never request nor store your private wallet seed phrases or external exchange withdrawal keys.
  • Usage Data: Pages viewed, execution speed metrics, referral pathways, and interaction latency logs.

3. Legal Bases for Processing

Under UK data protection law, we rely on legitimate grounds to process your personal data:

  • Performance of a Contract: To administer your platform access, execute automated trading commands per your instructions, and manage customer service queries.
  • Compliance with Legal Obligations: To verify compliance with anti-fraud procedures, financial crime protocols, and statutory record-keeping rules.
  • Legitimate Interests: To optimize system uptime, protect our network against cyber threats, improve our algorithmic execution routines, and preserve structural integrity.
  • Consent: Where explicit consent is required, such as non-essential performance cookies or optional marketing notifications. Consent can be revoked at any time.

4. Storage, Encryption, and Security Protocols

We incorporate enterprise-grade security measures to prevent unauthorized alteration, destruction, disclosure, or access to your personal data. All platform data is encrypted in transit via TLS 1.3 cryptographic suites and maintained at rest using AES-256 standard encryption.

API keys linked to third-party exchanges are hashed through isolated hardware security modules (HSM) with restricted operational access. Internal access to client logs is strictly governed by zero-trust identity authentication controls.

5. Data Sharing and International Transfers

We do not sell, rent, or trade your personal data to advertisers or third-party marketing brokers. Data transfers occur strictly under the following parameters:

  • Cloud Infrastructure Providers: ISO/IEC 27001 certified hosting and computational nodes located in the United Kingdom and the European Economic Area.
  • Compliance and Regulatory Bodies: When legally mandated by enforceable court orders, law enforcement, or regulatory supervisory authorities in the UK.
  • Security Auditing Partners: Third-party cybersecurity firms operating under non-disclosure obligations for algorithmic vulnerability assessments.

Where data is processed outside the United Kingdom, we enforce International Data Transfer Agreements (IDTAs) and Standard Contractual Clauses (SCCs) to ensure equivalent protection levels.

6. Data Retention Schedule

We preserve personal information only for as long as necessary to fulfill the purposes for which it was assembled, including satisfying legal, accounting, tax, or regulatory compliance mandates. Technical log files are periodically sanitized or permanently overwritten after 180 days, whereas account transactional histories are retained for up to six years following account closure in line with statutory UK commercial records standards.

7. Your Statutory Rights Under UK GDPR

Subject to applicable statutory qualifications, you hold enforceable rights regarding your personal information:

  • Right of Access: Request a copy of the personal information we retain concerning your profile.
  • Right to Rectification: Require us to correct inaccurate or incomplete biographical details.
  • Right to Erasure: Request the deletion of personal information where no overriding legal requirement necessitates retention.
  • Right to Restrict or Object: Restrict the scope of data processing or object to processing founded upon legitimate interests.
  • Right to Data Portability: Obtain your digital transaction records in a structured, commonly used machine-readable format.

You may exercise any of these rights by emailing [email protected]. You also have the right to lodge a formal complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (ico.org.uk).

8. Contact and Inquiries

Should you have questions or concerns regarding our privacy architecture or this policy, please contact our privacy compliance team at [email protected], or by post to Spornadike, Corn Street 8, BS1 5LJ Bristol, United Kingdom.