Privacy Policy

At Muralha Investario, we respect the privacy of our visitors and registered users. This Privacy Policy details the types of personal data we collect, why we collect it, how it is processed and protected, and the legal rights available to you under the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller Information

The entity responsible for the collection and processing of your personal data is Muralha Investario, having its principal operational office at King William Street 161, EC3M 4AJ Edinburgh, GB. Inquiries regarding data protection practices can be addressed directly to our appointed Data Protection Officer at [email protected].

2. Categories of Information We Collect

We process information directly provided by you, automatically gathered through platform interactions, or transmitted via secure API endpoints:

• Identity and Contact Data: Full name, telephone number, email address, postal address, and identity verification records submitted for account validation.
• Technical and Device Data: Internet Protocol (IP) address, browser model, operating system, geolocation indicators, connection logs, and device fingerprints.
• Usage Data: Pages viewed, automated trading preference settings, session durations, risk tolerance thresholds, calculation models evaluated, and clickstream pathways.
• API & Operational Keys: Read and execute API keys provided by you to integrate supported liquidity venues or exchange accounts (private withdrawal keys are never requested or stored).

3. Legal Bases for Processing Personal Data

We only collect and process your personal information when we have a legitimate legal ground to do so pursuant to UK GDPR:

• Performance of a Contract: Necessary to establish your account, configure automated analytical models, and execute service instructions.
• Legitimate Interests: To safeguard network integrity, detect fraudulent actions, protect computational endpoints, and enhance user experience.
• Legal and Regulatory Compliance: To satisfy anti-money laundering (AML), counter-terrorist financing (CTF), and accounting reporting standards.
• Consent: Where you have explicitly opted in to receive analytical newsletters, promotional updates, or non-essential telemetry tracking.

4. How Your Information Is Utilised

We use your information strictly for lawful operational purposes, which include:

• Operating, testing, calibrating, and maintaining the Muralha Investario algorithmic system;
• Authenticating user sessions and guarding against credential theft or unauthorized API execution;
• Communicating mission-critical security alerts, operational downtimes, and platform updates;
• Preventing financial fraud, sybil attacks, and system abuse;
• Fulfilling mandatory audit requirements under United Kingdom statutory frameworks.

5. Disclosure and Transfer of Data

Muralha Investario does not sell, lease, or monetize your personal information to commercial brokers. We share data only on a strictly controlled basis with:

• Regulated Broker Partners: Where you authorize direct account pairing to execute trading orders via encrypted protocol.
• Cloud Infrastructure Providers: ISO-certified hosting, datacentre, and computational cluster operators under strict data processor agreements.
• Regulatory and Law Enforcement Bodies: Where required by valid court order, warrant, statutory rule, or UK regulatory oversight agency.

If personal data is transferred outside the United Kingdom or European Economic Area, we ensure equivalent safeguards, including UK International Data Transfer Agreements (IDTA) or standard contractual clauses approved by regulatory authorities.

6. Data Security and Cryptographic Standards

We maintain comprehensive technical and organizational safeguards to shield your data from unauthorized disclosure, destruction, alteration, or theft. Measures include end-to-end TLS 1.3 encryption for data in transit, AES-256 cryptographic storage for sensitive credentials, continuous vulnerability auditing, zero-trust interior network controls, and role-based access governance.

7. Data Retention Guidelines

We retain personal information only for as long as is necessary to fulfill the purposes for which it was gathered, including satisfying legal, audit, reporting, and dispute-resolution requirements. In accordance with standard financial regulations, customer identification and transaction-related records are retained for five (5) years following the termination of the business relationship.

8. Your Statutory Rights

Under UK data protection legislation, you are entitled to exercise the following rights regarding your personal data:

• Right of Access: Obtain confirmation and request copies of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where retention is no longer justified.
• Right to Restrict or Object: Restrict processing or object to our reliance on legitimate interest grounds.
• Right to Data Portability: Request transmission of your personal data to another service provider in a structured, machine-readable format.

To exercise any of these rights, email us at [email protected]. You also retain the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

9. Updates to This Privacy Policy

We periodically review and revise this Privacy Policy to reflect operational improvements or regulatory updates. Any changes will be posted on this page with an amended "Last Updated" timestamp.