Lorviatero ← Return to Homepage

Privacy Policy

Effective Date: 1 January 2026 • Last Updated: 16 February 2026 • Compliance: UK GDPR & DPA 2018

At Lorviatero ("we", "us", or "our"), safeguarding your digital identity and personal privacy is an integral priority of our engineering architecture. This Privacy Policy outlines how Lorviatero collects, stores, processes, and protects your personal information when you access our website, use our automated algorithmic dashboards, or interact with our computational models.

We process personal data in strict conformity with the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For the purpose of these data protection frameworks, Lorviatero acts as the designated Data Controller.

1. Categories of Personal Data We Collect

Depending on how you interact with our platform, we collect and process several categories of information:

  • Identity & Contact Data: Name, professional email address, telephone contact number, country of residence, and any correspondence you exchange with our technical support team.
  • Technical & Telemetry Data: Internet Protocol (IP) address, browser signature, device operating system, hardware identifiers, screen resolution, connection timestamps, and routing latency diagnostics.
  • Platform Usage Data: Pages visited, navigation sequences, feature interaction timestamps, algorithmic parameter selections, and duration of dashboard sessions.
  • API Integration Metadata: Public API keys supplied to connect third-party digital asset trading exchanges. We never solicit, ingest, or store private withdrawal keys or underlying account passwords.

2. Lawful Grounds for Data Processing

Under Article 6 of the UK GDPR, we rely upon the following lawful bases to process your information:

  • Contractual Performance: Processing necessary to provide our software services, maintain your profile, and execute your chosen platform configurations.
  • Legitimate Interests: Processing necessary to prevent fraudulent activity, safeguard infrastructure against distributed denial-of-service (DDoS) vectors, and enhance machine learning model reliability.
  • Legal & Regulatory Compliance: Fulfilling our statutory responsibilities under applicable UK financial crimes legislation, taxation mandates, and regulatory disclosure directives.
  • Consent: Where you have voluntarily opted in to receive technical research updates, market intelligence reports, or non-essential telemetry cookies.

3. Purpose of Processing

We deploy your data exclusively for defined operational and security objectives, including:

  • Delivering uninterrupted real-time streaming algorithmic metrics and trade signals.
  • Authenticating authorized user sessions and enforcing multi-factor security mechanisms.
  • Conducting risk monitoring to identify unauthorized access attempts, anomalous API calls, and account takeovers.
  • Complying with statutory reporting obligations and regulatory auditing standards.
  • Delivering system operational notifications, software updates, and security advisories.

4. Data Sharing and Third-Party Processors

Lorviatero does not monetize, sell, lease, or rent your personal data to external advertisers. We only disclose your information to trusted third parties under stringent confidentiality and data protection agreements, including:

  • Cloud Infrastructure Providers: Secure tier-4 enterprise data hosting centers located within the United Kingdom and the European Economic Area.
  • Cybersecurity Partners: Threat mitigation vendors providing web application firewall (WAF) filtering and intrusion prevention monitoring.
  • Legal & Regulatory Authorities: Government bodies, law enforcement agencies, or supervisory regulators where compelled by a legally binding court order or statutory requirement under English law.

5. International Data Transfers

Where processing requires transferring data outside the United Kingdom, Lorviatero ensures that equivalent safeguards are maintained. We utilize standard contractual clauses approved by the Information Commissioner’s Office (ICO) or transfer data exclusively to jurisdictions recognized by the UK government as offering an adequate level of data protection.

6. Retention of Personal Information

We retain your personal data only for as long as is strictly necessary to fulfill the operational purposes for which it was collected, or to satisfy legal, statutory, accounting, or reporting requirements. When data is no longer required, it is subjected to cryptographic erasure or permanently anonymised in compliance with industry benchmarks.

7. Your Statutory Rights

Under the UK GDPR and the Data Protection Act 2018, you possess comprehensive rights regarding your personal information:

  • Right of Access: Request a confirmation and copy of all personal records we hold concerning you.
  • Right to Rectification: Require us to correct inaccurate, obsolete, or incomplete personal records without undue delay.
  • Right to Erasure ("Right to be Forgotten"): Demand the deletion of your personal records where no overriding legal basis exists for ongoing processing.
  • Right to Restriction: Request the temporary restriction of processing under specific legal disputes.
  • Right to Data Portability: Receive your data in a structured, machine-readable format (JSON or CSV) for transfer to an alternative provider.
  • Right to Object: Object to processing carried out under the banner of legitimate interests or direct informational communications.

To exercise any of these statutory rights, please submit a formal written request to our Data Protection Officer at [email protected]. We respond to all verified requests within thirty (30) days without charging a fee.

8. Information Security Controls

We implement multi-layered physical, organizational, and technological security controls to prevent accidental loss, alteration, unauthorized disclosure, or compromised access to your data. All data transmissions are protected via Transport Layer Security (TLS 1.3), database storage volumes are encrypted with AES-256 standards, and internal staff access is governed by strict zero-trust role-based access protocols.

9. Supervisory Authority

You maintain the right to lodge a complaint with the UK supervisory authority responsible for data protection if you believe our data practices violate statutory requirements:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk | Helpline: 0303 123 1113

10. Updates and Inquiries

We may update this Privacy Policy from time to time to reflect operational or legislative developments. Any amendments will be published on this page with an updated revision date. For further questions regarding our privacy framework, please contact:

Lorviatero Privacy Office
Address: King William Street 8, EC3M 4AJ Edinburgh, GB
Email: [email protected]
Telephone: +44 20 7946 7339