Website Privacy Notice

Website only. This Notice covers the public website, including contact and request-access forms. It does not cover information processed inside the Vaultfy app, through a membership, during identity checks, payments or bookings. Separate app and service privacy information applies to those activities.

VAULTFY AI TRADING CO LTD is the controller for the personal information described in this Notice. We are registered in England and Wales under company number 17156633, at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom, and registered with the UK Information Commissioner under number ZC221015.

This Notice applies worldwide, subject to the mandatory privacy rights that apply where you live. It should be read with our Website Cookie Policy.

1. Information Collected Through the Website

We may collect:

• Contact and enquiry information, such as your name, email address, organisation and the message or request you submit.
• Marketing choices, including newsletter or event interest, consent records and unsubscribe status.
• Technical and security information, such as IP address, browser, device type, operating system, referring page, timestamps, network and security logs.
• Website usage information, such as pages viewed, links selected, approximate location derived from IP address and campaign or conversion data, subject to Cookie Preferences.
• Correspondence and records created when we respond to an enquiry or exercise a privacy right.

We collect this information directly from you, automatically from your browser or device, from analytics and advertising providers where permitted, and from a person authorised to contact us for you.

Do not use the public Website form to send full card details, security codes, passwords, wallet credentials, identity documents or unnecessary sensitive information.

2. How and Why We Use It

• Respond to an enquiry or request for access: contact, enquiry and correspondence information — steps at your request; legitimate interests in responding and developing business relationships.
• Operate and display the Website: technical, device and limited usage information — legitimate interests in providing a functional website.
• Protect the Website and prevent fraud or abuse: IP address, logs, device, enquiry and security information — legitimate interests in security and fraud prevention; legal obligations where applicable.
• Measure Website performance and improve content: cookie identifiers and usage information — consent under our standard configuration; legitimate interests only where a lawful exemption applies.
• Measure or personalise advertising: cookie identifiers, campaign, device and interaction information — consent.
• Send optional news, invitations or marketing: contact details, preferences and interactions — consent where required; otherwise legitimate interests with an easy opt-out.
• Handle rights, complaints and legal matters: relevant contact, correspondence, log and enquiry information — legal obligations; legitimate interests in establishing and protecting legal rights.

Where we rely on legitimate interests, we consider whether the use is necessary, proportionate and reasonably expected, and balance it against your rights. Where we rely on consent, you may withdraw it without affecting earlier lawful processing.

Submitting an enquiry is voluntary, but without contact details and a meaningful message we may be unable to respond. We do not use Website enquiry content to train a shared or general-purpose AI model.

3. Cookies, Analytics and Advertising

The Website may use essential cookies for security, network operation and consent records. Google Analytics and Google Ads technologies may be used for measurement or advertising only in accordance with your Cookie Preferences and applicable law.

Under our standard configuration, non-essential analytics and advertising technologies are disabled until you consent. You can reject them or withdraw consent as easily as accepting them. Our Website Cookie Policy and live Cookie Preferences tool give the current technology names, purposes and durations.

4. Who Receives Information

We disclose only what is reasonably necessary to:

• Website hosting, content-delivery, security, analytics and advertising providers.
• Email, communications, customer-enquiry and technical-support providers.
• Professional advisers, auditors, insurers and potential corporate transaction counterparties under appropriate duties.
• Regulators, courts, police or public authorities where disclosure is required or legally justified.
• Another organisation at your direction or with your permission.

We do not sell personal information and do not publish our supplier or partner network through this Notice. If an enquiry progresses to an app account, membership or transaction, we provide the relevant service privacy information before that separate processing begins.

5. International Transfers

We are based in the United Kingdom and some technology providers may process information in other countries. For restricted transfers from the UK or EEA, we use an adequacy decision, approved contractual safeguards such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses, or another lawful mechanism. Contact us for information about the safeguard relevant to you.

6. Retention

• General enquiries and correspondence: up to 24 months after the last meaningful contact, unless the enquiry becomes a contract or legal matter.
• Request-access or prospective relationship records: up to 24 months after the last interaction, or until an earlier objection or deletion where applicable.
• Marketing records: until opt-out or consent withdrawal; a minimal suppression record may be retained to respect the choice.
• Cookie and analytics information: for the period shown in the Website Cookie Policy and Cookie Preferences, normally no longer than 24 months.
• Security and server logs: normally up to 12 months; longer where needed for an active security investigation or legal claim.
• Privacy requests and complaints: normally 6 years after the matter closes.

We may keep information for a shorter or longer period where law, security, fraud prevention, a complaint or a legal claim reasonably requires it. We may retain anonymised information that no longer identifies you.

7. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, restrict or receive certain personal information; object to legitimate-interest processing; withdraw consent; opt out of direct marketing or targeted advertising; and complain to a regulator. You may also have a right to use an authorised agent or appeal a refusal under local law.

Send requests to support@vaultfy.ai. We may verify identity and authority and may limit a request where law permits, including to protect another person's rights. We generally respond within one month under UK law, subject to a permitted extension for complexity. Other jurisdictions may set different deadlines.

Vaultfy does not sell personal information. Where applicable, advertising opt-outs are available through Cookie Preferences and recognised browser signals are honoured where required.

8. Security and Children

We use organisational and technical measures designed for the nature of Website information and risk, including access controls, secure transmission where appropriate, logging, supplier due diligence and incident procedures. No internet service is completely secure.

The Website and Vaultfy consumer services are intended for adults. We do not knowingly solicit personal information from a child through the public Website. If you believe a child has submitted information, contact us so we can assess and delete it where appropriate.

9. Complaints, Changes and Contact

Send a privacy complaint to support@vaultfy.ai. We will acknowledge it within 30 days, investigate without undue delay, keep you appropriately informed and explain the outcome. You may also complain to the UK Information Commissioner's Office at ico.org.uk or to the privacy regulator where you live or work.

We may update this Notice when the Website, law or our processing changes. We will publish the current version and give appropriate notice of a material change before starting a materially different use where required.