Privacy Policy
Last updated: February 2, 2026. This policy outlines how Falcao Investara protects and manages your information.
Commitment to Privacy: Falcao Investara respects your fundamental right to privacy. We process personal data strictly in compliance with the UK Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR), and international data protection standards.
1. Data Controller Identification
The entity responsible for processing your personal data under this Privacy Policy is:
- Controller: Falcao Investara
- Registered Location: High Holborn 40, LS1 5AT Leeds, GB
- Data Privacy Contact: [email protected]
- Telephone: +44 20 7946 3811
2. Categories of Information We Collect
Depending on your engagement with our platform and algorithmic trading terminal, we collect the following types of data:
- Identity and Contact Data: Full name, verified email address, telephone contact number, and country of residence provided during communication or onboarding.
- Technical and Usage Metrics: IP address, device fingerprints, operating system details, browser type, referrer URLs, session timestamps, and navigation pathways across our web application.
- Trading Configuration Data: User-defined risk thresholds, backtest preferences, algorithmic order settings, and scenario calculator parameters.
- Financial Transaction Records: Transaction identifiers, subscription fee records, and payment processor confirmations (note: raw credit card or banking details are handled by PCI-DSS compliant third-party payment gateways; we do not store full payment card numbers).
3. Legal Bases and Processing Purposes
We process your personal data under the lawful grounds outlined in the UK GDPR:
- Performance of a Contract: Providing terminal access, executing algorithmic setup instructions, and managing user accounts.
- Legal and Regulatory Compliance: Fulfilling anti-money laundering (AML), fraud prevention, accounting, and tax reporting obligations.
- Legitimate Interests: Securing platform infrastructure, debugging latency issues, preventing unauthorized system intrusions, and refining mathematical models.
- Consent: Sending opt-in product updates, market insight digests, or non-essential cookies. You have the right to withdraw consent at any time.
4. Data Sharing and Third-Party Disclosures
Falcao Investara never sells, rents, or trades your personal data to commercial advertisers. We share information only with trusted third parties under strict confidentiality and security agreements, including:
- Cloud hosting and content delivery network providers operating ISO 27001 certified datacentres.
- Payment processors and verification institutions for identity authentication and fraud prevention.
- Regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where mandatory disclosure is mandated by UK or international law.
5. International Data Transfers
Where personal information is transferred to service partners located outside the United Kingdom or European Economic Area, Falcao Investara implements adequate transfer mechanisms, such as UK International Data Transfer Agreements (IDTA) or European Commission Standard Contractual Clauses (SCCs), ensuring equivalent protection standards.
6. Data Retention Protocols
We retain personal information only for the duration necessary to fulfill the operational purposes for which it was gathered, including satisfying legal, audit, statutory accounting, and risk management requirements. Technical telemetry logs are typically archived or pseudonymised after 12 months, whereas financial records are kept for the statutory period required by UK taxation law (typically up to 7 years).
7. Your Statutory Rights
Under the UK Data Protection Act and UK GDPR, you maintain comprehensive rights regarding your personal information:
- Right of Access: Request confirmation and copies of personal data held about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your data when retention is no longer legally justified.
- Right to Restrict Processing: Request suspension of data processing in specific circumstances.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Contest automated decision-making or processing based upon legitimate interests.
To exercise any of these rights, please send your request in writing to [email protected]. We respond to all legitimate requests within 30 calendar days.
8. Security Measures
We implement rigorous technical and organisational measures to safeguard data against accidental loss, unauthorized access, alteration, or disclosure. These include transport layer encryption (TLS 1.3), hashed credential storage, strict role-based access permissions, and periodic vulnerability reviews.