Data Protection & Privacy

Privacy Notice

Effective date: 15 January 2026 · Last revised: 2026

1. Overview and Commitment

At Thalvoryn Quenstrix ("we", "our", or "us"), we place paramount importance on maintaining the privacy, confidentiality, and security of our visitors and registered users ("you", "Data Subject"). This Privacy Notice details our operational practices regarding the collection, handling, storage, and sharing of personal data when you interact with our website, computational market models, and related technical services.

Our processing operations adhere strictly to the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant global privacy standards. By utilizing our platform, you acknowledge the informational practices outlined in this policy.

2. The Data Controller

Thalvoryn Quenstrix serves as the data controller responsible for determining the purposes and means of processing personal data gathered through our public web presence and proprietary trading interface. You may address any formal privacy requests to our designated Data Protection Officer at [email protected].

3. Personal Information We Collect

Depending on your level of interaction with the Platform, we may collect and process several categories of information:

  • Identity and Contact Information: Name, personal email address, telephone contact details, and country of residence provided when requesting analytical access or technical support.
  • Technical and Telemetry Data: IP addresses, browser types and versions, operating system parameters, device identifiers, time-zone settings, and referring URL paths.
  • Usage and Interaction Patterns: Pages viewed, computational features engaged with, duration of platform sessions, navigation routes, and error event logs.
  • Communications Records: Content and metadata associated with inquiries, feedback, or support tickets submitted through official customer assistance channels.

4. Lawful Grounds for Processing

We process your personal data under clearly defined lawful bases defined in Article 6 of the UK GDPR:

  • Performance of a Contract: Processing necessary to provide technical onboarding, facilitate account features, and maintain platform availability.
  • Legitimate Interests: Processing required to secure our network infrastructure against malicious cyber intrusions, optimize model delivery, prevent duplicate accounts, and conduct aggregated analytical reporting.
  • Compliance with Legal Obligations: Retaining records as mandated by applicable financial crimes prevention, e-commerce legislation, or judicial directives.
  • Consent: Explicit permission provided by you for direct electronic marketing notifications or non-essential analytical tracking scripts.

5. Use of Cookies and Automated Tracking

Thalvoryn Quenstrix employs essential operational cookies to enable core website navigation, load-balancing, and cybersecurity defenses. We may also deploy privacy-respecting performance and analytics cookies to evaluate user journeys and enhance platform rendering speeds. You maintain full autonomy to adjust, block, or delete cookies through your web browser preferences; however, disabling technical session cookies may compromise platform functionality.

6. Data Sharing and Third-Party Disclosures

We treat your personal information with strict confidentiality. We do not sell, rent, or trade your identifiable information. Data may be shared strictly under the following operational circumstances:

  • Infrastructure Providers: Trusted cloud hosting facilities, content delivery networks (CDNs), server security vendors, and communication software providers operating under stringent confidentiality agreements.
  • Partner Brokerages and Execution Venues: When you actively request connection to a broker or independent execution provider, relevant identity details are transferred upon your direct request.
  • Regulatory Authorities: Law enforcement agencies, regulators, or statutory bodies when legally compelled by court orders or binding regulatory directives.

7. International Data Transfers

When server hosting, algorithmic processing, or cloud services require the transfer of personal data outside the United Kingdom or the European Economic Area (EEA), we enforce appropriate safeguards. These safeguards include International Data Transfer Agreements (IDTAs), UK Addendums to the European Commission's Standard Contractual Clauses (SCCs), and adequacy decisions recognized by the UK government, ensuring your personal data benefits from an equivalent standard of protection.

8. Retention and Security Architecture

We retain personal records only for the duration necessary to satisfy the purposes stated in this Notice, comply with legal record-keeping requirements, and resolve potential disputes. We implement robust defense-in-depth security measures, including transport layer encryption (TLS 1.3), hashed database storage, network firewalls, and strict least-privilege administrative access protocols to prevent unauthorized access or disclosure.

9. Your Statutory Rights

Under the UK GDPR and associated data privacy legislation, you possess substantial statutory rights regarding your personal information:

  • Right of Access: Request confirmation of processing and obtain a digital copy of your personal data.
  • Right to Rectification: Require the correction of inaccurate or incomplete personal records.
  • Right to Erasure ("Right to be Forgotten"): Request data deletion when continued retention is no longer justified.
  • Right to Restriction: Limit data processing operations under specified statutory conditions.
  • Right to Data Portability: Obtain your data in a structured, commonly used, and machine-readable format.
  • Right to Object: Oppose processing grounded in legitimate interests or direct informational outreach.

To exercise any of these statutory rights, contact our Data Protection Officer. We address verifiable requests within one calendar month without administrative charge.

10. Regulatory Oversight

If you believe that our processing of your personal information infringes relevant data protection legislation, you maintain the right to lodge a formal complaint with the UK supervisory authority: the Information Commissioner's Office (ICO) at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF (www.ico.org.uk).

11. Revisions to this Notice

We may periodically update this Privacy Notice to reflect adjustments in our technological architecture or statutory obligations. The current version will always remain accessible on this page with the updated revision indicator. We encourage periodic review of this document.