Privacy Policy
1. Who we are
This Privacy Policy explains how Vinci AI ("Vinci AI", "we", "us" or "our") collects, uses, stores and protects personal data when you visit our website or use our AI-assisted crypto trading platform. For the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018, Vinci AI is the controller of the personal data described in this policy. You can contact us at [email protected].
2. Personal data we collect
Depending on how you interact with us, we may collect the following categories of information:
- Identity and contact data, such as your name, date of birth, postal address, email address and telephone number;
- Verification data, such as identity documents and proof of address that we request to meet our legal obligations;
- Account and usage data, such as login times, device information, settings you choose and features you use;
- Transaction data, such as records of deposits, withdrawals, trades and balances;
- Communications data, such as messages you send to our support team;
- Technical data, such as IP address, browser type and approximate location.
3. How we use your data
We use personal data only where we have a lawful basis to do so. These bases include performing a contract with you, complying with legal and regulatory obligations such as anti-money laundering checks, pursuing our legitimate interests in running and securing the platform, and, where required, relying on your consent. Typical purposes include opening and administering your account, operating the trading features you enable, preventing fraud, responding to enquiries and improving the Services.
4. Automated processing
Our platform uses automated systems to analyse market data and to carry out the trading settings you select. Automated systems may also be used to flag unusual activity for security or anti-money laundering review. Where a decision produces legal or similarly significant effects for you, you may request human review, express your views and contest the decision by contacting us.
5. Sharing your data
We do not sell your personal data. We may share it with carefully selected recipients, including identity verification providers, payment processors, hosting and cloud services, analytics providers, professional advisers, auditors, and regulators or law enforcement agencies where required by law. Where we use service providers, we require them to process data only on our instructions and to maintain appropriate security standards.
6. International transfers
Some of our service providers may be located outside the United Kingdom. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as UK-approved standard contractual clauses or an adequacy decision, as required by applicable data protection law.
7. Retention
We keep personal data only for as long as necessary for the purposes described in this policy. Records relating to transactions and anti-money laundering checks are generally retained for at least five years after the relationship ends, in line with legal requirements. When data is no longer required, we delete or anonymise it securely.
8. Security
We apply technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration and disclosure. These include encryption in transit, access controls, multi-factor authentication for staff and regular security reviews. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You should also protect your own credentials.
9. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- request erasure of your data in certain circumstances;
- restrict or object to certain processing;
- request portability of data you have provided to us;
- withdraw consent at any time where processing is based on consent.
We will respond to valid requests within one month, extendable where permitted by law. We may need to verify your identity before acting on a request.
10. Complaints
If you have concerns about how we handle your personal data, please contact us first so we can try to resolve them. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.
11. Changes to this policy
We may update this Privacy Policy to reflect changes in our practices or in the law. The date at the top of this page shows when it was last revised. Where changes are significant, we will notify you through the Services or by email.
12. Contact
For privacy questions or to exercise your rights, email [email protected] or call +44 20 7946 6893.