Privacy Policy

At Birch Vauntmere, protecting your personal data is our top priority. We handle your information openly and only for specific purposes, fully adhering to regulations like the GDPR. This document details the data collected, its usage, storage duration, and security measures.

1. Data Controller Information

The data controller responsible for your personal information under the GDPR is the entity operating the Birch Vauntmere platform and website. Contact information and further details are found in our legal disclosures. For privacy concerns, please contact our Data Protection Officer.

2. Data We Collect

We collect and process only the necessary personal data to provide our services, comply with legal obligations, and maintain platform security, specifically:

  • Personal identifiers: full name and birth date (used for age and identity checks).
  • Contact details: email address, optional phone number, country of residence, and sometimes postal address.
  • Account and financial information: payment details, deposits, withdrawals, and transaction histories.
  • Technical and usage data: IP addresses, device and browser specifics, access times, and connection logs.
  • Verification documents: identity, address proofs, or other files required for KYC and AML compliance (only as legally mandated).

We generally refrain from gathering sensitive personal data such as health or religious information unless legally required or explicitly authorised by you.

3. Data Collection Methods

We obtain your data via several secure sources:

  • Data you submit directly: during signup, profile modifications, document uploads, or when contacting support.
  • Automatically gathered data: through cookies, server logs, analytical tools, and device technical details during platform use.
  • Third-party sources: including payment processors (for deposits/withdrawals), identity verification providers (KYC/AML), or, where permitted, social login services.

4. Purposes of Data Processing

We process your personal data solely for clear, lawful, and specific objectives:

  • Managing and operating your user account and platform features.
  • Handling payments securely, including deposits and withdrawals.
  • Delivering tailored customer support and resolving your inquiries.
  • Satisfying legal and regulatory requirements (such as KYC, AML, and tax obligations).
  • Ensuring IT security and protecting against fraud, misuse, and cyber threats.
  • Improving user experience and developing enhanced platform capabilities.
  • Conducting marketing and communications only with your explicit permission.

5. Legal Bases for Processing

  • To fulfil contractual commitments or pre-contractual steps (Art. 6.1.b GDPR).
  • To meet legal requirements (Art. 6.1.c GDPR), including anti-money laundering laws.
  • To pursue legitimate interests (Art. 6.1.f GDPR), like platform stability and security.
  • Based on your explicit consent (Art. 6.1.a GDPR) for marketing or optional features.

6. Data Recipients

We share your information only when necessary and solely with trusted parties:

  • Banks and payment providers handling deposits and withdrawals.
  • Specialist firms performing KYC and AML checks.
  • IT and cloud vendors governed by agreements.
  • Security and analytics partners who, where possible, process anonymised or pseudonymised information.
  • External advisors (legal or tax) within legal limits.
  • Regulatory bodies or courts as required by law or to enforce legal claims.

We do not share or monetise your personal data with third parties for commercial purposes.

7. Cross-Border Data Transfers

Sometimes, we engage service providers (such as cloud or analytics partners) located outside the European Economic Area. In such cases, we implement appropriate safeguards like EU standard contractual clauses, binding corporate rules, or adequacy decisions by the European Commission to ensure data protection.

8. Security Measures

We employ comprehensive technical and organisational safeguards to protect your personal data:

  • Data is encrypted during transfer using up-to-date protocols (e.g., TLS 1.3+).
  • Stored sensitive information is protected with robust encryption methods (e.g., AES-256).
  • Routine security tests, penetration assessments, and independent audits.
  • Continuous monitoring for suspicious behaviour or security breaches.
  • Restricted access controls and role-based permissions for staff.
  • Client funds are held in segregated accounts with regulated financial institutions.

While no system can guarantee total security, we apply stringent measures to effectively reduce risks.

9. Data Retention Periods

We retain personal data only as long as necessary for the stated purposes or as required by law:

  • For as long as your account is active and you maintain a contractual relationship.
  • After account closure, retaining data as legally required (e.g., 5–10 years for tax and regulatory purposes).
  • For consent-based processing (such as marketing), until you withdraw your consent.

When data is no longer needed, we delete or anonymise it securely.

10. Your Rights Regarding Data

Under data protection regulations, you have the right to:

  • Request access to the personal information we hold about you.
  • Ask to correct any inaccurate or incomplete details.
  • Request deletion of your data where no legal grounds require retention.
  • Request limits on processing under specific conditions.
  • Receive a copy of your data in a structured, standard, machine-readable format (data portability).
  • Withdraw consent at any time for future processing.
  • File a complaint with the appropriate data protection authority.

11. Cookie Usage and Related Tools

We use cookies and similar technologies to enable website functionality, analyse user interactions, and enhance your experience. Essential cookies remain active at all times, while analytical and advertising cookies require your consent. Detailed information is available in our cookie policy.

12. Revisions to This Policy

This privacy policy may be revised occasionally due to legal updates, regulatory changes, or platform improvements. The current version is always accessible on our site. Major changes will be communicated via email or directly through the platform.

13. Privacy Contact Details

For any privacy questions, including this policy or exercising your rights, please contact us at $site_gmail or via our website's contact page. Our Data Protection Officer will review and respond promptly.

By using Birch Vauntmere, you acknowledge and agree to this privacy policy.