Legal

Privacy Policy

Last updated: 1 March 2026

1. Who is responsible for your data

Bexolan acts as the data controller for personal data processed through our website and services. Our contact address for privacy matters is [email protected]. This Policy is written to comply with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Identity and contact data, such as your name, email address and telephone number;
• Account data, such as login credentials, preferences and settings for our trading tools;
• Verification data, where identity checks are required by law or by our partners;
• Usage data, such as pages viewed, features used, device type and approximate location;
• Communications data, such as messages you send to our support team.

We do not intentionally collect special category data. Please do not send us information that is not necessary for the purpose of your enquiry.

3. How we use your data

We use personal data to provide and operate the Services, create and maintain your account, respond to enquiries, improve the performance and security of our platform, detect and prevent fraud and misuse, and meet our legal and regulatory obligations. Where we send marketing communications, we do so in line with the Privacy and Electronic Communications Regulations and you may opt out at any time.

4. Lawful bases

We rely on the following lawful bases under Article 6 of the UK GDPR: performance of a contract with you; compliance with legal obligations, including anti-money laundering checks; our legitimate interests in running and securing our services, provided those interests are not overridden by your rights; and your consent where we specifically ask for it, such as for certain optional cookies or marketing messages.

5. Automated analysis

Bexolan uses automated models to analyse market data and to generate informational outputs. These models do not make decisions that produce legal effects concerning you solely on the basis of automated processing, unless you have explicitly chosen to use an automated trading function. You can disable automated functions at any time within your account settings, and you may request human review of any decision that significantly affects you.

6. Sharing your data

We do not sell your personal data. We may share it with trusted service providers who process data on our behalf, including hosting, analytics, customer support and payment providers, under written contracts requiring appropriate safeguards. We may also disclose data to regulators, law enforcement or other authorities where required by law, or to protect the rights, property or safety of Bexolan, our users or others.

7. International transfers

Some of our providers may process data outside the United Kingdom. Where this occurs, we ensure that an appropriate safeguard is in place, such as an adequacy regulation or the international data transfer agreement or addendum approved by the Information Commissioner.

8. Retention

We keep personal data only for as long as necessary for the purposes described in this Policy. Account data is generally retained for the duration of your relationship with us and for a further period to satisfy legal, tax and accounting obligations. Verification records may be retained for the period required by anti-money laundering rules. When data is no longer needed, we delete or anonymise it securely.

9. Security

We apply technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration and disclosure. These include encryption in transit, access controls, monitoring and staff confidentiality obligations. No system is completely secure, so we encourage you to use a strong, unique password and to enable two-factor authentication.

10. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data in certain circumstances;
• restrict or object to certain processing;
• request portability of data you have provided to us;
• withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at [email protected]. We may need to verify your identity before responding. We will normally respond within one month.

11. Cookies

We use cookies and similar technologies to operate the website, remember your preferences and understand how the site is used. Strictly necessary cookies are always active. Other categories are used only where permitted by law and, where required, with your consent. You can control cookies through your browser settings.

12. Children

The Services are not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

13. Complaints

If you have concerns about how we handle your data, please contact us first so that we can try to resolve them. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.

14. Changes to this Policy

We may update this Privacy Policy to reflect changes in our practices or the law. The revised version will be published on this page with an updated "last updated" date. Where changes are significant, we will provide a more prominent notice.