Privacy Policy — Harbor Kapiten™

1. Overview and Commitment

Harbor Kapiten ("we", "us", or "our") values your personal privacy and is committed to handling your information transparently and securely. This Privacy Policy details the types of personal data we collect, why we collect it, how it is processed and stored, and the legal rights available to you under relevant data protection frameworks, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller Information

For the purposes of applicable data protection law, Harbor Kapiten operates as the Data Controller in respect of personal data collected through our website and operational interfaces. If you have questions concerning this policy or wish to exercise your data subject rights, you may contact our designated Data Protection Officer at [email protected].

3. Information We Collect

We collect and process personal data across various touchpoints when you visit our website, register interest, or configure algorithmic services:

Identification and Contact Details: Full name, email address, telephone contact number, and country of residence provided during communication or account setup.
Technical and Device Data: Internet Protocol (IP) address, browser type and version, operational system, device identifiers, time-zone settings, and referring URL paths.
Usage and Interaction Data: Analytical metrics regarding your interaction with our interface, pages viewed, time spent per session, navigation patterns, and feature engagement.
Trading Configuration Data: User-defined parameters, risk tolerance flags, algorithmic mode preferences, and integration preferences (excluding custodial access to your private cryptographic keys).

4. Legal Grounds for Processing

Under UK data protection legislation, we rely upon the following lawful bases to process personal data:

Performance of a Contract: Necessary to provide access to our algorithmic platform, deliver system updates, and administer your account.
Legitimate Interests: Necessary to optimize technical performance, conduct fraud prevention, maintain network security, and enhance analytical platform features.
Compliance with Legal Obligations: Necessary to adhere to applicable statutory requirements, anti-fraud regulations, and official requests from regulatory authorities.
Consent: Where you have explicitly given permission to receive non-essential communications or specific analytical tracking cookies.

5. How Personal Information Is Used

We process your data strictly for legitimate operational purposes, which include:

Configuring and maintaining your access to our algorithmic trading models and analytical tools.
Facilitating secure technical connectivity with matched brokerage and execution partner platforms.
Monitoring platform infrastructure to detect, prevent, and mitigate fraud, cyberattacks, or system misuse.
Communicating critical service notices, system updates, and administrative advisories.
Analyzing aggregate user trends to enhance system speed, algorithm accuracy, and user experience.

6. Sharing and Third-Party Disclosures

We do not sell, rent, or trade your personal data to unaffiliated commercial third parties. Data sharing is limited to the following circumstances:

Authorised Execution Partners: Independent regulated brokers and execution venues you elect to connect with to activate trading functionality.
Infrastructure and Technology Vendors: Trusted providers delivering secure cloud hosting, analytical monitoring, database encryption, and security screening.
Legal and Regulatory Bodies: Law enforcement agencies, courts, or statutory supervisors when strictly mandated by binding court order or governing law.

International Transfers: Where data is transferred outside the United Kingdom or the European Economic Area, we implement recognized transfer mechanisms, including the UK International Data Transfer Addendum and Standard Contractual Clauses (SCCs), to safeguard your rights.

7. Data Retention and Safeguards

We retain personal information only for the duration necessary to satisfy the purposes set out in this Privacy Policy, or as required by applicable tax, statutory, or dispute resolution requirements. We employ state-of-the-art security practices, including TLS 1.3 end-to-end encryption in transit, robust AES-256 encryption at rest, role-based access restrictions, and regular vulnerability audits.

8. Your Statutory Rights

Subject to applicable exemptions under the UK GDPR, you have the following rights regarding your personal information:

Right of Access: Request a copy of the personal data we hold concerning your account.
Right to Rectification: Request correction of inaccurate, obsolete, or incomplete records.
Right to Erasure: Request the deletion of personal information where no overriding legal basis warrants retention.
Right to Restriction: Request that we limit processing operations under specific contestable circumstances.
Right to Data Portability: Obtain your digital records in a structured, commonly used, machine-readable format.
Right to Object: Object to processing based on legitimate interests or direct informational marketing.

9. Cookie Practices and Tracking

Our website utilizes necessary cookies to ensure system stability, navigation integrity, and session continuity. Optional performance and analytical cookies are deployed solely to observe interface traffic patterns and performance. You may configure or reject non-essential cookies via your browser settings at any time without compromising platform core features.

10. Regulatory Oversight and Complaints

If you believe our data processing practices contravene applicable privacy legislation, we invite you to contact us immediately to resolve the issue. You also retain the right to lodge a formal complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).