Privacy Policy
Nobre Patrimorio ("Company", "we", "our", or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy details the data protection practices we maintain when you visit our website, interact with our technological platform, or utilize our analytical services.
This policy complies with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. The Data Controller
Nobre Patrimorio is the data controller responsible for the lawful processing of your personal information. If you have questions concerning our data practices, our Data Protection Officer may be contacted using the contact details provided at the conclusion of this document.
2. Categories of Information We Collect
We may collect, process, and retain the following types of personal information:
- Identity Information: Name, professional title, account username, or government identifier when verifying client eligibility.
- Contact Information: Email address, telephone number, and registered physical address.
- Technical and Usage Data: Internet protocol (IP) address, operating system, browser details, referral sources, interaction timestamps, page response times, and clickstream sequences.
- Configuration Data: User interface preferences, selected currency denominations, simulator inputs, and notification settings.
We do not collect sensitive categories of personal data (such as biometric data, health information, or trade union memberships), nor do we store plain-text banking credentials on our public web servers.
3. Legal Bases and Purposes of Processing
We rely on transparent, lawful grounds under the UK GDPR to process your personal data:
- Performance of Contract: To administer your platform access, manage technical service integrations, and facilitate customer communications.
- Legitimate Interests: To detect security threats, prevent unauthorized automated abuse, improve model responsiveness, and conduct system performance auditing.
- Legal Compliance: To satisfy accounting rules, comply with anti-fraud mandates, and address formal inquiries from competent regulatory bodies.
- Consent: Where you have explicitly opted into receiving direct marketing alerts or optional analytics cookies. Consent can be withdrawn at any time.
4. Data Sharing and Third-Party Disclosures
We do not monetize, rent, or sell your personal information. We disclose data only to trusted service providers who adhere to strict data security standards and contractual confidentiality covenants, including:
- Cloud hosting and infrastructure providers ensuring server availability and latency optimization.
- Cybersecurity screening vendors delivering anti-DDoS and threat detection protection.
- Professional advisers including legal counsel, auditors, and regulatory consultants in the United Kingdom.
5. International Data Transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area, we ensure equivalent safeguards are implemented. Such safeguards include the UK International Data Transfer Addendum or approved Standard Contractual Clauses (SCCs), coupled with technical risk assessments.
6. Security and Data Retention
We deploy institutional-grade defensive measures, including Transport Layer Security (TLS 1.3), end-to-end data encryption at rest, role-based access restrictions, and persistent intrusion monitoring. We store your personal information only for as long as necessary to fulfill the purposes for which it was gathered, or as required by applicable UK tax, company, and record-keeping laws.
7. Your Statutory Rights
Under UK data protection law, you hold clear rights regarding your personal records:
- Right of Access: You may request confirmation and copies of personal data held about you.
- Right to Rectification: You may request correction of inaccurate or incomplete records.
- Right to Erasure ("Right to Be Forgotten"): You may request deletion of data when retention is no longer justified.
- Right to Restriction: You may request suspension of processing under specific legal conditions.
- Right to Object: You may challenge data processing conducted on the basis of legitimate interests.
- Right to Data Portability: You may request your machine-readable data be transmitted to another platform.
To exercise any statutory right, please submit a written request to our privacy team. We respond within one calendar month without administrative charge.
8. Policy Revisions
We reserve the right to amend this Privacy Policy periodically to reflect technological advancements or legislative changes. The latest version will always be published on this page with an updated effective date.
9. Contact Information
If you wish to make a privacy inquiry or lodge a request, contact us at:
Nobre Patrimorio
King William Street 233, BS1 5LJ Bristol, United Kingdom
Email: [email protected]
Phone: +44 20 7946 5303