Privacy & Personal Data Policy

Pulse Luxentis regards careful management of personal information as a fundamental responsibility. We handle data transparently, for specific purposes and in accordance with relevant obligations, including the UK GDPR. This policy explains what we collect, why we use it, how long we retain it and the measures applied to protect it.

1. Data controller

Under the UK GDPR, the website operator and the Pulse Luxentis platform act as controllers of your personal information. Our legal notice provides relevant contact details and additional information. You may also send privacy-related enquiries to our data protection officer.

2. Personal information collected

We collect and use the information required to provide our services, comply with legal responsibilities and protect the platform. This can include:

Identity details: your first and last name, together with your date of birth for identity and age verification.
Contact details: email address, telephone number when provided, country of residence and, where applicable, postal address.
Account and payment records: payment details, deposits, withdrawals and activity relating to your transactions.
Technical and usage data: IP address, browser type, device information, sign-in times and connection logs.
Verification documents: identification, address evidence and other records required for KYC/AML procedures where applicable law calls for them.

We generally avoid collecting special-category data, including health information or religious beliefs, unless legally necessary or you have given explicit consent.

3. Where information comes from

Your information may come to us from several protected channels:

Details you submit: for example, when opening an account, updating your profile, uploading documents or sending a contact enquiry.
Data gathered automatically: including cookies, server logs, analytics records and technical device information created during platform use.
Data received from other organisations: such as payment providers handling deposits or withdrawals, KYC/AML verification services or social login providers where you permit access.

4. Purposes of processing

We use personal information only for defined, lawful purposes, which may include:

To open, operate and provide your account and the platform features available through it.
To process and protect payment activity, including deposits and withdrawals.
To provide relevant assistance and deal with your questions, requests or concerns.
To comply with legal and regulatory responsibilities, including KYC, AML and tax obligations.
To secure our systems and detect or prevent fraud, misuse and attempted unauthorised access.
To make the service easier to use and develop its features over time.
To send service updates or marketing communications only where you have opted in.

5. Legal bases for using data

Fulfilling a contract with you or taking requested pre-contract steps (Article 6(1)(b) UK GDPR).
Complying with legal requirements (Article 6(1)(c) UK GDPR), including anti-money laundering duties.
Pursuing legitimate interests (Article 6(1)(f) UK GDPR), including platform security, resilience and proper operation.
Acting on your explicit consent (Article 6(1)(a) UK GDPR), such as for marketing or optional features.

6. Information disclosures

We share information only where needed and with carefully selected providers or recipients, including:

Banks and payment institutions involved in receiving deposits or processing withdrawals.
Approved specialist providers carrying out KYC and AML checks.
Cloud and technology suppliers working under suitable data-processing arrangements.
Analytics and security providers that use anonymised or pseudonymised data where reasonably possible.
Professional advisers, including solicitors and tax consultants, where their input is required for legal or compliance purposes.
Courts or public bodies where disclosure is required by law or necessary to bring, establish or defend legal proceedings.

We do not sell your personal information or disclose it to third parties for their own commercial purposes.

7. International data transfers

Certain providers, such as cloud-hosting and analytics companies, may be based outside the UK or European Economic Area. For such transfers, we apply appropriate safeguards, including the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, binding corporate rules or an applicable adequacy decision, to preserve an appropriate level of protection.

8. Data security measures

A range of organisational and technical safeguards is used to help protect your information:

Encrypted data transmission using current security protocols, including TLS 1.3 or newer.
Strong encryption for sensitive information held on our systems, including AES-256 where appropriate.
Regular security reviews, penetration testing and assessments by independent specialists.
Continuous monitoring designed to flag unusual activity and attempted breaches.
Restricted access controls, with permissions allocated according to staff responsibilities.
Client funds held in segregated accounts with regulated service partners.

Although no technology can eliminate every security threat, these measures are intended to limit the relevant risks.

9. Retention periods

We retain personal information for only as long as necessary for the purposes explained here or for any legally prescribed period:

For as long as your account is active and our contractual relationship remains in place.
After account closure, for the period required by applicable law, which may include 5–10 years for tax or regulatory records.
Where consent is the legal basis, such as for marketing, until you withdraw that consent.

Once information is no longer needed, we securely delete it or convert it into anonymised data.

10. Your privacy rights

Data protection legislation provides you with a number of rights concerning your personal information, including the right to:

Request confirmation of whether we hold personal information about you.
Request correction of inaccurate information or completion of incomplete records.
Request erasure where we have no legal obligation to keep the information.
Request a restriction on processing where the law allows it.
Receive your information in a structured, commonly used and machine-readable format for portability.
Withdraw consent at any time for processing based on consent going forward.
Raise a concern with the relevant data protection supervisory authority.

11. Cookies and similar technologies

Cookies and similar technologies allow the site to function, show us how it is used and help improve the user experience. Essential cookies operate by default, while analytics and advertising cookies are placed only with your permission. Further information is available in our separate cookie policy.

12. Changes to this policy

This policy may be revised periodically to reflect changes in law, regulation or platform functionality. The latest version will appear on our website. If a change is significant, we will notify you by email or through the platform.

13. How to contact us about privacy

For privacy questions, policy queries or requests to exercise your rights, email $site_gmail or use the contact form on the website. Our data protection officer will review your message and seek to respond as soon as reasonably possible.

When you use Pulse Luxentis, you acknowledge that you have read this policy and agree to its terms.