Privacy Policy

Last Updated: 16 January 2026 | Effective Date: 16 January 2026

At burselle (“Company”, “we”, “us”, or “our”), we take your privacy and data autonomy seriously. This Privacy Policy outlines our standards and practices concerning the collection, storage, processing, transfer, and safeguarding of personal information gathered through the burselle platform, web interface, and communication channels.

We adhere to applicable data protection frameworks, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our services, you consent to the processing described herein.

1. Information We Collect

We collect personal information necessary to deliver, protect, and refine our algorithmic systems. The categories of information collected include:

  • Identity Information: Name, country of residence, contact telephone number, and verification identifiers required to maintain platform security;
  • Contact Details: Verified electronic mail addresses and communications history between you and our support personnel;
  • Technical and Device Data: Internet Protocol (IP) addresses, browser type, operating system details, device fingerprint hashes, session timestamps, and diagnostic telemetry;
  • Execution Telemetry: Anonymised performance logs, algorithmic latency metrics, connected API read permissions, and aggregated order timestamps.

2. Lawful Grounds for Processing

Under UK data protection legislation, we process your personal data under the following legal bases:

  • Performance of a Contract: To provision platform services, authenticate access credentials, and route transactional signals in accordance with our terms;
  • Compliance with Legal Obligations: To adhere to anti-fraud detection, regulatory reporting, and risk mitigation mandates;
  • Legitimate Interests: To enhance platform resilience, monitor cyber threats, optimise algorithmic performance, and improve user interfaces;
  • Explicit Consent: Where you have provided clear permission to receive informational updates or non-essential communications, which you may retract at any time.

3. How We Utilise Your Data

Personal and diagnostic information collected by burselle is utilised strictly for operational purposes:

  • Maintaining reliable, low-latency execution interfaces between your client configuration and connected liquidity networks;
  • Detecting, preventing, and prosecuting fraudulent activity, unauthorized access attempts, or malicious interference with our systems;
  • Delivering operational service alerts, security advisories, and system patch notices;
  • Conducting internal quantitative research to refine computational efficiency without exposing individually identifiable financial metrics.

4. Data Sharing and Third-Party Disclosures

We do not monetize, rent, or sell your personal data to advertisers or third-party marketing brokers. Data transfers occur strictly under confidential, contractually bound protocols with:

  • Cloud Infrastructure Providers: ISO-certified enterprise cloud hosting, encrypted storage facilities, and low-latency network backbones;
  • Cybersecurity and Verification Vendors: Specialized security auditing and identity validation services operating under strict data processing agreements;
  • Regulatory and Law Enforcement Authorities: When compelled by binding court orders, regulatory subpoenas, or statutory obligations within the United Kingdom.

5. Cross-Border Data Transfers

Where personal data is transferred outside the United Kingdom or the European Economic Area, burselle ensures that equivalent data protection safeguards are implemented. Such transfers rely on UK International Data Transfer Agreements (IDTAs), European Commission Standard Contractual Clauses, or relevant adequacy regulations.

6. Security and Retention Safeguards

We maintain comprehensive technical, cryptographic, and operational safeguards to protect your records against accidental loss, unauthorized access, or unlawful alteration. All incoming and outgoing data transmissions are secured using end-to-end TLS 1.3 encryption, while sensitive stored records utilize AES-256 encryption at rest.

Personal information is retained only for the duration required to fulfil the operational purposes outlined in this policy or as mandated by statutory limitation periods under English law (typically up to six years following account closure).

7. Your Statutory Rights

In accordance with UK GDPR, you maintain enforceable rights regarding your personal records:

  • Right of Access: Request a copy of the personal data we hold about you;
  • Right to Rectification: Request correction of inaccurate or incomplete information;
  • Right to Erasure: Request the deletion of records where retention is no longer legally justified;
  • Right to Restriction: Request that processing activities be suspended during verification disputes;
  • Right to Data Portability: Obtain your machine-readable records in a structured format;
  • Right to Object: Contest processing based solely upon legitimate interest assessments.

8. Contact the Data Protection Officer

To exercise any statutory rights or to ask questions concerning this Privacy Policy, please contact our Data Protection Officer at [email protected] or address physical correspondence to Fenchurch Street 191, WC1V 6AA Manchester, United Kingdom.