1. Overview & Data Controller
Mintforge Capital (“Company”, “we”, “us”, or “our”) respects your right to privacy and is committed to protecting your personal information. This Privacy Policy details the types of personal data we collect through mintforge-capital-apps.com and its associated tools (the “Platform”), the lawful bases upon which we process it, how it is secured, and your statutory rights under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
For the purposes of applicable data protection law, Mintforge Capital acts as the Data Controller in respect of personal data submitted or collected via the Platform.
2. Categories of Information We Collect
We collect information you provide directly, data gathered automatically through technology, and limited verification data from trusted identity providers:
- Identification and Contact Details: Full name, email address, country of residence, telephone number, and communication preferences provided during account setup or customer support interactions;
- Technical and Network Data: Internet Protocol (IP) address, browser version, device identifier, hardware configuration, operating system, network timestamps, and referral paths;
- Usage & Telemetry Data: System interactions, features engaged, latency metrics, page dwell times, interface performance logs, and operational audit trails;
- Identity Verification Records: Where mandated by Anti-Money Laundering (AML) or Know-Your-Customer (KYC) requirements, identity verification documents, government proof of identity, and residential verification records processed through certified verification vendors.
3. Lawful Grounds for Processing
We only collect and process personal data when permitted by law. Our primary lawful bases include:
- Contractual Necessity: Processing required to establish your account, grant platform access, maintain system continuity, and fulfill our contractual obligations under the Terms of Service;
- Legal and Regulatory Compliance: Adhering to statutory duties, including financial fraud prevention, tax reporting, AML regulations, and official requests from judicial or administrative bodies in the United Kingdom;
- Legitimate Interests: Enhancing platform security, debugging algorithmic calculation services, preventing unauthorized system intrusions, and assessing overall user experience without overriding your fundamental freedoms;
- Consent: Where you have explicitly opted in to receive marketing communications, news bulletins, or certain non-essential analytical cookies. You may revoke consent at any time.
4. How We Share and Disclose Information
Mintforge Capital does not sell, rent, or trade your personal data to third parties for commercial profit. We disclose data solely to trusted partners under strict confidentiality and processing agreements:
- Infrastructure & Cloud Hosts: Encrypted server infrastructure, database hosting, and global content delivery networks located in secure jurisdictions;
- Security & Fraud Prevention Partners: Specialised providers assisting in threat detection, bot mitigation, and identity authentication;
- Regulatory and Law Enforcement Authorities: Public bodies or statutory courts when legally required under court summons, statutory provisions, or binding regulatory audits.
5. International Data Transfers
When data is transferred outside the United Kingdom or the European Economic Area (EEA), Mintforge Capital ensures that adequate protective safeguards are implemented in accordance with UK GDPR. These safeguards include the use of UK International Data Transfer Agreements (IDTAs), approved Standard Contractual Clauses (SCCs), and verification of adequacy regulations issued by the UK Secretary of State.
6. Data Retention and Storage Security
We implement technical and organizational safeguards to prevent unauthorized access, accidental alteration, disclosure, or loss of personal data. All communication channels are protected using end-to-end Transport Layer Security (TLS), and sensitive stored data is encrypted at rest using industry-standard cryptographic algorithms.
We retain your personal records only for the duration necessary to satisfy the purposes outlined in this policy, fulfill operational account maintenance, or comply with statutory limitation periods and legal retention obligations (typically five to seven years following account closure for financial records).
7. Your Statutory Rights
Under United Kingdom data protection law, you possess defined rights regarding your personal information:
- Right of Access: Request confirmation of processing and a copy of the personal data held about you;
- Right to Rectification: Request correction of inaccurate, outdated, or incomplete records;
- Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data when no longer needed for lawful or regulatory purposes;
- Right to Restriction of Processing: Request suspension of processing under specific legal disputes;
- Right to Data Portability: Request transmission of your personal data in a structured, commonly used, and machine-readable format;
- Right to Object: Object to processing based on legitimate interests or direct marketing operations.
To exercise any of these rights, or if you have concerns regarding our data handling practices, you may reach our Data Protection Officer through the platform's support facilities. You also maintain the statutory right to lodge a formal complaint with the UK Information Commissioner's Office (ICO).