Privacy Policy

Last updated: 1 January 2026

This Privacy Policy explains what personal data Oylumex collects when you visit our website or use our platform, why we process it, and the choices you have.

1. Who We Are

Oylumex is the controller of the personal data described in this policy. You can contact us at [email protected] or by post at Fenchurch Street 18, EC3M 4AJ Edinburgh, GB. We process personal data in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.

2. Personal Data We Collect

• Identity and contact data: name, email address, telephone number and postal address.
• Account data: login credentials, security settings and preferences.
• Verification data: information needed to confirm identity and meet anti-money laundering obligations.
• Usage data: pages viewed, features used, device identifiers and approximate location derived from IP address.
• Communications: messages you send to our support team.

3. How We Use Your Data

We use personal data to create and administer your account, provide the Service, operate our automated tools, process payments, prevent fraud, comply with legal obligations, respond to enquiries and improve the platform. Where you have opted in, we may send marketing communications, which you can withdraw at any time.

4. Legal Bases for Processing

We rely on contract performance where processing is necessary to provide the Service; legal obligation for compliance and record-keeping; legitimate interests for security, analytics and service improvement, balanced against your rights; and consent for optional marketing and non-essential cookies.

5. Sharing Your Data

We do not sell personal data. We may share it with carefully selected service providers acting on our instructions, such as hosting, payment, identity verification and analytics providers; with professional advisers; with regulators or law enforcement where required by law; and in connection with a business reorganisation, subject to equivalent safeguards.

6. International Transfers

Some of our providers may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as UK-approved standard contractual clauses or adequacy regulations, as required by UK data protection law.

7. Retention

We keep personal data only for as long as necessary for the purposes described above. Account records are generally retained for six years after closure to satisfy legal and regulatory obligations, after which they are securely deleted or anonymised.

8. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls, monitoring and staff training. No system is completely secure, and we encourage you to use a strong, unique password and to enable two-factor authentication.

9. Your Rights

Subject to certain exemptions, you have the right to access your personal data, have inaccurate data corrected, request erasure, restrict or object to processing, request portability, and withdraw consent at any time. You may also object to direct marketing. We will respond within one month, extendable where permitted by law. Requests are free of charge unless they are manifestly unfounded or excessive.

10. Automated Decision-Making

Our AI-assisted analysis produces market insights and may execute trades under settings you control. These tools do not make decisions with legal or similarly significant effects about you without human involvement. You may ask for an explanation of how a specific output was generated.

11. Children

The Service is not intended for anyone under eighteen. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so that we can delete it.

12. Changes to This Policy

We may update this Privacy Policy periodically. The date at the top of this page shows when it was last revised, and material changes will be notified to registered users.

13. Complaints

If you have concerns about how we handle your data, please contact us first so that we can try to resolve them. You also have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.