Notice on Privacy and Personal Data

Lucrant AI regards the careful use of personal information as a fundamental responsibility. We explain what data we collect, why it is needed and how it is protected, while complying with applicable rules including the UK GDPR. This notice describes our collection, use, retention and security practices.

1. Responsibility for your personal information

Under the UK GDPR, the website operator and the Lucrant AI platform act as controllers of your personal information. Our legal notice provides the relevant contact details and additional information. You may also send privacy-related questions to our data protection officer.

2. Information we collect

We collect and process information necessary to operate the service, satisfy legal duties and protect the platform. This can cover:

  • Identity details: your given name, surname and date of birth, used to confirm who you are and check your age.
  • Contact details: email address, telephone number where supplied, country of residence and, when applicable, postal address.
  • Account and payment details: payment information, deposits, withdrawals and transaction-related records.
  • Technical and usage data: IP address, device and browser information, login timestamps and network data.
  • Verification records: identity documents, address evidence and other information required for relevant KYC/AML procedures.

We generally avoid collecting special-category data, including health information or religious beliefs, unless the law requires it or you have expressly authorised its use.

3. Where your information comes from

We may receive your information from a number of protected sources, including:

  • Details you submit: for example, when opening an account, changing your profile, uploading documents or speaking with support.
  • Data gathered automatically: including cookies, server logs, analytics information and technical data created during platform use.
  • Data supplied by other organisations: such as payment providers involved in deposits or withdrawals, KYC/AML screening services and social login providers where you permit access.

4. Uses of personal information

Where relevant, we rely on specific lawful grounds to process personal information, including:

  • Opening, managing and supporting your account, together with the platform features available to you.
  • Handling and safeguarding payment operations, including money paid into or removed from your account.
  • Offering suitable assistance and dealing with your questions, requests and reported problems.
  • Fulfilling legal and regulatory duties, including KYC, AML and tax requirements.
  • Defending our services and detecting or preventing fraud, improper use and attempted unauthorised access.
  • Improving the platform experience and developing its features over time.
  • Sending operational updates or marketing communications when you have opted to receive them.

5. Legal grounds for processing

  • Performing our agreement with you, or taking requested steps before entering into an agreement (Article 6(1)(b) UK GDPR).
  • Complying with statutory duties (Article 6(1)(c) UK GDPR), including anti-money-laundering requirements.
  • Pursuing legitimate interests (Article 6(1)(f) UK GDPR), such as securing the platform, maintaining continuity and providing dependable services.
  • Relying on your explicit permission (Article 6(1)(a) UK GDPR), for example for marketing or optional features.

6. Circumstances for sharing information

We disclose information only where necessary, to selected recipients and service providers such as:

  • Banks and payment providers that accept deposits or facilitate withdrawals.
  • Authorised specialist providers conducting KYC and AML screening.
  • Cloud hosting and technical suppliers working under appropriate data-processing arrangements.
  • Analytics and cyber-security providers, using anonymised or pseudonymised data where reasonably possible.
  • Professional consultants, including legal and tax advisers, where legal or regulatory input is required.
  • Courts and public authorities when disclosure is required by law or needed to establish, exercise or defend legal claims.

We do not sell personal information or disclose it to third parties for their own separate commercial purposes.

7. Transfers across borders

Certain suppliers, including hosting and analytics providers, may be based outside the UK or European Economic Area. For international transfers, we apply recognised safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, binding corporate rules or an applicable adequacy decision.

8. Information security

We use layered technical controls and organisational measures to protect personal information:

  • Protected connections using current protocols, including TLS 1.3 or a later release.
  • Strong encryption for sensitive data held in our systems, including AES-256 where appropriate.
  • Planned security assessments, penetration testing and independent expert reviews.
  • Continuous monitoring intended to spot unusual activity and attempted security breaches.
  • Access rights assigned according to staff responsibilities and genuine business need.
  • Client funds held in segregated accounts via regulated service providers.

No online service can remove every security risk; these measures are intended to lessen reasonably foreseeable threats.

9. Information retention periods

We retain personal information only as long as necessary for the purposes described here or as legislation requires:

  • For as long as your account and contractual relationship remain active.
  • After closure, for the period required under applicable rules, which may involve retaining tax or regulatory records for 5–10 years.
  • Where consent provides the lawful basis, such as marketing, until that consent is withdrawn.

Once information is no longer needed, we securely delete it or anonymise it.

10. Your privacy rights

Data protection legislation provides several rights concerning your personal information, including the right to:

  • Ask us to confirm whether we hold or use personal information about you.
  • Have incorrect information amended or incomplete information supplemented.
  • Request erasure where there is no continuing lawful basis for retention.
  • Ask us to restrict or suspend processing in situations recognised by law.
  • Receive your information in a structured, widely used, machine-readable format so it can be transferred to another provider.
  • Revoke consent at any time where consent is the processing ground.
  • Complain to the relevant data protection supervisory authority.

11. Cookies and similar technologies

Cookies and similar technologies support website operation, reveal how visitors use the service and guide improvements. Essential cookies operate automatically; analytics and advertising cookies are placed only with consent. Our separate cookie notice explains this in more detail.

12. Changes to this privacy notice

This notice may be revised to reflect changes in law, regulation or the platform. We will publish the latest version on our website. If an amendment significantly affects you, we will inform you by email or via an in-platform notification.

13. How to contact us about privacy

For privacy enquiries, questions about this notice or requests concerning your rights, contact $site_gmail or use the website contact form. Our data protection officer will review the matter and seek to respond within a reasonable period.

By using Lucrant AI, you acknowledge that you have read this notice and agree to its terms.