Privacy Policy

Last updated: 15 January 2026

1. Who We Are

Faro Cripto is the controller of the personal data described in this policy for the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018. You can contact us at Corn Street 59, EC3M 4AJ Edinburgh, GB, or at [email protected].

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of data:

• Identity and contact data, such as your name, email address and telephone number;
• Account data, such as login credentials, preferences and settings;
• Usage data, such as pages viewed, features used, and device and browser information;
• Communications data, such as messages you send to our support team;
• Technical data, such as IP address, time zone and approximate location.

We do not ask you to provide sensitive personal data, and you should not send us such information through the platform.

3. How We Use Your Data

We use personal data to create and manage accounts, provide the platform and its analytics features, respond to enquiries, improve performance and security, meet legal and regulatory obligations, and send service-related communications. Marketing messages are sent only where permitted by law, and you may opt out at any time.

4. Legal Bases for Processing

Our lawful bases under UK GDPR include performance of a contract, compliance with legal obligations, our legitimate interests in running and securing a reliable service, and your consent where we ask for it. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

5. Sharing Your Data

We do not sell your personal data. We may share it with trusted service providers acting on our instructions, such as hosting, analytics, customer support and payment providers, subject to written data processing terms. We may also disclose data where required by law, to protect our rights, or in connection with a merger, acquisition or restructuring of our business.

6. International Transfers

Some of our service providers may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as UK-approved international data transfer agreements or adequacy regulations, in line with UK GDPR requirements.

7. Data Retention

We keep personal data only for as long as necessary for the purposes described in this policy. Account data is generally retained for the duration of your account and for a limited period afterwards to meet legal, accounting and dispute-resolution requirements. When data is no longer required, we delete or anonymise it.

8. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and disclosure. These include encryption in transit, access controls and regular security reviews. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Cookies

We use cookies and similar technologies to operate the website, remember preferences and understand how the platform is used. You can manage your cookie preferences through your browser settings and, where available, through our consent tools. Further details are described in our cookie information.

10. Your Rights

Under UK GDPR you have the right to access your personal data, request correction, request erasure, restrict or object to processing, request data portability, and withdraw consent. To exercise these rights, contact us using the details above. We will respond within one month, although we may extend this period where permitted by law.

11. Children

The platform is not directed at children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so that we can delete it.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The revised version will be published on this page with an updated "Last updated" date. Material changes will be communicated to you where appropriate.

13. Complaints

If you have concerns about how we handle your personal data, please contact us first so that we can try to resolve them. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.