Rung Tailac ← Return to Platform

Privacy Policy

Effective Date: 1 January 2026 Last Updated: 12 February 2026 Compliance: UK GDPR & Data Protection Act 2018

1. Overview and Data Controller

Rung Tailac ("we", "us", or "our") is dedicated to protecting your individual privacy and maintaining the integrity of personal information processed through our algorithmic trading infrastructure. This Privacy Policy details how we collect, store, utilize, disclose, and safeguard your personal data in full compliance with the UK General Data Protection Regulation (UK GDPR) and the UK Data Protection Act 2018.

The data controller responsible for personal information processed through the Platform is Rung Tailac, with registered operational offices located at Park Row 134, WC1V 6AA Manchester, United Kingdom. You can contact our Data Protection Officer at [email protected].

2. Categories of Data Collected

In operating our quantitative systems and user portals, we collect and process several categories of information:

  • Identity and Contact Data: Full name, verified residential address, email address, contact telephone number, and government-issued identity documentation required for regulatory compliance.
  • Financial and Account Verification Data: Bank account routing details, digital asset wallet public addresses, source of wealth records, and proof of residence documentation.
  • Technical and Telemetry Data: IP address, browser type and version, hardware architecture, timezone setting, operating system, and system connection telemetry logs.
  • Usage and Interaction Data: Platform session durations, feature clicks, algorithmic parameters selected, order execution timestamps, and analytical queries performed.

3. Lawful Bases for Processing

Under UK GDPR, Rung Tailac processes your personal data strictly on established lawful bases:

  • Performance of a Contract: Processing necessary to provide you with access to our automated trading algorithms, trade routing, and account services.
  • Compliance with Legal Obligations: Processing mandatory under Anti-Money Laundering (AML) directives, Counter-Terrorist Financing (CTF) legislation, and tax reporting regulations in the United Kingdom.
  • Legitimate Interests: Enhancing algorithm performance, securing system infrastructure against cyber threats, mitigating fraud, and maintaining business records.
  • Consent: Where you provide explicit opt-in approval for discretionary marketing alerts, which you may withdraw at any time.

4. Data Sharing and Third-Party Processors

Rung Tailac does not sell, lease, or monetize personal information. We only share personal data with vetted third parties under strict confidentiality and processing agreements:

  • Regulated Liquidity and Brokerage Partners: Market execution nodes and liquidity providers essential for routing algorithmic orders into institutional market books.
  • Identity Verification Services: Authorized KYC/AML validation providers specialized in identity credential screening and sanctions list verification.
  • Cloud Infrastructure Providers: Secure, encrypted server facilities and cold-storage databases located within the United Kingdom and the European Economic Area (EEA).
  • Legal and Regulatory Authorities: Competent UK law enforcement bodies, courts, or statutory supervisors when under an enforceable judicial order.

5. International Data Transfers

When personal information is transferred outside the United Kingdom or EEA, Rung Tailac ensures appropriate safeguards are enacted, such as the UK International Data Transfer Agreement (IDTA) or the European Commission's Standard Contractual Clauses (SCCs), accompanied by supplementary technical protections and end-to-end cryptographic encryption.

6. Security Architecture and Storage

We implement multi-layered technical and organizational safeguards to ensure data security. These include AES-256 data-at-rest encryption, TLS 1.3 in-transit transport security, multi-factor authentication, air-gapped backups, and continuous network intrusion monitoring. Despite our rigorous safeguards, no data transmission over the internet can be guaranteed as entirely invulnerable; you are responsible for maintaining the confidentiality of your personal login credentials.

7. Data Retention Periods

We preserve personal data only for the duration necessary to satisfy the purposes for which it was gathered, including satisfying legal, accounting, tax, or regulatory compliance mandates. In accordance with standard financial statutory requirements in the United Kingdom, transaction records, AML verification logs, and associated identity data are typically maintained for five (5) to seven (7) years following account termination.

8. Your Statutory Rights

Under UK data protection legislation, you are entitled to exercise the following rights regarding your personal data:

  • Right of Access: Request a duplicate of the personal records we maintain regarding your account.
  • Right to Rectification: Request correction of inaccurate, dated, or incomplete data entries.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data where statutory retention obligations no longer apply.
  • Right to Restriction and Objection: Object to specific data processing operations or restrict processing under certain circumstances.
  • Right to Data Portability: Request transmission of your personal information in a structured, machine-readable format.

To exercise these rights, submit a written inquiry to our compliance team at [email protected]. You also hold the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Revisions to this Privacy Policy

We may periodically update this Privacy Policy to reflect changing legal requirements, technological integrations, or system operations. Updated versions will be posted here with a renewed "Last Updated" revision date. Continued utilization of our platform signifies your ongoing agreement to these terms.