This Privacy Policy explains how Unhectic Limited ("we", "us", "our"), based in London, Greater London, England, collects, uses, and protects personal data in connection with the UHX Trader website and educational trading simulator (the "Service"). It applies to visitors of the website and to anyone who contacts us through it. This Policy is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Unhectic Limited is the operator of UHX Trader and the controller of personal data described in this Policy. We are based in London, Greater London, England. Questions about this Policy, or about your personal data, can be sent to us via the Contact page.
Data we collect
We collect only what we need to run a simple, privacy-first educational website:
- Analytics data. Aggregated, privacy-first measurement of how the site is used — for example, which pages are viewed and device type. This does not rely on cookies that track you across other websites, and it does not build an individual advertising profile of you.
- Contact-form data. If you contact us via the Contact page, we collect the name, email address, contact number and message you provide, so that we can reply to you.
We do not collect financial information. The Service does not involve real money and does not process any monetary transaction, so there is no card or bank data for us to collect.
How and why we use it
We use personal data only for the purposes below, and only where we have a lawful basis under UK GDPR to do so:
- To respond to you. When you contact us via the Contact page, we use your name, email, contact number, and message to reply. Lawful basis: legitimate interests (handling enquiries sent to us), and, where relevant, your consent in sending the message.
- To understand and improve the Service. We use privacy-first analytics to understand, in aggregate, how the site is used, so we can improve the educational experience. Lawful basis: legitimate interests, using analytics that is not designed to identify you personally.
- To meet our legal obligations. Where applicable law requires it. Lawful basis: legal obligation.
We do not use personal data for automated decision-making or profiling, and we do not sell personal data to anyone.
Cookies
The Service uses a small number of cookies, described in full in our Cookie Policy. In summary: strictly necessary cookies keep the site and your consent choice working, and privacy-first analytics cookies help us understand aggregate usage. We do not use advertising or cross-site tracking cookies.
Sharing and processors
We share personal data only with trusted service providers who process it on our behalf (data processors), under contracts that require them to protect it and to use it only for the purposes we specify:
- A privacy-first analytics processor, used to measure website usage in aggregate.
- Hosting and infrastructure providers, used to run the website and the Service.
We do not share personal data with advertisers, and we do not sell personal data to third parties.
International transfers
Some of our processors may store or process data outside the United Kingdom. Where that happens, we take the steps required under UK GDPR to make sure the data receives an adequate level of protection — for example, by relying on adequacy regulations or standard contractual clauses approved for use under UK data protection law.
Retention
We keep personal data only for as long as necessary for the purpose it was collected. Messages sent via the contact form are kept only as long as needed to handle your enquiry, and for a reasonable period afterwards in case you follow up, after which they are deleted. Aggregated analytics data is kept in a form that does not identify you personally.
Security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, but we take steps that are proportionate to the limited, low-risk data we collect.
When you use the Delete Account page, we process the account details you enter solely to verify the account is yours and to carry out the deletion. We do not store your password. We keep a security log of deletion requests — recording the User ID, time, and outcome — to protect against misuse and to maintain an audit trail.
Your rights under UK GDPR
You have the following rights over the personal data we hold about you:
- Access — ask us for a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data, in certain circumstances.
- Restriction — ask us to limit how we process your data.
- Objection — object to processing that relies on our legitimate interests.
- Portability — receive data you have given us in a structured, commonly used format, or ask us to send it to another organisation.
- Consent — where processing relies on your consent, you may revoke that consent at any time, without affecting the lawfulness of processing carried out before you did so.
- Complaint — lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk, if you believe we have not handled your data properly.
To exercise any of these rights, contact us via the Contact page.
Children
UHX Trader is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us via the Contact page so we can remove it.
Changes to this Policy
We may update this Privacy Policy from time to time, for example to reflect changes to the Service or to data protection law. The "Last updated" date at the top of this page shows when it was last revised. Continued use of the Service after an update means you accept the revised Policy.
Contact
For any question about this Privacy Policy or your personal data, contact us via the Contact page.