Vong Phuthinh
Platform Terms Privacy Risk

Privacy Policy

Last Updated: February 2, 2026

This Privacy Policy explains how Vong Phuthinh ("we", "us", or "our") collects, holds, processes, and safeguards personal data obtained from users who interact with our institutional AI crypto trading platform and related web interfaces. We respect your confidentiality and are committed to complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant international data protection frameworks.

1. The Data Controller

The designated data controller responsible for the governance of personal information processed through the platform is:

  • Entity: Vong Phuthinh
  • Physical Address: Fenchurch Street 74, WC1V 6AA Manchester, United Kingdom
  • Data Protection Office Email: [email protected]
  • Telephone: +44 20 7946 2072

2. Categories of Information We Collect

Depending on your interaction with our infrastructure, we collect information belonging to three primary categories:

  • Directly Provided Information: Contact coordinates including full name, business or individual email address, phone contact, identity verification documentation, and correspondence transmitted when submitting support inquiries.
  • Technical and Network Telemetry: IP addresses, browser types and versions, operating system architecture, geographic locale inferred from network routing, device identifiers, and server request timestamps.
  • Analytical & Execution Configuration: Interaction logs detailing interface preferences, API routing parameters, simulation settings, and feature engagement records.

3. Legal Grounds and Purposes of Processing

We process your personal information strictly under established lawful grounds under UK data protection law:

  • Performance of a Contract: To provision access to analytical trading tools, maintain user dashboards, deliver technical support, and fulfill service requests.
  • Legitimate Interests: To optimize server response speeds, prevent cyber threats, audit algorithmic integrity, identify bot manipulation, and protect systemic operational security.
  • Legal and Regulatory Compliance: To satisfy anti-money laundering (AML), counter-terrorist financing (CTF), know-your-customer (KYC), and tax reporting statutory mandates.
  • Consent: Where explicitly provided for optional telemetry or direct notifications, which may be withdrawn at any time.

4. Data Retention and Storage Safeguards

Personal data is retained only for the period necessary to fulfill the operational purposes described or to satisfy mandatory statutory retention periods under English law (typically up to seven years for audit and transaction validation records). Information no longer required is permanently expunged or securely anonymised.

All data at rest is protected using industry-standard AES-256 encryption. Telemetry in transit utilizes TLS 1.3 cryptographic protocols alongside network firewalls, multi-factor credential requirements, and compartmentalized access controls.

5. Sharing and Cross-Border Transfers

We do not sell, rent, or lease personal identifiers to third-party commercial marketing organisations. Disclosures occur exclusively under stringent confidentiality constraints to:

  • Infrastructure hosting providers, cloud security partners, and verification service vendors.
  • Independent liquidity venues, clearing houses, or exchange counterparties connected at your express configuration.
  • Judicial, regulatory, or government authorities where compelled by valid court summons or legal obligation.

Where personal data is transferred outside the United Kingdom, appropriate safeguards are maintained, such as the UK International Data Transfer Agreement (IDTA) or standard contractual clauses ensuring equivalent safety guarantees.

6. Your Statutory Rights

Under the UK GDPR and associated data privacy legislation, you maintain rights concerning your personal records:

  • Right of Access: Request confirmation and an exportable copy of data held about you.
  • Right to Rectification: Request correction of inaccurate, outdated, or incomplete records.
  • Right to Erasure: Request the deletion of data when retention is no longer legally justified.
  • Right to Restrict Processing: Request suspension of specific processing activities under contested conditions.
  • Right to Data Portability: Obtain your records in a structured, commonly used, machine-readable format.
  • Right to Object: Contest processing conducted on the basis of legitimate corporate interests.

To exercise any of these rights, contact our Data Protection Officer at [email protected]. You also maintain the right to lodge a formal complaint with the Information Commissioner's Office (ICO) in the United Kingdom.

7. Cookie Usage and Tracking Technologies

Our website utilizes strictly essential session cookies and optional performance metrics to preserve user preferences and ensure rapid server response times. You may inspect, block, or delete cookies through your web browser options at any time, although blocking essential cookies may impair platform accessibility.