Data Privacy Notice

The following customer data is normally required for our personalisation and insights service:

• Trading activity such as when the account was funded, buying and selling activity, fund withdrawals
• Web interaction activity such as clicks and hovers on all digital channels
• Device details such as IP address and device type
• Observed and inferred data generated by our proprietary algorithm

We process customer data as a data processor on behalf of our clients. Our proprietary algorithm performs two major functions:

• Machine reading of content and data from various sources in order to understand market trends
• Understanding user trading behaviour and content consumption across digital channels and making relevant content and data recommendations.

We process customer data as a data controller to develop our algorithm and solution architecture. All data is fully anonymised and randomly sampled.

We integrate with our clients’ back end operational systems to ingest customer data into the Alphastream platform, tag up digital channels in order to track user behaviour and capture form submissions such as account logins.

Data is stored in a private cloud housed in a UK based, Tier IV Data Centre.

• All data transit channels protected with HTTP over TLS (HTTPS).
• Personal data is anonymized on ingestion
• Multi-Layer end to end encryption for data in transit and at rest RBAC Controls using concept of least privilege
• Encrypted and secure file repositories

As a data controller, we do not share customer data with any third party.

Personal data is kept depending on the policy of the financial institution but typically for a period of 10 years.

Yes, we offer an opt-out feature within our service. Our clients’ customers can opt-out from the personalisation and insights service which will stop the delivery of any further personalised consent.

Unless specifically requested by the customer, customer data will continue being ingested for AlphaStream’s own analytics, statistical and algorithm development purposes. The customer can exercise further rights as set out in our website privacy policy.

Yes, we have a process for deletion of all personal data and will delete customer personal data on request without delay and no later than within one month.
For more information about your data protection rights and how to exercise them, please see our website privacy policy.