01Who is responsible for your data
Pantera GP is the controller of the personal data described here. Privacy requests and complaints go to legal@pantera-gp.com.
02What we collect, why, and on what basis
| Purpose | Data | Lawful basis | Kept for |
|---|---|---|---|
| Opening and running your account | Name, email, phone, country, password (stored hashed), account settings | Contract | While the account is open, then 12 months |
| Verifying your identity | Passport or national ID, proof of address, the review outcome, the reviewer | Legal obligation under anti-money-laundering rules / Legitimate interest in preventing fraud and impersonation, assessed and documented | Five years after the relationship ends / While the account is open, then [12 months] |
| Recording your trading | Orders, fills, positions, balances, credits, deposits, withdrawals, offering subscriptions, staking and portfolio positions, the automated trader's settings and log | Contract | While the account is open, then 6 years for financial records |
| Keeping the Platform secure | Sign-in times, IP address, device and browser, the audit log of changes to your record and who made them | Legitimate interest in security and in a record of what was done to your account | 12 months for sign-in data; the audit log for the life of the account plus 6 years |
| Supporting you | Support tickets, messages and notes staff add to your record | Contract | While the account is open, then 12 months |
| Sending you the weekly update | Email address, opt-out status | Consent, which you can withdraw with the link in every message | Until you unsubscribe |
| Sending account mail | Email address | Contract; statements, security and verification mail continue after you opt out of marketing | While the account is open |
| Showing a connected wallet | Wallet address and balances, read in your browser | Consent, given when you connect; the address is stored only if you link it | Not stored unless linked; then while the account is open |
| Public articles and the website | No personal data. The session token and your theme choice are kept in your browser's local storage because the Platform cannot work without them; no analytics or advertising storage is used | Strictly necessary | Until you sign out or clear your browser |
03Where it is held and transfers
The database is hosted in REGION. Where a provider processes data outside the UK / the EEA, the transfer is covered by Standard Contractual Clauses / the UK International Data Transfer Addendum / an adequacy decision. Copies are available on request.
04How we protect it
Connections are encrypted in transit. Passwords are stored as one-way hashes. Identity documents are stored inside the database and are visible only to staff with the review role.
Every change to a client record is written to an audit log with who made it. Access to the desk is by named staff accounts that can be switched off at once.
05Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, to receive it in a portable form, and to withdraw any consent you gave. Write to legal@pantera-gp.com; we answer within one month. Some records must be kept by law after you ask for deletion, and we will tell you which.
You can complain to us at the same address; we acknowledge within 30 days and tell you the outcome. You can also complain to the Information Commissioner's Office at ico.org.uk / your local data protection authority.
06Children
The Platform is for people aged 18 and over. We close accounts found to belong to anyone younger and delete their data.
07Changes to this policy
We update this policy when what we do changes, and post the date of the current version at the top of this page. Material changes are announced by email.