Privacy and Personal Information Notice

Miramagna treats responsible handling of personal information as a core duty. We process data openly, for defined reasons and under applicable requirements, including the UK GDPR. This notice sets out what we obtain, why it is used, how long it may be kept and the safeguards we apply.

1. Who is responsible for your information

For UK GDPR purposes, the website operator and the Miramagna platform are responsible controllers of your personal information. Our legal notice contains the applicable contact details and further information. Privacy questions may also be directed to our data protection officer.

2. Information we collect

We obtain and process information needed to operate the service, meet legal duties and safeguard the platform. This may include:

Identity information: your given name, family name and birth date, used to establish your identity and check your age.
Contact information: email address, telephone number if supplied, country of residence and, where relevant, your postal address.
Account and payment information: payment details, deposits, withdrawals and records relating to transactions.
Technical and activity information: IP address, browser and device details, login timestamps and connection records.
Verification information: identity documents, proof of address and other evidence needed for KYC/AML procedures where required by law.

We normally do not seek special-category information, such as health data or religious beliefs, unless the law requires it or you have expressly authorised its collection.

3. Sources of your information

Your information can be obtained through several safeguarded channels:

Information you provide: for instance, when opening an account, updating your profile, uploading documents or contacting us.
Information collected automatically: such as cookies, server records, analytics data and technical details generated while you use the platform.
Information supplied by other organisations: including payment services supporting deposits or withdrawals, KYC/AML screening providers and social sign-in services when you authorise access.

4. How we use information

Personal information is used for specific lawful purposes, including the following where applicable:

To open, administer and operate your account, including the platform tools made available to you.
To handle and secure payment operations, including deposits and withdrawals.
To provide appropriate support and respond to your questions, requests and reported issues.
To meet statutory and regulatory duties, including KYC, AML and tax requirements.
To protect our systems and identify or deter fraud, misuse and attempted unauthorised entry.
To improve usability and develop the platform's functions over time.
To deliver service notices or promotional messages where you have chosen to receive them.

5. Our lawful processing grounds

Performing our contract with you or completing steps you request before entering into a contract (Article 6(1)(b) UK GDPR).
Meeting legal requirements (Article 6(1)(c) UK GDPR), including anti-money-laundering obligations.
Furthering legitimate interests (Article 6(1)(f) UK GDPR), including platform security, operational resilience and reliable service delivery.
Relying on your clear consent (Article 6(1)(a) UK GDPR), for example for marketing or non-essential functions.

6. When information may be shared

Information is disclosed only when necessary, to selected recipients and service providers such as:

Banks and payment firms that help receive deposits or arrange withdrawals.
Specialist organisations appointed to conduct KYC and AML screening.
Cloud-hosting and technology providers operating under suitable data-processing arrangements.
Analytics and security suppliers using anonymised or pseudonymised information where reasonably practicable.
Professional advisers, including solicitors and tax specialists, when needed for legal or compliance work.
Courts and public authorities where disclosure is legally required or necessary to commence, establish or defend legal proceedings.

We neither sell personal information nor provide it to third parties for their own independent commercial use.

7. Transfers outside the UK

Some suppliers, including hosting and analytics providers, may operate outside the UK or European Economic Area. Where information is transferred internationally, we use appropriate protections, which may include the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, binding corporate rules or a relevant adequacy decision, to maintain an appropriate standard of protection.

8. Protecting personal information

We combine organisational controls with technical protections to help keep your personal information safe:

Encrypted connections using up-to-date security standards, including TLS 1.3 or later.
Robust encryption for sensitive information stored on our systems, including AES-256 where suitable.
Routine security assessments, penetration tests and independent expert reviews.
Ongoing monitoring intended to identify unusual behaviour and attempted compromises.
Access permissions limited according to each team member's duties and level of responsibility.
Client money maintained in segregated accounts through regulated service providers.

No internet-based system can remove all security risk, but these controls are designed to reduce reasonably foreseeable exposure.

9. How long we keep data

Personal information is kept only for the time needed for the purposes described here or for the period imposed by law:

While your account remains open and our contractual relationship continues.
Following closure, for the duration required by applicable rules, which may include 5–10 years for tax or regulatory records.
Where consent provides the legal basis, such as marketing, until you withdraw that permission.

When information is no longer required, we securely remove it or transform it into anonymous data.

10. Your data protection rights

Data protection law gives you a range of rights in relation to your personal information, including the ability to:

Ask whether we process personal information about you and request confirmation of this.
Ask us to amend inaccurate information or complete records that are missing details.
Seek deletion where there is no lawful basis for retaining the information.
Ask us to limit processing in circumstances provided for by law.
Obtain your information in a structured, commonly used, machine-readable form for transfer to another organisation.
Withdraw consent at any time where future processing relies on that consent.
Make a complaint to the appropriate data protection supervisory authority.

11. Cookies and related tools

Cookies and comparable tools help the website operate, show us how visitors use it and inform improvements to the service. Necessary cookies are active by default; analytics and advertising cookies are used only with your permission. Our separate cookie notice provides more detail.

12. Updates to this notice

We may update this notice from time to time to reflect legal, regulatory or platform changes. The current version will be published on our website. Where an amendment is material, we will tell you by email or via the platform.

13. Privacy contact details

For privacy questions, information about this notice or requests concerning your rights, contact $site_gmail or use the website contact form. Our data protection officer will consider your enquiry and aim to reply within a reasonable timeframe.

When you use Miramagna, you confirm that you have reviewed this notice and accept its provisions.