Privacy Policy & Data Protection

XSiDER Ltd (“XSiDER”, “we”, “our” or “us”) respects your privacy and is committed to protecting personal data collected through our website, business communications and technology services.

XSiDER Ltd is a company incorporated in England and Wales under company number 14337379, with its registered office at 1422 London Road, London, SW16 4BZ, United Kingdom..

We provide business-to-business trading technology, including trading platforms, CRM systems, risk management tools, software infrastructure and integration services. XSiDER operates as a technology provider and does not itself provide brokerage services, investment advice or regulated financial services.

This Privacy Policy explains what personal data we collect, how we use it, when we share it and the rights available to individuals under applicable data protection laws.

This Privacy Policy applies to:

• Visitors to the XSiDER website.
• Individuals who contact us or submit enquiries.
• Business representatives, prospective clients, suppliers and partners.
• Individuals whose personal data is processed in connection with our technology services.

Where XSiDER provides technology services to a business client and processes personal data on that client's behalf, the processing relationship may be governed by a separate agreement, including a Data Processing Agreement (“DPA”).

Depending on the nature of the processing activities, the business client may act as the data controller and XSiDER may act as the data processor. In other circumstances, XSiDER may act as an independent data controller for its own business purposes.

Depending on how you interact with us, we may collect the following categories of personal data.

3.1 Information You Provide

• Name and business contact details.
• Business email address and telephone number.
• Company name, job title and business address.
• Information submitted through contact forms, demo requests or other enquiries.
• Information included in correspondence with our team.
• Contractual, billing and business relationship information, where applicable.

3.2 Technical and Website Information

When you visit our website, certain technical information may be collected, including:

• IP address.
• Browser type and version.
• Device and operating system information.
• Website pages visited and interaction information.
• Date, time and duration of visits.
• Referral sources and general website usage information.

3.3 Information From Business Sources

We may obtain business contact information from publicly available sources, professional networks, referrals, business partners and other lawful sources.

We may use personal data to:

• Respond to enquiries and requests for information.
• Arrange demonstrations and discuss our technology services.
• Establish and manage business relationships.
• Prepare proposals, quotations and agreements.
• Provide, configure and support contracted technology services.
• Maintain website functionality and improve user experience.
• Protect our systems, investigate suspicious activity and prevent misuse.
• Meet applicable legal, regulatory and contractual obligations.
• Communicate relevant service updates and business information where permitted by law.

Where applicable data protection law requires a lawful basis for processing, we rely on one or more of the following:

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Where processing is based on legitimate interests, you may have the right to object, subject to applicable law.

Our website may use cookies and similar technologies to support website functionality, remember preferences, understand website usage and improve performance.

Cookies may include:

Where required by law, we will obtain your consent before placing non-essential cookies or similar technologies on your device.

You can manage your cookie preferences through our website's cookie settings, where available, or through your browser settings.

Disabling certain cookies may affect website functionality.

We may share personal data, where necessary and appropriate, with:

• Hosting and cloud infrastructure providers.
• Software, website and technology service providers.
• Email, communication and customer support providers.
• Professional advisers, including legal and accounting advisers.
• Business partners involved in a specific business purpose.
• Regulators, law enforcement authorities or courts where required or permitted by law.
• A successor or acquiring entity in connection with a merger, restructuring, acquisition or other corporate transaction.

Where third-party service providers process personal data on our behalf, we take appropriate steps to ensure that suitable contractual and data protection arrangements are in place.

We do not authorise our service providers to use personal data for purposes unrelated to the services they provide to us.

Some of our service providers or technology infrastructure may be located outside the United Kingdom or the European Economic Area.

Where personal data is transferred internationally, we will implement appropriate safeguards in accordance with applicable data protection law.

Depending on the destination and circumstances, these safeguards may include adequacy regulations, the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism.

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including responding to enquiries, managing business relationships, performing contracts, resolving disputes and complying with legal obligations.

Retention periods depend on the type of personal data, the purpose for which it was collected and applicable legal requirements.

When personal data is no longer required, we will take reasonable steps to delete it, anonymise it or securely dispose of it.

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.

These measures may include access controls, authentication mechanisms, encryption, monitoring and security logging. The specific measures implemented may vary depending on the systems, services and deployment involved.

Although we take reasonable steps to protect personal data, no method of electronic transmission or storage is completely secure. Accordingly, we cannot guarantee absolute security.

Further information about our security practices is available on our Security page.

Depending on your location and applicable data protection law, you may have the right to:

• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of personal data in certain circumstances.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Request data portability, where applicable.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a relevant data protection authority.

These rights are subject to applicable legal conditions and exemptions.

Our website may contain links to third-party websites, products or services. These third parties operate independently and maintain their own privacy policies and practices.

XSiDER is not responsible for the privacy practices, content or security of third-party websites. We recommend reviewing their privacy policies before providing personal data.

Our website and business services are intended primarily for business users and are not directed at children.

We do not knowingly collect personal data directly from children through our website. If we become aware that personal data has been collected from a child in circumstances where such collection is not permitted, we will take appropriate steps to review and address the matter.

If you believe a child has provided personal data to us, please contact us using the details in Section 15.

We may update this Privacy Policy from time to time to reflect changes in our business, technology, legal requirements or data processing practices.

Any revised version will be published on this page with an updated “Last Updated” date.