Blue Tree ← Back to Home

Privacy Policy

Last updated: 15 January 2026

This Privacy Policy outlines how Blue Tree ("we", "our", or "us"), headquartered at King William Street 65, EC4N 7BJ London, United Kingdom, collects, uses, stores, and protects personal information obtained through our website, online platforms, and automated software interfaces.

We process personal data in full adherence to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are dedicated to ensuring that your privacy is protected and that your information remains confidential.

1. Information We Collect

We collect only the data essential to delivering secure, compliant, and performant algorithmic trading tools. Information gathered includes:

  • Identity and Contact Data: Full name, verified email address, telephone contact details, and country of residence provided during communication or account verification;
  • Technical and Telemetry Data: IP address, device fingerprints, operating system specifications, browser attributes, interface interaction latency, and diagnostic crash logs;
  • Trading Configuration Data: Algorithmic parameters, risk tolerance presets, exchange connection statuses, and encrypted read/execute API credentials (we never store fund withdrawal keys);
  • Correspondence Data: Records of communications, questions, feedback, and technical support requests sent to our operations desk.

2. Lawful Grounds and Purposes of Processing

Under UK data protection regulations, we rely on the following lawful bases to handle your personal information:

  • Contractual Performance: Enabling account activation, algorithmic rule routing, and technical infrastructure maintenance requested by you;
  • Legitimate Interests: Hardening system cybersecurity, preventing automated abuse, optimising model inference speeds, and debugging algorithmic pipelines;
  • Legal and Regulatory Compliance: Complying with financial recordkeeping obligations, preventing fraudulent activities, and assisting competent law enforcement bodies;
  • Consent: Sending operational bulletins, service notices, or non-essential technical notifications where explicitly opted into.

3. Cookies and Tracking Mechanisms

Our website employs technical session cookies, authentication tokens, and performance metrics scripts necessary for smooth interface navigation, session continuity, and cryptographic verification. You may adjust cookie preferences within your web browser settings; however, disabling critical cookies may degrade security and interface responsiveness.

4. Data Sharing and Third Parties

We do not sell, rent, or monetise your personal data to advertisers or third-party marketing brokers. Data transfers occur strictly with vetted infrastructure partners who operate under rigorous data processing contracts, including:

  • Cloud hosting providers and secure database facilities located within the UK and European Economic Area;
  • DDoS mitigation networks and web application firewall infrastructure;
  • Transactional communication relays and automated notification endpoints;
  • Authorised judicial, regulatory, or administrative authorities when compelled by statutory law.

5. Security Architecture and Data Retention

We implement end-to-end TLS 1.3 encryption for data in transit and AES-256 standards for sensitive data at rest. Access to operational systems is restricted through hardware two-factor authentication, principle-of-least-privilege access rights, and continuous audit logging.

Personal data is retained only for the duration necessary to fulfil contractual objectives and statutory retention duties (customarily up to 6 years following account closure for financial dispute reconciliation). After this period, data is irrecoverably anonymised or securely purged.

6. Your Statutory Rights

Under UK GDPR legislation, you have the following rights regarding your personal records:

  • Right of Access: Request a copy of the personal information we hold concerning you;
  • Right to Rectification: Request correction of inaccurate, dated, or incomplete records;
  • Right to Erasure ("Right to be Forgotten"): Request data deletion when continued processing is no longer legally justified;
  • Right to Restrict or Object: Restrict processing or object to processing carried out under legitimate interest grounds;
  • Right to Data Portability: Receive a machine-readable export of data supplied directly by you.

7. Contact and Data Protection Officer

To exercise your rights or make an inquiry concerning our privacy protocols, contact our data protection team at [email protected] or by post at Blue Tree, King William Street 65, EC4N 7BJ London, United Kingdom. You also possess the right to lodge a formal complaint with the UK Information Commissioner's Office (ICO).