Privacy notice

1.Who we are

Obsidian is the controller of the personal data described in this notice. You can contact us about privacy at info@obsidian.online.

2.What we collect

Identity and contact details: your name, email address, date of birth and home address.

Verification documents: a copy of your passport, which we use to confirm your identity and age.

Account and usage data: your role, settings, engine parameters, trades, journal notes, alerts, sign-in times, IP address and browser details.

Broker credentials: the MetaApi token, MT5 login and password, and IG credentials you choose to link.

Consent records: the time and details of each acceptance of our terms, privacy notice, risk disclosure and Trading Risk Acknowledgement.

3.How we use it

To create and approve your account, verify your identity and age, run the Platform and the engines you choose, connect to your broker, keep records of your consents, keep the Platform secure, meet our legal obligations and respond to your requests.

4.Our legal bases

We process your data to perform our contract with you, to comply with legal obligations, for our legitimate interests in running a secure and well governed platform, and with your consent where we ask for it.

5.How we protect it

Personal details and broker credentials are encrypted at rest. Passports are stored in private storage that only the account owner administrator can open, and every view is written to an audit log. Broker passwords and tokens are never sent back to your browser.

6.Who we share it with

We share data only with service providers who help us run the Platform, such as hosting, storage, email and AI analysis providers, with your broker or connection service when you link them, and with authorities where the law requires. We do not sell your personal data.

Some providers may process data outside the UK. Where they do, we use appropriate safeguards such as UK approved contract clauses.

7.How long we keep it

We keep account, trade and consent records for as long as your account is open and for up to 6 years afterwards so we can deal with queries, disputes and legal requirements. We delete or anonymise data when it is no longer needed.

8.Your rights

You have the right to access, correct, delete or restrict your data, to object to processing, to data portability and to withdraw consent. To use these rights, email info@obsidian.online. You can also complain to the Information Commissioner's Office (ico.org.uk).

9.Cookies and local storage

We use essential browser storage to keep you signed in and remember your preferences, such as notification settings. We do not use advertising cookies.