Privacy Policy
JUMP CAPITAL MANAGEMENT – PRIVACY POLICY Last updated: 07 February 2026
Controller / Data Controller (“we”, “us”, “our”) Tomas Peralta (individual) Jurisdiction: Great Britain (United Kingdom) Privacy & support contact: cfojumpcm@gmail.com
This Privacy Policy explains how we collect, use, share, and protect personal data in connection with our private Platform. Where applicable, we aim to align with UK GDPR and the Data Protection Act 2018. Because we serve users globally, additional local rights and requirements may also apply depending on your location.
-
Scope This Policy applies to personal data processed through: (a) the Platform (private dashboards and tools), (b) account authentication and access control, (c) operational/security logging, (d) email notifications.
-
Personal data we process Depending on usage, we may process:
2.1 Account and identity data
- Email address
- Internal user identifiers (e.g., UUID)
- Role/permission attributes required to enforce access controls (including RLS/roles)
- Authentication-related metadata (e.g., login timestamps)
2.2 Platform data (non-sensitive, as designed)
- Portfolio-related records, calculations, reports, and metrics associated with your account, to the extent incorporated for providing the Platform. We do not request or intend to store “special category” data (sensitive data) such as passports/IDs, full bank details, card data, health data, etc. If such data is provided inadvertently, you may request deletion.
2.3 Technical, security, and audit data
- IP address, device/browser information (user-agent), logs, timestamps, and security events, used to maintain integrity, prevent abuse, and troubleshoot.
2.4 Email notification data
- Your email address and the minimum content needed to deliver operational/security notifications.
- How we collect data
- Directly from you (or via the client onboarding performed by us)
- Automatically through your use of the Platform (logs, security events)
- From internal operational sources needed to provide the service
-
Purposes of processing We process personal data to: (a) create and administer accounts (manual onboarding), (b) authenticate users and enforce access controls (RLS/roles), (c) provide the Platform’s dashboards, tools, and outputs, (d) ensure security, monitoring, audit, and fraud/abuse prevention, (e) provide support and respond to inquiries, (f) send operational and security notifications, (g) improve the Platform (including future analytics), subject to applicable consent rules where required.
-
Legal bases We rely on one or more of the following legal bases (as applicable): (a) performance of a contract / providing the Platform to you, (b) legitimate interests (security, fraud prevention, service improvement), (c) compliance with legal obligations, (d) consent (e.g., if/when we deploy non-essential cookies or certain analytics where consent is required).
-
Cookies and analytics (future use) We may implement analytics and related technologies in the future to understand usage and improve the Platform (e.g., aggregated traffic and feature usage). If such tools require non-essential cookies or similar technologies, we will implement an appropriate notice and consent mechanism where required by applicable law. Where available, we will provide opt-out controls.
-
Sharing and processors (service providers) We may share personal data with trusted third-party infrastructure providers or service providers acting as processors on our behalf, strictly to operate the Platform (e.g., hosting, databases, authentication, email delivery, monitoring, or security tooling). We do not sell personal data.
We may disclose data if required by law, regulation, court order, or to protect rights, safety, and security.
-
International transfers Because we serve users globally and use third-party infrastructure, personal data may be stored or processed outside the United Kingdom. Where required, we use reasonable safeguards and contractual protections appropriate to the circumstances.
-
Data retention We retain personal data for as long as necessary to provide the Platform and for legitimate business purposes (security, audit, dispute resolution), and as required by law. Account deletion and data erasure requests are handled subject to legal, regulatory, and legitimate retention obligations (including maintaining security logs, enforcing rights, and resolving disputes). Where feasible, we will delete or anonymise data within a reasonable timeframe.
-
Your rights Depending on applicable law and your location, you may have rights including:
- access to your personal data,
- rectification,
- erasure (subject to retention obligations),
- restriction or objection (where applicable),
- portability (where applicable).
To exercise rights, contact: cfojumpcm@gmail.com We may request reasonable verification of identity before fulfilling requests.
- Security We apply reasonable technical and organisational measures to protect personal data, including:
- encryption in transit (TLS),
- access control via roles/RLS,
- logging and monitoring for abuse prevention. No method of transmission or storage is 100% secure, and you are responsible for safeguarding your credentials.
-
Children The Platform is not intended for individuals under 18. We do not knowingly collect data from children.
-
Changes to this Policy We may update this Policy by publishing a new version with an updated date. Your continued use indicates acknowledgement of the updated Policy.
-
Contact Privacy & support: cfojumpcm@gmail.com