Privacy Policy

We (also referred to as “We”, “Us”, or “Our”) are committed to protecting your personal data and your privacy.

This Privacy Policy is intended to inform you about how we collect and store the information you provide through the Cresta Luxeron website (the “website”).

These principles will be upheld:

• To provide transparency about how we collect and process your personal information:

We want you to be able to make informed choices about how personal data is used and processed. That is why we created this website. To achieve this, we use a range of methods and procedures to provide you with relevant information on the use of personal data.

If we determine that you require specific details, we will provide them to you at the appropriate date and time.

We are happy to answer any questions and provide any clarifications you need regarding legal limitations. You can reach us via email at the address below: info@cresta-luxeron.com

• Personal data will be used solely for the purposes outlined in the policy.

Personal Data may be processed by us for various purposes, including providing the website, connecting you with third-party trading platforms (the 'Services'), improving the site, protecting our rights and interests, maintaining and delivering the services, complying with legal or regulatory obligations, and carrying out administrative and business activities to support the provision and use of the services.

We also process personal data to help us better understand your preferences and needs.

• To access and use essential tools to exercise your rights regarding your personal data:

To help you exercise your rights, we have robust processes in place. Contact us at any time to request access to your personal data. We can correct or delete it, restrict its use for specific purposes or in general, and transfer the information to you or to a third party. We will accommodate your requests.

• Protect your personal data:

While we cannot guarantee the complete security of your personal data, we are committed to continually employing a range of methods and techniques to ensure your personal data remains protected.

Our privacy and security policy is comprehensive.

1. The Scope?

This policy outlines the types of personal data the company collects about natural persons and how it processes, shares with third parties, and protects that data.

This Policy covers information that relates to an identified or identifiable natural person, including information about them. An identifiable natural person is someone who can be identified directly, or indirectly through additional information we hold, access, or are reasonably able to obtain.

The Policy defines “processing” as any operation that involves the use or collection of personal data. This includes the management, organisation, structuring, and storage of personal data.

Our services are intended for a general audience and are not designed for anyone under the age of 18. We do not knowingly collect or solicit information from any person under 18, nor do we knowingly permit such individuals to use our services. If we become aware of any information about minors, we will delete it as quickly as reasonably possible.

2. What personal data do we hold about you?

If you access our services and channels, or visit our website, we collect personal data. We may request your personal data in certain cases. We also collect personal data by analysing how you use our services and channels, or by receiving information about you from our third-party partners.

3. There is no requirement to disclose personal information to the company and the consequences of not doing so.

You are not required to provide us with any personal data. However, in certain circumstances, choosing not to share such information may prevent us from providing our services or may limit users’ ability to access the website.

4. What types of personal data can we collect? When you visit our website, we will collect the following personal information:

This includes details about your online activity log and traffic data (such as IP address and the date and time of access), the language you use, software crash logs, the type of browser used, as well as information regarding the device that you use. The information we collect is not personal information and cannot be used to identify you.

Personal Data We receive from you: Any personal data you voluntarily provide to Us when you access a third-party online trading platform through Us.

Personal information you provide directly to third-party platforms to facilitate transactions: this information includes your full name, address, phone number, and email address.

5. The legal grounds and the purposes for the processing of personal data

The company processes your personal data for the purposes set out in this section and in accordance with the applicable legal basis.

Without a lawful basis, the company is not permitted to use your personal data. The legal grounds on which the company may process your personal data, as provided by applicable law, are:

• You have consented to the processing of your personal data for one or more purposes. This applies when you submit personal information through the website so that we can transfer it to a third-party trading platform.
• The Company or a Third Party may need to process data to pursue their legitimate interests. For example, this may be necessary to improve our services or to defend against legal claims.
• Processing must fulfil a legal obligation.

Please contact us by email for more information about the processing required to protect legitimate interests.

Below is a list of the reasons and legal bases for how we use the information you share with us. Personal data.

6. Sharing of Personal Data with Third Parties

The company may also share personal data with third-party service providers, such as hosting and storage partners, as well as providers that process IP address information and perform user experience analysis.

At your request, we can also share specific personal data about you with third-party trading platforms. In these cases, we will provide the personal data you have given us to those third-party platforms. The use of your personal data is governed by their privacy policies. Your personal data may be shared with multiple trading platforms.

The Company may, from time to time, share personal data with affiliated entities and other business partners. This support provides the Company with access to the resources needed to enhance and improve the products and services it offers to its customers.

Where necessary to safeguard third-party rights or property, the Company is authorized to disclose personal data to regulatory, local, or other competent public authorities.

We may also share your personal data with potential investors or buyers, with lenders to the company or any other company in our group, or with other companies within our corporate group, in the event that such a transaction takes place (including the transfer or sale of assets belonging to the company or any other entity in the group), or in connection with any merger, restructuring, consolidation, or bankruptcy of the company or any other business in the group.

7. Cookies and Third-Party Services

Third-party services, such as advertising providers on our website or analytics companies, may be used. These companies may also use cookies or other technologies.

Cookies are small text files stored on your device each time you visit or interact with this website. They collect information about your preferences and browsing behavior to enhance your experience, remember your settings, and tailor products and services to your interests. Cookies are also used for statistics and analytics to help us understand and improve site performance.

Some of the cookies we use are session cookies. These are temporarily stored on your device and expire when you close your browser. Other cookies are persistent. Persistent cookies remain on your device for a set period after you close your browser. They help the website recognize you as a returning user and support features that make it easier for you to return to the site.

Types of cookies:

We may use them depending on their intended purpose:

Cookies are blocked or removed

To block or delete cookies, adjust your browser settings. The links below offer instructions for several popular browsers.

• firefox
• Microsoft Edge
• Google Chrome
• safari

However, please be aware that some or all of the website's features and functions may not work as expected if this happens.

ONLINE TRACKING NOTICE

The Company will retain your personal data for as long as necessary to fulfill the purposes of processing described in this policy, or for longer periods as permitted by applicable laws, regulations, policies, and applicable orders.

We’ll share your information with third-party trading platforms for 12 months. If you consent, we will continue sharing your data for an additional 12 months.

We regularly review the Personal Data we retain to determine whether it is no longer needed.

9. Transfers of personal data to a third country or an international organization

Your personal information may be transferred to other countries (i.e., to a third country—any country other than the one in which you reside) or to international organizations or jurisdictions. The Company takes all necessary steps to protect the personal data you provide and ensures that users can assert their rights and access effective legal remedies.

These protections and safeguards are available to all residents of the EEA (European Economic Area).

• Transfer to a third country or an international organisation that the European Commission has determined provides an adequate level of protection for personal data transferred to it, in accordance with Article 45(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”)
• The transfer is carried out pursuant to a legally binding and enforceable instrument between public authorities or bodies under Article 46 (2) (a) of the GDPR.
• The transfer was carried out in accordance with the European Commission’s Standard Contractual Clauses adopted under Article 46(2)(c) of the GDPR. The Clauses adopted by the European Commission can be viewed at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

The Company can provide details on the security measures it implements to protect your personal data when transferred to third countries or international organizations. Please email us at info@wealthwaydigital.uk

10. Personal Data Security

We have implemented appropriate organisational and technical measures to protect personal data. These measures include preventing the accidental or unlawful destruction, loss, or alteration of personal data.

We cannot guarantee or warrant that the security of your personal data will be free from error. We also cannot be held liable for any intangible, incidental, or consequential damages arising from the use or disclosure of personal data. This includes, but is not limited to, disclosures resulting from transmission errors, unauthorised third-party access, or any other cause beyond our control.

If we are subject to legal requirements or other circumstances beyond our control, we may be required to disclose your personal data to third parties, including public authorities. In these situations, we cannot control the safeguards those third parties apply to your personal data.

No method of transmitting personal data over the Internet is completely secure. The Company cannot guarantee the security of any personal data you send to us over the Internet.

11. Hyperlinks to third-party websites

The website provides links to third‑party websites and applications. These sites and apps are not controlled or supervised by the company. We are not responsible for the collection or processing of personal data by these websites or apps. This Policy does not apply to actions carried out on such sites or apps.

When visiting any third-party websites or apps, we recommend reading their privacy policies before deciding whether to access or use them. We also recommend that you provide any personal data directly to them.

12. Changes to this Policy

This Policy may be updated at any time. If we make changes, we will notify you by posting the updated policy on our website. Additionally, when we implement significant modifications to this policy, we will aim to inform you through the channels we deem appropriate and will publish an announcement on our website. Unless explicitly stated otherwise, any amendments will take effect upon publication of the revised policy.

13. Your rights with respect to your personal data

You have the right to request that we verify the accuracy of the personal data collected about you, to correct any errors, and to delete any personal data we do not require. You may also limit the scope and types of processing of your personal data.

If you are a resident of the EEA, please refer to this page:

You have these rights in relation to the personal data you provide. To exercise them, please send an email to the address below.

Access rights

The Company is able to verify whether the personal data processed about you is accurate. If it is, you are able to access your personal data.

The Company will provide an electronic copy of the personal data currently being processed and may charge a reasonable fee for any additional copies you request. The data will be made available electronically upon request.

The right to access personal data must not conflict with the rights and freedoms of others. If a request would harm another’s rights or freedoms, the company may refuse to comply or limit the scope of its response.

Right to rectification

The Company is entitled to correct inaccurate personal data. You have the right to request that any incomplete personal data concerning you be rectified, taking into account the purposes of the processing.

Right to Erasure

The following reasons are applicable: (a) Personal data are no longer needed for the purpose for which they were collected or processed; (b) You withdraw consent and there is no other legal basis for processing; (c) You object at any time, on grounds specific to your situation, to processing based on legitimate interests pursued by us or a third party; (e) Personal data have been processed unlawfully; or (f) Personal data must be erased to meet the company’s legal obligation.

This right does not apply when processing is necessary (a) to comply with a legal obligation under European Union or Member State law; or (b) to establish, exercise, or defend legal claims.

Processing restrictions

If you are concerned about the accuracy of your personal data, you can request that the company limit the processing of your personal data.

If you request that the processing of personal data be restricted, the data may only be retained with your consent, to establish, exercise, or defend legal claims, to protect the rights of another natural person, or for reasons of important public interest within the European Union or a Member State.

Right to Data Portability

If the processing is carried out by automated means and is based on your consent or a contract to which you are a party, you have the legal right to review the personal data you have provided to the company.

You have the right to request that your personal data be transferred directly from the company to another controller, where technically feasible. Your rights under the right to erasure are not affected when you exercise your right to data portability. The right to data portability does not interfere with the rights or freedoms of others.

Right to challenge

You may object at any time to the processing of your personal data based on legitimate interests pursued by the company or a third party. This includes profiling based solely on those legitimate interests. If we can demonstrate compelling legitimate grounds for processing that override your rights, freedoms, or interests, or if the processing is necessary for the establishment, exercise, or defense of legal rights, we may continue processing.

Regarding direct marketing, you have the right to object at any time to the processing of your personal data.

Right to Decline Consent

You may withdraw your consent for us to process your personal data at any time. This won't affect the legality or lawfulness of any processing that relied on your consent before it was withdrawn.

You have the right to lodge a complaint with the competent supervisory authority.

You may file an appeal with a supervisory authority established by a Member State to protect the fundamental rights of individuals regarding the processing of personal data within the European Union.

The laws of the European Union and its Member States may restrict your rights regarding your personal data, as detailed in Section 13.

We will provide the requested information in accordance with your rights under section 13 of this agreement within one month of receiving your request. This period may be extended by up to two months if necessary, depending on the nature and number of requests. Within one month of receipt, we will notify you of any extension and the reasons for it.

As long as it does not conflict with the provisions of section 13 of the law, the information you request under your rights in section 13 will be made available free of charge. If the request is unfounded or excessive, particularly due to repetition, we may charge a reasonable amount to cover administrative expenses for providing the information or carrying out the requested action. We may also decline to act.

If we have any doubts about the identity of the individual who submitted your request, the company may request additional information or documentation in order to verify your identity and proceed with your request.