Privacy Policy

Y-COMMERCIAL TECHNOLOGIES LIMITED t/a HedgePoint ™ ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the HedgePoint platform.

We are registered in England & Wales (Company No. 10964842).

Account Information

Name, email address, company name, phone number, and role when you create an account or contact us.

FX Transaction Data

Trade confirmations, hedge details, currency pairs, notional amounts, rates, and expiry dates uploaded to or generated within the platform.

Usage Data

Information about how you interact with the platform, including pages visited, features used, timestamps, and device information.

Technical Data

IP address, browser type, operating system, and device identifiers collected automatically.

• Provide, maintain, and improve the HedgePoint platform
• Parse and process FX documents using our AI engine
• Generate dashboards, reports, and alerts for your hedge portfolio
• Communicate with you about your account, updates, and support requests
• Comply with legal and regulatory obligations
• Detect, prevent, and address security issues and fraud

We process your personal data on the following legal bases under GDPR:

• Contract performance: Processing necessary to provide the platform services you've requested
• Legitimate interests: Improving our services, security monitoring, and analytics
• Legal obligation: Compliance with financial regulation and legal requirements
• Consent: Where you've opted in to marketing communications or optional cookies

We do not sell your personal data. We may share data with:

• Service providers: Cloud hosting, email delivery, and analytics providers operating under data processing agreements
• Regulators: The FCA and other regulatory bodies when required by law
• Legal processes: In response to lawful requests from courts or government authorities

See our Data Processing Agreement for details on sub-processor arrangements.

We retain your data for as long as your account is active and for a period of 7 years thereafter to comply with financial regulatory requirements. Usage and technical data is retained for up to 2 years. You may request deletion of your account and associated data at any time, subject to regulatory retention requirements.

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data (right to be forgotten)
• Restrict or object to certain processing
• Data portability — receive your data in a structured format
• Withdraw consent at any time

To exercise any of these rights, contact us at info@hedgepoint.app.

We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 in transit, tenant-level data isolation, role-based access controls, and comprehensive audit logging. For full details, see our Security page.

For privacy-related inquiries:

Y-COMMERCIAL TECHNOLOGIES LIMITED t/a HedgePoint ™
C/O Smith Butler, Sapper Jordan Rossi Park, Otley Road, Baildon, West Yorkshire, BD17 7AX, United Kingdom
Email: info@hedgepoint.app
Phone: +44 (0) 20 7946 0958