Privacy Policy & Data Protection Statement

1. Introduction & Overview

Socialspryrankt Advisory Technologies Ltd. ("Socialspryrankt", "we", "our", or "us") operates the website socialspryrankt.monster and provides enterprise consultancy and deployment architectures for artificial intelligence in wealth management. We are committed to protecting the privacy, security, and integrity of data entrusted to us by advisory professionals, registered investment advisers, and corporate partners.

This Privacy Policy explains how we collect, process, store, and safeguard personal data when you visit our website, complete our inquiry forms, or engage our advisory frameworks. We adhere strictly to applicable data protection regulations, including the UK General Data Protection Regulation (UK GDPR), the EU GDPR, and the California Consumer Privacy Act (CCPA/CPRA).

2. Data Collection Categories

We collect information strictly necessary to provide professional services and maintain web infrastructure:

• Directly Provided Professional Contact Information: When submitting an inquiry via our contact portal, we collect your name, corporate email address, employer/firm name, practice classification, and the narrative scope of your inquiry.
• Technical & Connection Telemetry: When accessing our website, our servers automatically log standard network metadata, including your IP address, browser user agent, operating system, referencing URL, and timestamp.
• Cookie & Consent Records: We record your explicit cookie consent choice in your browser’s local storage to honor your preferences regarding telemetry across sessions.

3. Legal Bases for Processing (UK / EU GDPR)

We process personal information under the following legal bases pursuant to Article 6 of the GDPR:

• Legitimate Interests: Operating, securing, and improving our professional advisory publications; detecting malicious traffic; and answering business inquiries.
• Contractual Performance: Taking preparatory steps prior to entering into a commercial consultancy or architecture agreement at your request.
• Consent: Storing non-essential analytical or functional preferences where you have provided affirmative consent through our cookie interface.
• Legal Compliance: Retaining corporate correspondence and corporate records required under UK company and tax law.

4. Third-Party Data Processors & Sub-processors

We do not sell, rent, or trade your personal data. To support our technical operations, we engage vetted sub-processors that operate under written Data Processing Agreements (DPAs) with strict security standards:

• Hosting & Edge Infrastructure: Cloudflare Inc. and AWS EMEA for web hosting, DDoS mitigation, and SSL/TLS termination.
• Transactional Email Delivery: Secure SMTP service providers ensuring TLS encryption in transit for inquiry transmissions.
• Anthropic Enterprise APIs: In our advisory architecture implementations, API data processing operates under Anthropic’s commercial enterprise terms, where customer inputs are segregated and zero customer data is retained for model training.

5. International Data Transfers

When personal data is transferred outside the United Kingdom or the European Economic Area (EEA), we ensure appropriate safeguards are implemented, including standard contractual clauses approved by the European Commission or the UK International Data Transfer Agreement (IDTA), accompanied by transfer impact assessments where required.

6. Retention Schedules

We retain personal information only for the duration necessary to satisfy the purposes set out in this notice:

• Inquiry Records: Retained for a period of 24 months following the last communication, after which records are purged.
• Contractual & Billing Records: Retained for seven (7) years to satisfy UK corporate accounting and HMRC tax compliance requirements.
• Server Access Logs: Automatically rotated and deleted within 90 days.

7. Your Statutory Privacy Rights

Depending on your geographic location, you enjoy specific statutory rights regarding your personal information:

• Right of Access: You may request a formal copy of the personal information we hold concerning you.
• Right to Rectification: You may require us to correct inaccurate or incomplete personal records.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where retention is no longer justified by law.
• Right to Restrict or Object to Processing: You may object to data processing based on legitimate interests or request temporary restrictions.
• Right to Data Portability: You may receive your data in a structured, machine-readable format.
• Non-Discrimination: We will never discriminate against you, alter service pricing, or deny functionality for exercising your legal privacy rights.

8. Data Protection Officer (DPO) & Inquiries

To exercise your rights or submit inquiries regarding our privacy standards, contact our appointed Data Protection Officer:

You also have the right to lodge a formal complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or your national data protection supervisory authority.