Privacy Policy

Data Controller

Vilasio is the data controller for personal data collected through this Platform.

Scope

This Privacy Policy applies to vilasio.com and any related subdomains or pages operated under the Vilasio project.

It applies to personal data collected through the Platform, including through direct communications, contact forms, newsletter subscriptions if introduced, and technical operation of the website.

Data We Collect

Information You Provide Directly

We may collect personal data that you voluntarily provide to us, including:

• Contact form submissions, such as your name, email address, and message content
• Direct emails or other correspondence sent to us
• Newsletter or mailing list information, if such functionality is introduced in the future

Information Collected Automatically

When you access the Platform, limited technical information may be processed automatically as part of normal website operation, hosting, and security, including:

• IP address
• Browser type and version
• Operating system
• Device type
• Pages requested
• Basic server request information

At present, the Platform does not actively use third-party analytics tools, advertising trackers, or marketing pixels.

We do not intentionally collect financial account data, trading account credentials, or special categories of personal data through the Platform.

Legal Basis for Processing

We process personal data on one or more of the following legal bases, depending on the context:

• Consent — where you voluntarily submit information through a form or email us, and where optional services such as newsletters may be introduced in the future
• Legitimate interests — where processing is necessary to operate, secure, maintain, and improve the Platform, respond to enquiries, and prevent misuse
• Legal obligations — where processing is required to comply with applicable law

How We Use Your Data

We use personal data for the following purposes:

• Platform operation — to operate, maintain, and secure the website
• Communication — to respond to enquiries, messages, or requests submitted by users
• Security — to detect, prevent, and investigate fraudulent, abusive, malicious, or unauthorised activity
• Future service development — if the Platform later introduces optional features such as newsletters, analytics tools, or user subscriptions, data may be processed to support those features in accordance with updated policies

We do not sell, rent, or trade personal data to third parties.

We do not use personal data for targeted advertising.

Cookies and Similar Technologies

At present, the Platform does not actively use third-party analytics cookies, advertising cookies, or tracking pixels.

The website may still rely on limited technical processes required for normal hosting, security, or content delivery. If Vilasio later introduces analytics, preference management, embedded services, or additional cookie-based functionality, this Privacy Policy and the related Cookie Policy may be updated accordingly.

Third-Party Services

The Platform may rely on limited third-party infrastructure or technical services necessary for hosting, delivery, security, and operation.

Backend and Hosting Infrastructure

The Platform may use external hosting or backend infrastructure providers, such as Render or similar services, which may process technical server-side request data necessary for the operation, availability, and security of the website.

We do not intentionally use such infrastructure to collect sensitive financial account data from users.

External Data Sources

The Platform may display public or licensed data from sources such as the CFTC, CBOE, BLS, Polymarket, and other public market data providers. No personal user data is intentionally transmitted to these sources merely by viewing market data on the Platform.

If additional third-party tools are integrated in the future, this Privacy Policy may be updated.

International Data Transfers

Some technical service providers used to host or operate the Platform may process limited technical data outside the European Economic Area (EEA), including in jurisdictions such as the United States.

Where such transfers occur, Vilasio seeks to ensure that appropriate safeguards are in place in accordance with applicable data protection laws.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Typical retention periods may include:

• Contact form or email enquiries — retained for as long as reasonably necessary to handle the enquiry and maintain correspondence records
• Server logs and technical request data — retained for a limited period as reasonably necessary for security, troubleshooting, and system integrity
• Future optional services such as newsletters — if introduced, retention periods will be updated accordingly

Your Rights

Under the GDPR and other applicable data protection laws, you may have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete personal data
• Right to erasure — to request deletion of your personal data where applicable
• Right to restriction — to request restriction of certain processing activities
• Right to data portability — to request your data in a structured, commonly used, and machine-readable format where applicable
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw that consent at any time

To exercise any of these rights, please contact us at: info@vilasio.com

We will review and respond to your request in accordance with applicable law.

You may also have the right to lodge a complaint with your competent data protection authority if you believe your personal data has been handled unlawfully.

Data Security

We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, destruction, or misuse. These measures may include:

• HTTPS encryption for data transmitted through the Platform
• Access controls limiting internal access to personal data
• Periodic review of data handling practices
• Infrastructure and hosting measures aimed at maintaining system integrity and security

However, no method of transmission over the internet and no method of electronic storage can be guaranteed to be completely secure. While we strive to use commercially reasonable means to protect personal data, we cannot guarantee absolute security.

Children's Privacy

The Platform is intended for adults interested in financial markets and market research.

We do not knowingly collect personal data from individuals under the age of 18. If you believe that personal data of a minor has been provided to us unintentionally, please contact us at info@vilasio.com, and we will take appropriate steps to delete such information where required.

Changes to This Policy

We may update this Privacy Policy from time to time.

When we do, we will revise the "Last updated" date at the top of this page. If material changes are made that affect how personal data is processed, we will seek to communicate them clearly and, where required by law, obtain any necessary consent.

Users are encouraged to review this Privacy Policy periodically.

Contact

For any questions, requests, or concerns regarding this Privacy Policy or the handling of personal data, you may contact us at:

info@vilasio.com

or through the Contact page available on the Platform.