Data Controller

Fire Investment S.r.l.
Brand: IllumyFi
Address: Fire Investment S.r.l., Italy
Email: privacy@illumyfi.com

Our Data Protection Officer (DPO) can be reached at privacy@illumyfi.com.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent (Art. 6(1)(a) GDPR / Art. 6(1)(a) UK GDPR): For marketing communications, newsletters, and optional analytics. Consent can be withdrawn at any time.
• Contract Performance (Art. 6(1)(b) GDPR / UK GDPR): To provide financial news services and portfolio management tools.
• Legal Obligation (Art. 6(1)(c) GDPR / UK GDPR): To comply with legal requirements applicable to financial services (MiFID II for the EU; FCA rules for the UK).
• Legitimate Interest (Art. 6(1)(f) GDPR / UK GDPR): For platform security, fraud prevention, and service improvement.

Information We Collect

We collect information that you provide directly or that is generated by use of the service:

• Identity: first name, last name, email address, username
• Authentication: password (stored in encrypted form, never in plain text)
• Financial data: portfolio data, market preferences, sectors of interest
• Technical data: IP address, device type, browser information (used for security and abuse prevention)
• Usage data: pages visited, searches performed, time spent on the service
• Consent records: timestamp and IP address at the time of acceptance of our policies, as required by Art. 7 GDPR / UK GDPR

Where We Store Your Data

We protect your data from a geographical processing standpoint as well:

• Data of users in the European Union and EEA is stored and processed exclusively within the EU/EEA.
• Data of users in the United Kingdom is stored and processed exclusively within the United Kingdom.

Data Retention

Your Rights

Under GDPR (for EU users) and UK GDPR (for UK users), you have the right to:

• Access: Request a copy of your personal data that we process.
• Rectification: Correct inaccurate or incomplete information.
• Erasure (Right to be Forgotten): Request deletion of your data, subject to legal retention requirements.
• Restriction of Processing: Request that we limit how we use your data.
• Data Portability: Receive your data in a structured, commonly used, machine-readable format.
• Withdraw Consent: Withdraw consent for optional processing (marketing, newsletters, analytics) at any time, without affecting prior lawful processing.
• Object: Object to processing based on legitimate interests.
• Complaint: Lodge a complaint with the competent Data Protection Authority.

Data Protection Authorities

You have the right to lodge a complaint with the competent supervisory authority based on your residence:

European Union users:
Garante per la Protezione dei Dati Personali
🌐 www.garanteprivacy.it

United Kingdom users:
Information Commissioner's Office (ICO)
🌐 www.ico.org.uk

We encourage you to contact us first at privacy@illumyfi.com with any concern or complaint: we will do our best to resolve the issue directly.

Data Security

We adopt appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction, or disclosure, including password encryption, restricted access controls, and security monitoring.

Changes to This Policy

We may update this Policy periodically. In the event of material changes, we will notify you by email or by a prominent notice on the website before the changes take effect. The version date at the top of this document indicates the latest revision.