Privacy Policy

1. Who we are

Aurum Desk ("we", "us") operates the website aurumdesk.co.uk, a subscription service providing automated trading signals for Gold and Bitcoin. We are the controller of the personal data described in this policy.

You can contact us about anything in this policy at support@aurumdesk.co.uk.

2. What data we collect

Account data: your email address and a securely hashed password (we never see or store your actual password), created when you sign up.

Login metadata: the country you sign in from, recorded when you log in. This helps us understand where our members are and detect unusual access.

Subscription data: your plan status, access start and end dates, and which promo codes you have redeemed. Payments are processed by Stripe; we receive payment status only and never see your full card details.

Usage data: which robots and pages you view, and basic technical logs (such as browser type) needed to run and secure the Service.

Telegram data: your Telegram user identity when you use a personal join link, so we can add you to the right private channel and remove you when your access expires.

3. Why we use your data

To create and secure your account, and let you sign in (contract with you).

To manage your subscription, payments, promo codes and Telegram channel access (contract with you).

To keep the Service secure, prevent abuse, and keep records of payments (legitimate interests and legal obligations).

To understand how the Service is used so we can improve it (legitimate interests).

We do not sell your personal data, and we do not use it for third-party advertising.

4. Who we share data with

We only share data with providers needed to run the Service:

Authentication and database hosting — our cloud backend provider stores account and usage data on our behalf.

Payments — Stripe processes card payments. Stripe acts as controller of its own payment data under its own privacy policy.

Telegram — if you join our channels, your Telegram identity is visible within that channel context.

We may also disclose data where required by law, or to protect our rights and security.

5. Cookies and storage

We keep the Service lightweight: we use essential browser storage (local storage and cookies) to keep you signed in and remember small preferences such as an applied promo code. We do not use advertising or third-party tracking cookies.

6. How long we keep data

Account and subscription data are kept while your account is active. If you cancel, access data is kept for as long as needed to administer the subscription and meet tax and accounting rules (typically up to 6 years for payment records).

Login metadata and usage logs are kept for up to 12 months. You can ask us to delete your account data at any time — see section 8.

7. Where data is stored

Your data is stored on our cloud backend provider's infrastructure, which may be located outside the UK. Where data is transferred internationally, it is protected by the provider's recognised transfer safeguards and security measures.

8. Your rights

Under UK GDPR you have the right to: access the personal data we hold about you; correct inaccurate data; delete your data ("right to be forgotten"); restrict or object to processing; and receive a copy of your data in a portable format.

To exercise any right, email support@aurumdesk.co.uk. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how we handle your data.

9. Security

Passwords are stored only as secure hashes, access to member data is restricted by strict database rules, and administrative actions are limited to authorised operators. No online service can promise perfect security, but we take protecting your data seriously and act quickly on any incident.

10. Changes to this policy

We may update this policy as the Service evolves. The current version is always on this page, with the last updated date at the top.