1. Who we are
MDL FINTECH LTD operates MDL FinTech / Market Decision Lab and is responsible for the personal information described in this Privacy Policy. MDL FINTECH LTD is registered in England and Wales under company number 16590003.
This policy covers personal information handled through the public website, registration, customer accounts, limited trial access, paid membership, support, service communications and optional connected trading-account features.
2. Information we collect
Depending on the feature used, MDL may collect identity, contact and profile information such as first name, family name, email address, mobile number, country, preferred language, referral or partner code, legal-consent records and optional profile fields such as gender or date of birth where those fields are provided or required by the applicable workflow.
Account and security information may include protected login credentials, account status and entitlement state, verification records, device or browser information, IP or network information, security logs and other records reasonably required to authenticate, secure and administer the account.
Subscription and payment records may include Stripe customer or subscription identifiers, billing status, invoice or payment-event status, price or promotional eligibility and related accounting records. Payment-card entry is handled through Stripe's payment service; MDL does not intentionally store a customer's full card number in the MDL application.
3. Connected trading-account information
If a customer chooses to connect a supported trading account, MDL may process account and broker metadata and trading information made available through the connection, such as broker/server details, account identifiers, account status, balance or equity information, open positions or orders and trading-history information where those data are required for the selected MDL feature.
MDL uses that information to provide features such as trading-history analysis, account context, risk analysis, monitoring and related decision support. The normal customer MT5 pairing flow does not accept or store the customer's MT5 password.
3A. Private Scanner / Strategy Lab information
If a customer uses Build Your Own Scanner, MDL may process the customer's scanner instructions, structured rules, versions, research questions, historical-test inputs and outputs, reports, live rule-match records and related audit history. These records are kept within the customer's private MDL workspace and are used to provide, secure, support and maintain the requested Scanner Lab service.
Authorised MDL staff may access private Scanner Lab records where reasonably necessary for service operation, support, security, research quality and compliance. MDL may also use aggregated or appropriately de-identified scanner performance information to improve research and product quality. MDL will not intentionally publish, commercialise or incorporate the exact user-authored private strategy or rule set as an MDL-wide strategy without a separate recorded consent or agreement that specifically covers that use.
4. How we use personal information
- To receive, verify and manage customer registrations and accounts.
- To provide and enforce limited trial or paid membership entitlements.
- To provide requested market-research, account-analysis, trading-history and decision-support features.
- To process subscription status, billing events and customer-service requests.
- To send account, security, billing and service communications.
- To send optional product or marketing communications where the required permission or other lawful basis applies.
- To prevent duplicate trials, abuse, fraud and unauthorised access and to protect MDL systems, users and business operations.
- To improve service reliability, security, research quality and product functionality using appropriate operational or aggregated information.
- To comply with applicable legal, accounting and regulatory obligations.
5. Legal bases for processing
The legal basis depends on the activity. MDL may process personal information where this is necessary to take steps at a customer's request before entering into a contract or to perform a contract where an account, trial or paid service relationship exists.
MDL may also rely on legitimate interests where reasonably necessary to operate, secure and improve the service, prevent abuse, maintain accurate customer and entitlement records and administer the business, provided those interests are not overridden by the rights and interests of the individual.
Processing may also be required to comply with a legal obligation. Where consent is specifically requested, such as for optional marketing or non-essential tracking where consent is required, consent is the applicable basis for that activity and may be withdrawn as permitted by law.
6. Required and optional information
Some information is required to create or secure an account, prevent duplicate or abusive registrations, provide a requested feature, establish payment status or meet legal obligations. If required information is not provided, MDL may be unable to provide the relevant account, trial, membership or connected-account feature.
Fields identified as optional are not required for the core service unless the customer later chooses a feature for which the information becomes necessary.
7. Communications
Account, security, billing and service communications are separate from optional marketing. Declining optional marketing does not prevent MDL from sending communications reasonably necessary to register, authenticate, secure, bill, administer or support an account or service.
8. Service providers and disclosures
MDL may use selected providers for cloud hosting, infrastructure, communications, security, data storage, payment processing, market data, customer support or professional services where reasonably necessary to operate the service. Providers receive only the access reasonably required for their role and are subject to the applicable contractual and legal controls.
Information may also be disclosed where required by law, regulation, court order or where reasonably necessary to establish, exercise or defend legal rights or protect systems and users.
MDL does not sell personal information to advertisers.
9. International processing
Some service providers may process personal information outside the United Kingdom. Where applicable, MDL will use an appropriate legal mechanism or safeguard for international transfers as required by applicable data-protection law. Information about relevant transfer safeguards may be requested through the contact address below.
10. Retention
MDL retains personal information only for as long as reasonably necessary for the purpose for which it was collected or for a related legal, security, accounting, fraud-prevention or dispute- resolution requirement.
Retention criteria include whether an account or service relationship exists, whether a trial or subscription has expired, security and duplicate-prevention needs, legal or accounting requirements, applicable limitation periods and the need to establish, exercise or defend legal rights. Information that is no longer required will be deleted, anonymised or otherwise handled in accordance with applicable requirements.
11. Browser storage, cookies and diagnostics
MDL may use browser storage, cookies or similar technologies for necessary functions such as language preference, authentication, security, account continuity, performance and service diagnostics.
Where applicable law requires consent for non-essential analytics, advertising or similar tracking, MDL will seek the required consent before activating that processing for the user.
12. Your rights
Subject to applicable law and the relevant processing basis, you may have rights including access, correction, erasure, restriction, objection, portability and withdrawal of consent. Some rights depend on the circumstances and may be subject to legal conditions or exemptions.
Where processing is based on consent, you may withdraw that consent as permitted by law. Where the right to object applies, you may ask MDL to stop or reconsider the relevant processing, subject to the applicable legal grounds.
You also have the right to raise a complaint with the UK Information Commissioner's Office if you are concerned about how your personal information has been handled.
13. Security
MDL uses technical and organisational measures designed to protect personal information according to the nature of the information and the risks involved. Security controls include authentication, access-control, credential-separation and audit measures appropriate to the relevant MDL service component.
No internet, communication or storage system can be guaranteed to be completely secure.
14. Automated analysis
MDL uses automated analytical systems to generate market research, trading-history analysis, account context and decision-support outputs. Those outputs are intended to support the user's own decisions; they do not by themselves execute a customer's live trade or make a legally binding financial decision for the customer.
15. Changes to this Privacy Policy
MDL may update this Privacy Policy where the service, data flows, providers, legal requirements or product scope changes. The current version and effective date will be shown on this page.
16. Contact
Privacy questions, rights requests or requests for information about relevant international-transfer safeguards may be sent to support@mdl-fintech.co.uk .