Privacy Policy

Nexus Capital & Investments ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it.

This policy applies to visitors to our website, prospective and existing trading clients, and purchasers of software products we develop or recommend. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Data Controller: Nexus Capital & Investments

For data protection enquiries please use the contact details at the bottom of this page.

2. Data We Collect

What we collect depends on how you interact with us. The categories of data we may collect include:

Category	Examples	Source
Identity & contact data	Name, email address	Provided by you when you contact us or discuss connecting an account
Trading account data	Account balance, equity, trade history on a connected account	Visible to us through the copy-trading connection (Standard Connection) or the account itself (Bespoke), solely to operate the service and calculate fees
Trading credentials	MT4/5 trading password (Bespoke Managed Accounts only)	Provided by you, to apply algorithms directly to your account. This is your trading password only, never your broker portal or personal account login
Site analytics data	Aggregated, non-identifying page-view statistics	Collected automatically by Cloudflare Web Analytics — see Section 5
Communications data	Emails and enquiries you send us	Provided by you when contacting us

We do not collect or store payment card, bank, or broker-portal login details under any circumstances. Where a purchase is involved, payment is handled entirely by the relevant third-party marketplace — see Section 4.

We do not collect any special category data (as defined by UK GDPR, Article 9) and do not knowingly collect data from individuals under the age of 18.

3. How We Use Your Data

We process your personal data on the following legal bases and for the following purposes:

Purpose	Legal Basis
Discussing and setting up a Standard Connection or Bespoke Managed Account	Performance of a contract / Steps prior to entering a contract (UK GDPR Art. 6(1)(b))
Operating a connected account and calculating performance fees	Performance of a contract (UK GDPR Art. 6(1)(b))
Responding to enquiries and support requests	Performance of a contract / Legitimate interests
Maintaining records for legal and tax compliance	Legal obligation (UK GDPR Art. 6(1)(c))
Understanding aggregate website usage to improve the site	Legitimate interests (UK GDPR Art. 6(1)(f)) — no individual is identified

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We do not use your data for automated decision-making or profiling.

4. Third-Party Service Providers

We share data with the following third parties only to the extent necessary to provide our services:

Your broker (currently IC Markets or Vantage Markets) — holds your trading account and funds directly. Your relationship with your broker, and any data you provide them, is governed by their own privacy policy, not ours.
Cloudflare — provides Cloudflare Web Analytics, a privacy-first analytics service that does not use cookies or collect personally identifying information. See Cloudflare's privacy policy at cloudflare.com/privacypolicy.
MQL5 Market (MetaQuotes) — if you purchase Quant Panel, your payment and account data is collected and processed entirely by MQL5, under their own privacy policy. We do not receive your payment details.
Gumroad / Bastian Parada — if you purchase BPFX Suite through the affiliate link on our site, your payment and account data is collected and processed entirely by Gumroad and the seller, Bastian Parada, under their own privacy policies. We do not receive your payment details, only anonymised confirmation that a qualifying purchase occurred, for commission purposes.
GitHub Pages — hosting of this website. No personal data is submitted to GitHub through use of our public website.
Google Fonts — font delivery. Google may log the IP address of your request. See Google's privacy policy at policies.google.com/privacy.

All third-party processors are required to process your data only on our instructions and in accordance with applicable data protection law.

5. Cookies & Analytics

We do not use cookies for tracking, advertising, or profiling. We do not use Google Analytics, Facebook Pixel, or any third-party advertising.

We use Cloudflare Web Analytics to understand how many people visit our site and which pages they read. It is built to be privacy-first: it does not use cookies, does not track you across other websites, and does not collect any information that identifies you personally. It only produces aggregate statistics, such as total page views.

If you follow a link to a third-party marketplace (MQL5, Gumroad) to make a purchase, that site's own cookie policy applies from the point you land on it, not ours.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

Trading credentials (Bespoke accounts) — retained only while your account remains connected, and deleted promptly once you disconnect
Client and fee records — retained for 7 years to comply with UK tax and accounting obligations
Communications — retained for up to 2 years after resolution
Site analytics data — held only in aggregate form and not tied to an individual

When data is no longer required it will be securely deleted or anonymised.

7. Your Rights Under UK GDPR

As a UK data subject you have the following rights in relation to your personal data:

Right of access — request a copy of the personal data we hold about you
Right to rectification — request correction of inaccurate data
Right to erasure — request deletion of your data where there is no overriding legal basis for retention
Right to restrict processing — request that we limit how we use your data in certain circumstances
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interests
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us using the details below. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data lawfully.

8. Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, or destruction. Our website is served over HTTPS and payment processing is handled by PCI-compliant third parties.

No method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically. Significant changes will be communicated by email where we hold your contact details.