Data Protection & Compliance

1. Purpose

Lucan Capital is committed to protecting personal data and maintaining compliance with UK GDPR, the Data Protection Act 2018, and applicable regulations.

2. Scope

This policy applies to employees, contractors, subscribers, community members, and users of Lucan Capital services.

3. Data Protection Principles

Lucan Capital follows the following data protection principles:

4. Categories of Data Collected

The following categories of data may be collected:

• Personal information — name, email address, account credentials
• Trading information — trade logs, journal entries, performance data
• Behavioural information — psychology check-ins, platform usage patterns
• Educational information — learning progress, course activity
• Technical information — IP address, device type, browser data, session logs

5. Lawful Basis for Processing

Information is processed under the following lawful bases:

• Contractual necessity — to deliver subscribed services
• Legitimate interests — platform security, improvement, fraud prevention
• Consent — where you have provided explicit consent
• Legal obligations — compliance with applicable laws and regulations

6. Data Security

Appropriate technical and organisational measures are implemented to protect personal information, including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Row-Level Security on all database tables
• Access controls and authentication via Clerk
• Regular security reviews and monitoring

7. Third-Party Providers

Lucan Capital may use the following categories of third-party providers:

All third-party providers are bound by appropriate data processing agreements and safeguards.

8. AI Systems

AI-generated outputs are educational only and should not be interpreted as financial advice. Users must apply independent judgement to all AI-generated content.

9. User Rights

Users may exercise the following rights under UK GDPR:

• Access — request a copy of personal data held
• Rectification — request correction of inaccurate data
• Erasure — request deletion of personal data
• Restriction — request restriction of processing
• Objection — object to processing based on legitimate interests
• Portability — receive data in a machine-readable format
• Withdrawal of consent — withdraw consent at any time

To exercise any right, contact support@lucancapital.io.

10. Data Retention

Information is retained only for as long as necessary to provide services and meet legal obligations. Upon account deletion, personal data is removed within 30 days except where retention is required by law.

11. Data Breaches

Lucan Capital will investigate, contain, and respond appropriately to suspected or confirmed data breaches. Where required, affected users and the Information Commissioner's Office (ICO) will be notified within 72 hours of becoming aware of a breach, in accordance with UK GDPR Article 33.

12. Contact Information

Lucan Capital
Website: https://lucancapital.io
Email: support@lucancapital.io