Privacy Policy

1. Who is responsible

Fintake LTD, at the address at the bottom of this page, publishes this website and decides what happens to the small amount of data it handles. This notice covers this website only. If you are a client of a broker that runs on Helio, that broker — not us — is responsible for your trading account data, and their own notice applies.

We have not appointed a data protection officer.

2. What this website is

It is a set of static pages. There is no login here, no advertising and no profiling. We use Google Analytics to count page views, which is the one thing here that asks for your consent — see §5. The demo form is the one page that does more than send us a message: it opens a demo trading account for you on the Helio platform — see §6.

3. What we collect

• What you type into the contact or demo form. Your name, your email address, and your message if you write one.
• How you arrived, if you came from a campaign. When a link to this site carries campaign tags (the utm_source-style parameters in the address bar) or an ad click id, we keep those and the site that referred you for the length of your visit, and attach them to your enquiry if you send one. It tells us which of our own posts and ads are worth repeating. It says nothing about you personally, and it is discarded when you close the tab without writing to us.
• Analytics, if you allow it. Page views, roughly where in the world you are, and which links you clicked — see §5.
• Server request logs. Loading any page on the internet means your IP address and browser user-agent reach the server serving it. That is how the web works rather than a choice we made.

We do not ask for, and have no way to receive, payment details, identity documents or trading data through this site.

4. Third parties that see a request

• Google Ireland Limited provides Google Analytics 4, which runs on this site subject to §5. Where it is active, your IP address reaches Google, which uses it to derive an approximate location and then discards it rather than storing it. We have not enabled advertising features, Google Signals or data sharing with other Google products, and we run no ads off the back of it.
• Vercel Inc. hosts this site and serves every page, so it processes the request logs described above on our behalf.
• Resend (Plus Five Five, Inc.) delivers contact-form enquiries to our inbox on our behalf. Your name, email address and message pass through it.
• Links you choose to follow. The WhatsApp and Google Maps links on the contact page hand you over to those services, under their own terms. Nothing is sent to them until you click.

Beyond Google Analytics there is no tag manager, no advertising pixel, no session recording and no A/B testing script. Our typefaces are served from this domain, so opening a page sends no request to Google Fonts.

5. Cookies, analytics and your choice

If you are in the EEA, the UK or Switzerland, Google Analytics stores nothing on your device until you choose “Allow” on the notice at the corner of the page. Until then it reports only an anonymous, cookieless page view that cannot be linked to your other visits. Choose “Allow” and it sets two cookies, _ga and _ga_<id>, which distinguish your browser from another one for up to two years.

You can change your mind whenever you like: Analytics preferences at the bottom of any page reopens the notice, and declining stops the cookies being used from that moment. Deleting cookies in your browser also clears them.

Two things we store on your device without asking, because neither is an identifier and neither is ever sent anywhere:

• Your analytics answer itself, so we do not ask again on every page.
• A sessionStorage entry holding the campaign tags described in §3, and one remembering that you turned off the automatic advance on the homepage video. Closing the tab deletes both.

6. Why we use what you send us

To read your enquiry, reply to it, and follow up about the demo or question you raised. That is the whole purpose. We do not add you to a marketing list on the strength of a contact-form submission, we do not sell or rent your details, and we do not use them to build a profile.

The demo form does one thing more: your email address and name are used to open a demo trading account on the Helio platform, with that address as its login. The IP address the request came from is recorded against that account as an audit and anti-abuse measure. The password is generated for you, shown once on the page and stored only as a hash, so nobody — us included — can read it back. The account is funded with play money and holds nothing beyond that login and whatever you go on to do in the demo. Ask us and we will close it.

Our lawful basis is our legitimate interest in responding to people who contact us about our product, and, where your enquiry is a step towards a commercial arrangement, taking steps at your request before entering into a contract. Server logs rest on our legitimate interest in keeping the site running and secure. Analytics cookies rest on your consent, and on nothing else — which is why declining costs you nothing. The campaign tags in §3 rest on our legitimate interest in knowing which of our own marketing works.

7. How long we keep it

Enquiries are kept for 24 months after our last exchange with you, then deleted — long enough to remember a conversation that resumes a year later, and no longer. Where an enquiry becomes a signed contract, the correspondence is kept for the life of that contract and for as long as Cyprus law requires records to be held afterwards. Server logs are kept for a short operational period by our hosting provider.

You can ask us to delete your enquiry sooner at any time — see “Your rights” below.

8. Your rights

Under EU and Cyprus data protection law you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to our use of it. Email hello@fintake.com and we will handle it. You do not need to give a reason.

If you are not satisfied with how we respond, you can complain to the Cyprus supervisory authority, the Office of the Commissioner for Personal Data Protection.

9. Security

The site is served over HTTPS and enquiries are transmitted encrypted. We keep access to them limited to the people who need to answer them. No general claim beyond that is made here.

10. Changes

The date at the top is when this page last changed. If we change anything material — a new processor, a new purpose, a longer retention period — this page changes with it.

11. Contact