Privacy — QEIv18™ Gold Risk Intelligence

1. Who we are

This website and the QEIv18™ Gold Risk Intelligence service are operated by NeoAmorfic Ltd, a company registered in England and Wales (company number 16108719; registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom). NeoAmorfic Ltd is the data controller for personal data described in this policy. Contact: institutional@neoamorfic.ai.

2. What we collect

We collect only what the service needs:

Enquiries. If you email us, we receive the personal data you include — typically your name, work email address, institution, and the content of your message.
Subscriber accounts. For clients and trial users we hold access credentials: a work email address (used as username), a password stored only as a cryptographic hash, the grant's label, and its expiry. Passwords are never stored in readable form.
Technical logs. Our servers record standard connection information (IP address, timestamp, requested page, browser user-agent) for security, abuse prevention, and service integrity.

We do not collect payment card details through this website. We do not use analytics trackers, advertising cookies, or third-party marketing technologies, and we do not sell or share personal data for marketing.

3. Cookies

The public marketing site (hedge.neoamorfic.ai) sets no cookies. The client area (app.hedge.neoamorfic.ai) sets a single session cookie when you sign in. It is strictly necessary to keep you signed in, is not used for tracking or advertising, and is not shared with any third party. Because it is strictly necessary for a service you request, it does not require consent under UK rules.

4. Why we process data (legal bases)

Performing our contract with subscribers — operating accounts, providing the dashboard and delivery.
Legitimate interests — responding to enquiries, securing our systems, maintaining the tamper-evident audit record, and administering the business.
Legal obligations — where retention or disclosure is required by law.

5. How long we keep it

Enquiry correspondence is kept for as long as needed to handle the enquiry and a reasonable period after. Account records are kept for the subscription term and a reasonable period following expiry or revocation, after which they are deleted or anonymised. Security logs are retained for a short rolling period.

6. Who we share it with

We use a small number of infrastructure providers as processors: website hosting (currently Vercel Inc.), application and data hosting (currently DigitalOcean LLC), and business email (currently Google Workspace). Each processes data on our instructions. We do not share personal data with third parties for their own marketing. Some providers may process data outside the UK; where they do, transfers rely on recognised safeguards such as adequacy decisions or standard contractual clauses.

7. Your rights

Under UK GDPR you may request access to, correction of, or deletion of your personal data; object to or ask us to restrict processing; and request portability where applicable. To exercise any right, email institutional@neoamorfic.ai. You may also complain to the UK Information Commissioner's Office (ico.org.uk).

8. Changes

We will post any material change to this policy on this page with an updated date.

This policy describes the service as currently operated. Questions: institutional@neoamorfic.ai.