Your data, on the desk.
Never on the market.
What we collect
To operate the academy, run cohort applications, and provide access to the private terminal we collect the following:
- Identity: Name, email, country of residence, and any information you choose to share in your application.
- Trading profile: Self-reported experience tier, capital range, and asset focus — used solely to place you in the right cohort.
- Session data: Encrypted device fingerprint, IP region (not address), and login timestamps. Sessions are locked to one device by default.
- Performance audit: If you are a member, your broker statement extracts (read-only) are used for the Tracked AUM programme. Your name is never published without explicit consent.
What we do not collect
- We do not collect, store, or transmit your trading credentials. Ever.
- We do not sell or share your data with third-party marketers.
- We do not run any analytics scripts on the public site without your consent (see Cookies below).
Cookies & consent
The first time you visit the site, you'll see a consent prompt with three categories:
- Essential — required for the site to function (e.g. remembering your consent choice). Always on.
- Analytics — anonymous cohort metrics that help us improve the curriculum. Off by default.
- Marketing — personalised cohort offers and partner introductions. Off by default.
You can change your choice at any time. We store your preference locally on your device, not on our servers.
How we store it
All identity data is held in EU-Central-1 (Zurich primary, Frankfurt failover), encrypted at rest with AES-256, and accessible only to senior mentors and our compliance officer. All connections use TLS 1.3.
Broker statement extracts are kept for the duration of your membership plus 12 months for audit purposes, then permanently destroyed.
Your rights
- Access: Request a copy of everything we hold on you. We respond within 14 days.
- Correction: Update any field that's out of date.
- Deletion: Request full erasure. We comply within 30 days unless legally required to retain.
- Portability: Receive your data in a structured, machine-readable format.
To exercise any of these rights, write to privacy@ornate.academy.
Data Protection Officer
Our DPO can be reached at dpo@ornate.academy. Postal: Ornate Capital Education AG, Bahnhofstrasse 21, 8001 Zürich, Switzerland.