Privacy Policy

Last updated: 12 November 2026.

1. Who we are

MGFX, a business based in the United Kingdom ("MGFX", "we", "us" or "our"), is the controller of personal data collected through the Sites. This Policy covers https://mgfx.uk and our related sites at dax, nasdaq, bitcoin and chat on the mgfx.uk domain, and their copies on the mgfxltd.workers.dev domain, including the AI chat assistant (together, the "Sites").

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you visit from the EU or EEA, the EU GDPR may also apply to you.

2. Data we collect

Enquiries. The contact form on our website collects your name, email address and project details and, optionally, the service you are interested in, and sends your enquiry to our team by email through Cloudflare. You can alternatively use our Google Form, which collects the same details. An enquiry through the AI chat collects the same core details, plus the site and language you were using. Please do not include passwords or sensitive information.

AI chat messages. Your messages, and a short recent history needed for context, are sent to an automated model to generate a reply. We do not store chat-message content on our own systems after the reply is returned. A short transcript may remain in your browser's session storage until the session ends. A chat enquiry may include questions you already typed.

Technical and security data. Cloudflare, our hosting provider, processes standard request data (which may include IP address, time, requested address, referrer and browser type) to deliver and protect the Sites. For the chat, we use a hashed form of your IP address for daily rate limits, reset each day, and may record limited metadata (site, language, model and usage volume) without the message text.

Information stored on your device. We do not use first-party analytics or advertising cookies, and our own code does not set tracking cookies. Language, chart settings, a short chat transcript, or a Bitcoin Pulse market-data cache may be stored in your browser only and can be deleted in your settings.

Third-party features. Services used or linked from the Sites may receive technical data, including your IP address, and may set their own cookies under their own policies. These include Google (the alternative contact form and web fonts), Cloudflare (hosting, security and the chat model), TradingView, FearGreedChart, CoinGecko, providers such as Binance or Hyperliquid when your browser requests data as a fallback, and links to YouTube, TikTok and other sites. Thumbnails on our website are hosted by us.

3. How we use data and our legal bases

We use personal data to respond to enquiries and discuss a possible project (UK GDPR Article 6(1)(b), steps at your request before a contract, and/or Article 6(1)(f), legitimate interests); to operate the AI assistant (legitimate interests, and a service you choose to use); to host and secure the Sites, prevent abuse and apply rate limits (legitimate interests); and to comply with a legal obligation where one applies (Article 6(1)(c)). We do not sell your personal data or use it for automated decisions with legal or similarly significant effects.

4. How long we keep data

Enquiry emails and records in our Google Form are kept as long as needed to handle your request and for a reasonable period afterwards, unless the law requires longer. Chat message content is not retained on our servers. Rate-limit counters are reset daily. Hosting and security logs are kept only for a limited period in line with our providers' practices. Browser-only data remains until you clear it or the session ends.

5. Sharing and international transfers

We use providers who process personal data for us, in particular Google, which hosts the alternative Google Form and stores its responses, and Cloudflare, which hosts the Sites, delivers contact form messages by email, applies security measures, and processes chat messages in Workers AI to generate replies. Those providers, and the third-party services described above, may process data in the UK, the EEA, the United States or other countries. Where personal data is transferred out of the UK, we rely on a lawful mechanism, which may include a UK adequacy regulation, the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or another tool permitted under UK law. We do not control how independent websites you visit use your data.

6. Security

We take reasonable measures to protect personal data, including HTTPS, origin checks on chat requests, rate limits, and access limited to people who need it to handle enquiries. No method of transmission or storage is completely secure.

7. Your rights

Under UK data protection law you may have the right to request access, correction, erasure, restriction or objection, data portability, and to withdraw consent where processing is based on consent. These rights are not absolute. To exercise them, please use the contact form. We may need to confirm your identity, for example from the email address used. You also have the right to complain to the UK Information Commissioner's Office (ICO) at https://ico.org.uk If you are in the EU or EEA, you may also complain to your local supervisory authority.

8. Children and changes

The Sites are intended for adults and are not directed at children. We may update this Policy from time to time and will post the revised version on the Sites with a new date.

9. Contact

Please contact us using the form at https://mgfx.uk/#contact