Client documents

Privacy policy

Plain-language summary of what the home-page form collects and how it travels through our systems. The full GDPR-compliant text is downloadable below.

30 days
DSR response
For standard GDPR rights requests.
7 years
AML retention
After account closure where required.
0
data sold
Client data is never sold to brokers or ad networks.
24 mo
marketing data
From last meaningful interaction.

What we collect

Identity data (name, date of birth, nationality), contact data (email, phone, address), financial data needed for the MiFID suitability test, and behavioural data from the trading apps and this website.

Category Examples Purpose
Identity Name, DOB, nationality, document ID KYC and account approval
Contact Email, phone, address Service notices and security alerts
Financial Experience, objectives, source of funds Suitability and AML checks
Usage Device, clicks, session events Security, support, and product improvement

Why we collect it

To open and operate your account (contractual basis), to meet AML and tax-reporting obligations (legal basis), and to improve the experience you saw on the home page (legitimate interest, with opt-out).

Who sees it

Custodians, executing brokers, the Cyprus tax authority, and a small number of vetted processors (cloud hosting, KYC vendor, email delivery). Data is never sold.

Processor controls

Vendors are reviewed before onboarding and bound by data-processing agreements.

Cross-border safeguards

Transfers outside the EEA use adequacy decisions, SCCs, or equivalent safeguards.

Your rights

Access, rectification, erasure, portability, and objection — exercisable from the in-app privacy dashboard or by emailing [email protected]. Response within 30 days.