Privacy Policy

{{LEGAL_DRAFT}} — Full defined-terms list pending counsel review. Will define: personal data, processing, data controller, data processor, data subject, special category data, and supervisory authority — consistent with UK GDPR and DPA 2018 terminology.

{{LEGAL_DRAFT}} — Data-controller details pending counsel review. Will identify the legal entity acting as controller, its registered address, ICO registration number, and the Data Protection Officer or privacy contact.

{{LEGAL_DRAFT}} — Data-categories detail pending counsel review. Will cover: identity and contact details, KYC documents, financial and transaction data, device and usage data, and communications, with the source of each category. Principle: we collect the minimum required to operate as a regulated broker.

{{LEGAL_DRAFT}} — Purposes of processing pending counsel review. Will cover: account administration, trade execution and reporting, KYC/AML compliance, fraud prevention, customer support, and service communications. We do not sell personal data or share it for third-party advertising.

{{LEGAL_DRAFT}} — Lawful-basis mapping pending counsel review. Will map each purpose to a lawful basis: contract (account services), legal obligation (AML/KYC, reporting), legitimate interests (fraud prevention, service improvement), and consent (optional marketing), with the legitimate-interests balancing test recorded.

{{LEGAL_DRAFT}} — Data-sharing terms pending counsel review. Will cover: technology and payment processors, the liquidity/white-label partner, regulators and law enforcement where legally required, and the contractual safeguards imposed on each. We do not share data for advertising.

{{LEGAL_DRAFT}} — International-transfer terms pending counsel review. Will cover: the countries data may be transferred to, the transfer mechanisms used (adequacy decisions, International Data Transfer Agreement, or appropriate safeguards), and how the Client can obtain a copy of the safeguards.

{{LEGAL_DRAFT}} — Retention schedule pending counsel review. Will cover: retention periods by data category, the regulatory minimums (e.g. AML record-keeping), and deletion or anonymization once the period ends. Principle: we delete personal data when you ask, except where law requires us to keep it.

{{LEGAL_DRAFT}} — Data-subject rights detail pending counsel review. Will cover: access, rectification, erasure, restriction, portability, objection, and rights relating to automated decision-making — with how to make a request, our response timeline (one month), and any limits where law requires retention.

{{LEGAL_DRAFT}} — Cookie policy pending counsel review. Will cover: strictly necessary, functional, and analytics cookies, the consent mechanism, retention per cookie, and how to manage preferences. Will align with the cookie banner implemented at launch.

{{LEGAL_DRAFT}} — Children's-privacy terms pending counsel review. Will confirm the minimum age to hold an account, that Services are not offered to minors, and the steps taken if data from a minor is identified.

{{LEGAL_DRAFT}} — Change-notification terms pending counsel review. Will cover: how changes are published, notice for material changes, effective dates, and version history.

{{LEGAL_DRAFT}} — Contact and complaint details pending counsel review. Will include: privacy contact (compliance@tfcglobalmarkets.com), the right to complain to the ICO, and the ICO's contact details (Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; ico.org.uk).