Privacy Policy
At FinZuro (“FinZuro”, “we”, “us”, or “our”), we are committed to protecting the privacy, security, and confidentiality of your personal information. We take a responsible and transparent approach to how personal information is collected, used, stored, and protected.
This Privacy Policy explains how we handle personal information when you visit our website, create or maintain an account, use our trading services, or communicate with us.
We process personal information in accordance with applicable privacy and data protection laws and apply appropriate safeguards designed to protect your information. Where applicable, this includes the data protection requirements of the British Virgin Islands and other data protection laws that may apply based on your location or our activities.
By using our website or services, you acknowledge that you have read and understood this Privacy Policy. Where required by applicable law, we will obtain your consent before processing your personal information for specific purposes.
1. Information We Collect
Depending on how you interact with us, we may collect the following categories of personal information:
Personal and identification information
- Full name
- Date and place of birth
- Nationality
- Residential and mailing address
- Telephone number
- Email address
- Identification documents
- Proof of address
- Tax identification information
Financial information
- Bank account and payment information
- Source of funds and source of wealth information
- Trading account information
- Transaction and deposit/withdrawal records
- Information concerning your financial circumstances, where required for our services or regulatory obligations
- Information relating to your investment knowledge, experience, objectives, or client classification, where applicable
KYC, AML and compliance information
As a financial services provider, we may collect information necessary to verify your identity and comply with applicable anti-money laundering, counter-terrorist financing, proliferation financing, sanctions, fraud-prevention, and other regulatory requirements.
This may include information relating to politically exposed persons (PEPs), sanctions screening, beneficial ownership, source of funds, source of wealth, adverse media, transaction monitoring, risk assessments, and other information required for compliance purposes.
Where appropriate and permitted by applicable law, we may obtain information from third-party verification, screening, fraud-prevention, sanctions, public-record, or other compliance databases.
Trading, account and transaction information
We may collect information relating to your use of our trading services, including:
- Trading account and account type
- Orders and order history
- Positions and trading history
- Instruments traded
- Deposits, withdrawals, balances and transaction history
- Margin, leverage and other account-related information
- Client classification and account settings
- Information concerning your use of our trading platform
- Records of actions and instructions performed through your account
Communications and support information
We may collect and retain information relating to communications and interactions with us, including:
- Emails and correspondence
- Customer support requests and tickets
- Live-chat communications
- Communications through our website or trading platform
- Telephone calls, where recorded
- Records of requests, instructions and other interactions with us
Technical, device and usage information
When you use our website or online services, we may automatically collect certain technical information, including:
- IP address
- Browser and device information
- Operating system
- Login information
- Website activity and interaction data
- Approximate location derived from IP address
- Device, session and security information
- Authentication information
- Cookies and similar technologies
- Information relating to the security and integrity of your account or device
Where permitted by law, we may also collect information relating to your use of our trading platform and services, including account activity, trading-related information, device information, and activity patterns used for security, fraud prevention, risk management and regulatory purposes.
2. How We Use Your Information
We may use personal information for the following purposes:
- Opening and administering your trading account
- Providing our trading and related services
- Verifying your identity
- Conducting customer due diligence, KYC and AML checks
- Conducting enhanced due diligence where required
- Performing sanctions, PEP and fraud screening
- Monitoring transactions and account activity for financial crime, security and compliance purposes
- Processing deposits, withdrawals and other transactions
- Administering and maintaining your trading account
- Providing customer support
- Communicating with you about your account and our services
- Maintaining the security and integrity of our systems
- Detecting and preventing fraud, financial crime, market abuse, unauthorized activity and other prohibited activity
- Assessing and managing risks associated with our clients, accounts and services
- Meeting legal, regulatory, accounting, tax and reporting obligations
- Maintaining appropriate business, financial, compliance and transaction records
- Improving our website, platforms, products, and services
- Understanding how our website and services are used
- Sending marketing or promotional communications where permitted and, where required, with your consent
- Protecting our legal rights and enforcing our agreements
- Responding to lawful requests from regulators, courts, law enforcement agencies, tax authorities, financial intelligence authorities, and other competent authorities
We will only use personal information for purposes that are compatible with applicable law.
3. Legal Basis for Processing
Where data protection laws such as the EU General Data Protection Regulation (GDPR) apply, we process personal information on one or more of the following legal bases:
Contract
We may process information where it is necessary to provide our services, establish or maintain your trading account, process transactions, or perform our contractual obligations to you.
Legal and regulatory obligations
We may process information where necessary to comply with applicable laws and regulatory requirements, including KYC, AML, sanctions, financial crime prevention, tax, accounting, record-keeping, reporting, regulatory supervision and information-sharing obligations.
This may include processing information obtained or generated as part of customer due diligence, enhanced due diligence, sanctions screening, transaction monitoring and other compliance activities.
Legitimate interests
We may process information where necessary for our legitimate interests, provided those interests are not overridden by your rights and interests. This may include maintaining security, preventing fraud and financial crime, protecting our systems and clients, improving our services, managing our business, conducting risk management, and protecting our legal rights.
Consent
Where required by applicable law, we will request your consent before processing information for specific purposes, such as certain forms of marketing or non-essential cookies.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
4. Sharing Personal Information
We may share personal information where necessary to provide our services, meet our legal or regulatory obligations, protect our legitimate interests, or operate our business.
Recipients may include:
- Payment providers and financial institutions
- Identity verification and KYC providers
- Fraud prevention, sanctions and screening providers
- Technology, hosting, cloud, cybersecurity and IT service providers
- Trading platform, software and infrastructure providers
- Customer relationship management and communications providers
- Professional advisers, auditors, and legal advisers
- Regulators, financial intelligence authorities and government authorities
- Courts, law enforcement agencies, tax authorities and other competent authorities
- Other service providers acting on our behalf
Depending on the circumstances, third parties may process personal information either on our behalf as service providers or independently for their own lawful purposes. Where third parties process personal information on our behalf, we take reasonable steps to ensure that they are required to protect the information and process it only for authorized purposes.
We may also disclose personal information where necessary to comply with applicable laws, regulatory requirements, court orders, lawful requests, or requirements relating to the prevention, detection or investigation of financial crime.
We do not sell your personal information.
5. International Transfers
Because we operate in an international environment and may work with service providers and business partners located in different countries, your personal information may be transferred to or processed in countries outside your country of residence or outside the British Virgin Islands.
Such countries may include countries in which our technology, hosting, payment, identity verification, fraud prevention, communications, trading platform or other service providers operate.
Where applicable data protection laws impose requirements on international transfers, we will take appropriate measures to protect your information. Depending on the circumstances, these may include an adequacy decision, contractual safeguards such as Standard Contractual Clauses, other legally recognized contractual or regulatory safeguards, or other lawful transfer mechanisms.
You may contact us using the details below if you would like further information about applicable safeguards for an international transfer.
6. Data Retention
We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy and in accordance with applicable legal, regulatory and business requirements.
The period for which information is retained depends on factors including:
- The nature and purpose of the information
- Whether you maintain an account with us
- The duration of our business relationship with you
- Applicable KYC, AML, sanctions and financial crime requirements
- Financial and regulatory record-keeping requirements
- Tax and accounting obligations
- Transaction and trading record requirements
- The nature of any legal, regulatory or compliance matter
- The need to establish, exercise, or defend legal claims
- Our legitimate business, security and fraud-prevention requirements
Different categories of information may therefore be retained for different periods.
For example, information collected as part of customer due diligence, transaction monitoring, account administration, trading activity and regulatory compliance may need to be retained for longer periods than routine website or marketing information.
Even after you close your account, we may be required to retain certain information for a period of time to comply with legal and regulatory obligations, prevent financial crime, resolve disputes, or establish, exercise or defend legal claims.
When personal information is no longer required, we will take reasonable steps to securely delete or anonymize it, subject to applicable legal and regulatory requirements.
7. Cookies and Similar Technologies
Our website may use cookies and similar technologies to operate correctly, maintain security, remember preferences, understand website usage, and improve our services.
These technologies may include:
- Strictly necessary cookies required for website functionality and security
- Preference cookies used to remember settings
- Analytics cookies used to understand website performance and usage
- Marketing cookies used, where applicable, to support advertising and promotional activities
- Security, fraud-prevention and authentication technologies used to protect our website, services and users
Where required by applicable law, we will request your consent before placing or using non-essential cookies.
You can manage cookies through your browser settings and, where available, through our cookie-consent tools. Disabling certain cookies may affect the functionality of our website.
Further information about the cookies and similar technologies we use may be provided in our Cookie Policy.
8. Marketing Communications
We may send you information about our services, products, educational materials, events, or promotions where permitted by applicable law.
Where consent is required, we will obtain it before sending marketing communications.
We may use information such as your contact details, account status, preferences and interactions with our services to manage our communications with you, subject to applicable law.
You can unsubscribe from marketing communications at any time by using the unsubscribe option included in the communication or by contacting us.
Please note that you may still receive essential communications relating to your trading account, transactions, security, regulatory requirements, or our services.
9. Your Privacy Rights
Depending on your location and applicable law, you may have rights regarding your personal information.
These may include the right to:
- Request access to personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of personal information, where legally permitted
- Request restriction of processing in certain circumstances
- Object to certain processing activities
- Request portability of certain personal information
- Withdraw consent where processing is based on consent
- Opt out of certain marketing communications
- Lodge a complaint with the relevant data protection or supervisory authority
These rights are subject to applicable legal and regulatory limitations. For example, we may be required to retain certain information even where you request its deletion, or we may be permitted or required to continue processing information for regulatory, AML/CFT, fraud-prevention or legal purposes.
To exercise a privacy right, please contact us using the details provided below. We may need to verify your identity before processing your request.
10. Automated Decision-Making and Profiling
We may use automated systems and screening tools as part of identity verification, fraud prevention, sanctions screening, security monitoring, risk management, transaction monitoring, and regulatory compliance.
These systems may generate risk indicators, alerts, screening results or other assessments that may be used to identify activity requiring further review or action.
Depending on the circumstances, automated processing may contribute to decisions concerning account verification, account access, transactions, security measures, or compliance reviews.
Where applicable law gives you specific rights regarding automated decision-making or profiling, we will provide the information and safeguards required by that law, including any applicable rights to request human intervention, challenge a decision, or obtain further information about the processing.
We do not use personal information to make decisions about you in ways that are prohibited by applicable law.
11. Security
We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.
These measures may include access controls, authentication procedures, encryption or other security technologies, monitoring, logging, security testing, and internal security procedures.
We also take reasonable steps to limit access to personal information to persons and service providers who require such access for legitimate business, contractual, legal, regulatory or security purposes.
However, no method of transmitting or storing information can be guaranteed to be completely secure. You are also responsible for keeping your account credentials and authentication information confidential and notifying us promptly of any suspected unauthorized access.
12. Children's Privacy
Our services are intended for adults and are not directed toward children.
We do not knowingly collect personal information from individuals who are not legally permitted to use our services.
If you believe that a child has provided personal information to us, please contact us so that we can investigate and take appropriate action.
13. Third-Party Websites and Services
Our website or services may contain links to third-party websites, platforms, or services.
We are not responsible for the privacy practices, content, or security of third-party websites. We recommend reviewing the privacy policies of those third parties before providing them with personal information.
Where we integrate third-party services into our website or trading services, those providers may process personal information in accordance with their own privacy notices and applicable contractual arrangements.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or regulatory obligations.
When we make changes, we will update the "Last updated" date at the top of this Privacy Policy.
Where required by law, we will provide additional notice or obtain consent before material changes take effect.
15. Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we process your personal information, please contact us:
Email: support@finzuro.com
For privacy-related requests, please include sufficient information for us to identify your account and understand your request. We may request additional information to verify your identity where required for security purposes.
This Privacy Policy should be read together with FinZuro's Terms and Conditions, Risk Disclosure, Cookie Policy, and other applicable client documentation.