Privacy Policy

This policy explains what personal information PENDING: registered company name, trading as Prime FX, collects about you, why we collect it, who we share it with, and what you can ask us to do with it. It applies to this website, to our trading platform, and to any contact you have with our staff or with an agent acting for us.

The entity responsible for your information — the data controller — is the Prime FX entity that holds your account, named in your account opening confirmation. You can reach us at PENDING: privacy email or at PENDING: registered address.

Information you give us

• Registration details — name, email address, phone number, password, and the deposit amount you tell us you intend to fund.
• Verification documents — government-issued identification, date of birth, nationality, proof of residential address, and, where the law requires it, information about your source of funds and your employment.
• Financial and suitability information — payment details, trading experience, and any answers you give in an appropriateness assessment.
• Correspondence — what you write or say to us in emails, chats, support tickets and calls.

Information we collect automatically

• Technical data — IP address, approximate location derived from it, device and browser type, operating system, and language.
• Usage data — pages visited, features used, session times, and the trading activity recorded on your account.
• Cookies and similar technologies — see section 4.

Information from others

• Identity and sanctions screening providers, who confirm your documents and check you against sanctions, politically-exposed-person and adverse-media lists.
• Payment providers and banks, who confirm that a payment came from an account in your name.
• Introducing agents, where you reached us through a referral link or were introduced by an agent working with us.

• To open and operate your account — set up your profile, execute orders, process deposits and withdrawals, and produce your statements. Basis: performance of our contract with you.
• To verify who you are and prevent financial crime — identity checks, sanctions and PEP screening, transaction monitoring, and reporting where we are required to report. Basis: compliance with a legal obligation.
• To keep the service secure — detect unauthorised access, investigate abuse of the platform, and protect our systems. Basis: our legitimate interest in running a secure service.
• To support you — answer questions, handle complaints, and record calls and chats for quality and evidence. Basis: performance of our contract, and our legitimate interest in quality and accurate records.
• To improve the platform — understand how it is used and where it fails. Basis: our legitimate interest in improving our service.
• To send you marketing — news, offers and educational material about our services. Basis: your consent, or our legitimate interest where you are already a client and have not objected.
• To pay and manage introducing agents — confirm that an introduction was made and calculate what is owed. Basis: our legitimate interest in administering our partner network.

Where we rely on consent, you can withdraw it at any time. Withdrawing it does not affect anything we did before you withdrew it, and it does not affect processing we carry out on another basis — we cannot, for example, stop verifying your identity, because the law requires it.

We use cookies and similar technologies in three categories:

• Strictly necessary — keeping you signed in, remembering your session, and protecting against fraudulent requests. These cannot be switched off without breaking the site.
• Analytics — understanding which pages are used and where people get stuck, in aggregate.
• Advertising and measurement — measuring the performance of our campaigns and, where you have agreed, showing you relevant advertising on other platforms.

You can control non-essential cookies through the cookie banner and through your browser settings. Blocking cookies may stop parts of the platform from working.

Every marketing email we send carries an unsubscribe link, and unsubscribing takes effect across our marketing lists. You can also tell us to stop by writing to PENDING: privacy email. We will still send you messages we need to send to operate your account — margin notices, statements, security alerts and changes to these documents — because those are not marketing.

We share personal information only where there is a reason to, and only as follows:

• Other Prime FX entities, where needed to operate your account.
• Service providers acting on our instructions — cloud hosting and database providers, identity verification and screening providers, payment processors, email delivery providers, customer support tools, and analytics providers. They may use your information only to provide the service to us.
• Introducing agents, where you were referred by one. They may see that you registered and the status of your account, so that they can support you and be paid — not your identity documents.
• Regulators, law enforcement, tax authorities and courts, where we are required to disclose, or where disclosure is necessary to establish or defend a legal claim.
• Professional advisers — auditors, lawyers and accountants — under duties of confidentiality.
• A buyer or successor, if our business or part of it is transferred.

We do not sell your personal information.

We operate across several countries and our providers do too, so your information may be processed outside the country where you live, including in countries whose data protection law differs from your own. Where we transfer information out of a jurisdiction that restricts transfers, we rely on a lawful transfer mechanism — an adequacy decision, or standard contractual clauses with the recipient — and we require the recipient to protect the information to the standard set out in this policy. You may ask us for details of the mechanism that applies to you.

We keep your information for as long as you hold an account, and after that for as long as the law requires. Anti-money-laundering and financial-services rules generally require us to keep identity records, transaction records and communications for a minimum period after the relationship ends — commonly five to seven years, depending on the jurisdiction of the entity holding your account.

Where we no longer need information and no rule requires us to keep it, we delete it or anonymise it so that it can no longer identify you.

We use encryption in transit, access controls that limit information to staff who need it, segregated storage for verification documents, logging of administrative access, and regular review of our providers. No system is completely secure, so you also have a part in this: use a unique password, do not share your credentials, and tell us immediately at PENDING: support email if you think someone else has reached your account.

Depending on where you live, you may have the right to:

• ask for a copy of the personal information we hold about you;
• have inaccurate information corrected;
• ask us to delete information, where we have no continuing legal reason to keep it;
• ask us to restrict how we use it while a dispute about it is resolved;
• object to processing we carry out on the basis of a legitimate interest;
• receive information you gave us in a portable format, or have it sent to another provider;
• withdraw consent where consent is what we relied on;
• complain to your data protection authority.

To exercise any of these, write to PENDING: privacy email from the email address registered on your account. We may need to verify your identity before we act. We will respond within the period the applicable law allows, and we will explain our reasons if we cannot do what you asked.

Parts of our identity verification, sanctions screening and fraud monitoring are automated, and an automated result can delay or prevent an account being opened. Where an automated decision has a significant effect on you, you may ask for it to be reviewed by a person, explain your situation, and contest the outcome. Write to PENDING: privacy email.

Our services are not offered to anyone under 18, and we do not knowingly collect information about children. If we learn that we hold information about a child, we delete it and close any related account.

Our site links to websites we do not control, including regulators, payment providers and social platforms. This policy does not cover them. Read their own privacy notices before giving them information.

We update this policy when our practices change or when the law requires it. The date at the top of the page shows when it was last revised. Where a change materially affects how we use your information, we will tell you by email or through your account area before it takes effect.

Privacy and data requests: PENDING: privacy email
General enquiries: PENDING: support email
Postal address: PENDING: registered address

If you are not satisfied with how we have handled your request, you may complain to the data protection authority in the country where you live or work. This is in addition to, not instead of, the complaints process in our Terms of Service.