Privacy Policy

1 Information We Collect

1.1 Information You Provide Directly

• Account Registration: Full name, email address, country of residence, date of birth, username and password.
• Identity Verification (KYC): Government-issued ID, selfie/proof-of-identity documents required for payout eligibility.
• Payment Information: Transaction references, payment method type. We do not directly store full card numbers — payment is processed by our third-party providers.
• Communication: Messages sent via our contact form, support tickets, or email correspondence.

1.2 Information Collected Automatically

• Device & Log Data: IP address, browser type, operating system, pages visited, access timestamps, referring URLs.
• Trading Activity: All simulated trades, orders, and account performance data on our Platform.
• Cookies: Session cookies, preference cookies, and analytics identifiers (see Section 5).

1.3 Information from Third Parties

• Payment processors may share transaction status, fraud signals, or chargeback information with us.
• If you use a referral or affiliate link, we may receive information about the source of your registration.

2 How We Use Your Information

We use the information we collect for the following purposes:

• Account Management: To create, maintain, and manage your account.
• Service Delivery: To provide access to the Platform, process evaluation programs, and manage funded accounts.
• Payout Processing: To verify your identity and process profit distributions.
• Communication: To respond to your inquiries, send service notifications, and provide support.
• Marketing: To send you promotional communications (only with your consent, and you may opt out at any time).
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, abuse, and violations of our Terms.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Analytics & Improvement: To understand how users interact with our Platform and improve our services.

3 Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) or United Kingdom, we process your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you (account management, service delivery, payouts).
• Legitimate Interests: Fraud prevention, platform security, and service improvement where such interests are not overridden by your rights.
• Legal Obligation: Processing required to comply with applicable laws (e.g., KYC/AML requirements).
• Consent: For marketing communications and non-essential cookies. You may withdraw your consent at any time.

4 Data Sharing & Disclosure

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your data with:

• Service Providers: Third-party vendors who assist in operating our Platform, processing payments, providing customer support, hosting, and analytics (bound by confidentiality agreements).
• Payment Processors: To facilitate transactions and payout processing.
• KYC/AML Providers: Identity verification services to fulfil legal compliance obligations.
• Legal Authorities: Where required by law, court order, or government regulation.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred to the successor entity.

5 Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Platform.

Types of Cookies We Use

• Essential Cookies: Required for the Platform to function (session management, authentication, CSRF protection). Cannot be disabled.
• Preference Cookies: Remember your language selection and display preferences.
• Analytics Cookies: Help us understand how visitors interact with our Platform (e.g., page views, bounce rates). Used in aggregate and anonymised form where possible.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent the Platform from functioning correctly. By continuing to use our Platform, you consent to our use of cookies as described.

6 Data Retention

We retain your personal data for as long as your account is active, plus a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods depend on the type of data:

• Account data: Retained for the duration of your account plus up to 7 years after closure (for legal/tax purposes).
• KYC documents: Retained in accordance with applicable AML regulations (typically 5–7 years).
• Trading data: Retained for the duration of your account plus up to 5 years.
• Communication records: Retained for up to 3 years.

After these periods, data is deleted or anonymised.

7 Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit (TLS/HTTPS) and at rest.
• Access controls and authentication mechanisms.
• Regular security assessments and monitoring.
• Employee training on data protection practices.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

8 International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including countries that may not offer the same level of data protection as your jurisdiction.

Where we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by relevant data protection authorities, or transfers to countries with an adequacy decision.

9 Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, subject to certain legal limitations.
• Right to Restriction: Request that we limit the processing of your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

10 Third-Party Links

Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11 Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete such information promptly.

12 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. For significant changes, we may also send a notification via email or through the Platform. Continued use of our Services after any changes constitutes your acceptance of the updated policy.

13 Contact Us

For any questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact our Data Protection contact:

• Email: [email protected]
• Website: propchallenge.trade/contact