Privacy Policy

1. Information We Collect

We collect the following categories of personal information:

• Identity Data: full name, date of birth, nationality, government-issued identification documents
• Contact Data: email address, phone number, residential address
• Financial Data: bank account details, payment card information, cryptocurrency wallet addresses, transaction history
• Technical Data: IP address, browser type, device information, login timestamps
• KYC Documentation: copies of identification documents and proof of address

2. How We Use Your Information

• To verify your identity and comply with KYC/AML regulations
• To process deposits, withdrawals, and transfers
• To provide and maintain our trading services
• To communicate with you about your account and our services
• To detect and prevent fraud, money laundering, and unauthorized access
• To comply with legal and regulatory obligations
• To improve our services and user experience

3. Data Storage & Security

All personal data is encrypted at rest using AES-256 and in transit using TLS 1.3. We implement strict access controls, regular security audits, penetration testing, and comply with PCI DSS standards for payment data. Our servers are hosted in secure, access-controlled data centers.

4. Cookies & Tracking

We use essential cookies for authentication, session management, and security. Analytics cookies may be used to understand website usage patterns. You may disable non-essential cookies in your browser settings, although this may affect functionality.

5. Third-Party Sharing

We do not sell your personal data. We may share data with:

• Payment processors (for transaction processing)
• Identity verification providers (for KYC compliance)
• Regulatory and law enforcement authorities (as required by law)
• Professional advisors (legal, audit, accounting)

All third-party providers are contractually bound to handle your data securely and in accordance with applicable data protection laws.

6. Data Retention

We retain personal data for as long as your account is active and for a minimum of 5 years after account closure, as required by financial regulations. KYC documents are retained for the duration required by applicable AML laws. Upon the expiry of retention periods, data is securely deleted or anonymized.

7. Your Rights

Subject to applicable law, you have the right to:

• Access your personal data held by us
• Rectify inaccurate or incomplete personal data
• Delete your personal data (subject to legal retention requirements)
• Restrict the processing of your data in certain circumstances
• Data portability - request your data in a structured, machine-readable format
• Object to processing based on legitimate interests

To exercise these rights, contact us at support@spredixmarkets.com. We will respond within 30 days.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related inquiries, contact our Data Protection Officer at support@spredixmarkets.com or write to: Ground Floor, The Sotheby Building, Rodney Village, Rodney Bay, Gros-Islet, Saint Lucia.