Privacy policy

Data controller

T And T Digital Commerce FZ-LLC, CWEP4712, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates — [email protected].

Data processed and purposes

Customer account and service (performance of the contract): name, email, password (stored in encrypted form), country of residence, purchase orders, simulated accounts, trading orders and positions, results and decisions of the risk engine, payout requests and payment details (encrypted).

Account security (performance of the contract): login logs, IP address, browser, two-factor authentication.

Identity verification and sanctions screening before any payout (legitimate interest: compliance with international sanctions and fraud prevention): name, date of birth, address, country; supporting documents only if we request them.

Fraud prevention (legitimate interest: protecting the fairness of the evaluation and our payments): login IP addresses in pseudonymised form, fingerprint of payment details, comparison of position openings between accounts. These signals are reviewed by a person and never trigger an automatic sanction.

Service emails (performance of the contract): order confirmation, decisions on your account, payouts. No marketing email is sent without your consent.

Partner programme: partner identity and commissions (contract); attribution of customers referred through a partner link (consent, see “Cookies”).

Automated decisions

Compliance with the trading rules is checked automatically, which may cause an account to fail according to rules published in advance. You may at any time request a review by a person, express your point of view and contest the decision (see the terms and conditions, article 11).

Recipients

Your data is accessible to our authorised team, according to their roles (support, risk, finance), and to our technical processors: hosting and database, email delivery (Resend, United States), payment provider. No market data provider receives personal data. Your data is never sold.

It may be disclosed to the authorities where required by law.

Transfers outside the European Union

Our company is established in the United Arab Emirates, which does not benefit from an adequacy decision of the European Commission. Transfers to our processors outside the Union are governed by the EU–US Data Privacy Framework where the provider is certified under it, or failing that by the European Commission's standard contractual clauses. A copy of these safeguards can be obtained at [email protected].

Retention periods

Customer account: for the duration of the relationship, then 3 years after the last activity.

Orders, payments, payouts and accounting: 7 years.

Identity verification data: 5 years after the end of the relationship.

Pseudonymised IP addresses (fraud prevention): 12 months after the last observation.

Trading history and risk engine decisions: for the duration of the relationship, then 5 years (evidence in the event of a dispute).

Your rights

You have the rights of access, rectification, erasure, restriction, objection (in particular to processing based on legitimate interest) and portability, as well as the right to withdraw your consent at any time. To exercise them: [email protected]. We reply within one month.

You may lodge a complaint with the data protection authority of your country (in France: the CNIL, www.cnil.fr).

Cookies

The website only uses cookies that are strictly necessary for its operation (login session, security). They do not require consent.

When you arrive through a partner's link, a referral cookie (lasting 30 days) is only set with your consent, in order to attribute any purchase you make to that partner. No advertising or audience measurement cookie is used.

Security

Encrypted passwords, two-factor authentication for our team, encrypted payment details, audit log of all sensitive actions, access restricted according to roles.