PRIVACY POLICY STATEMENT

Note: The English version of this Policy is the governing version and shall prevail whenever there is any discrepancy between the English version and the versions in any other language.

1. INTRODUCTION

The protection of privacy and the safeguarding of our Clients’ personal and financial information is of great importance to us. If you have any questions about this Privacy Policy or the processing of your Personal Information, please contact us at Privacy@markets.com.

Finalto Financial Services Ltd is a company incorporated under the laws of England and Wales under company number 06557752, the registered office of which is at First Floor Broadgate Tower, 20 Primrose Street, London, England, EC2A 2EW (“Finalto FS” or “us”) and is an investment services firm regulated in the conduct of its activities by the Financial conduct authority (“FCA”) under license number 481853 and its activities include the receipt, transmission and execution of client orders in financial instruments, including through the use of electronic trading platforms.

This purpose of this Policy is to explain to you:

• what Personal Data of yours we collect;
• how we use your Personal Data;
• how, with whom and when your Personal Data is shared;
• your rights; and
• other useful privacy and security related matters.

References in this Policy to “Personal Data” are references to “Personal Data” as defined in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “GDPR”).

References in this document to “Associate" are references to an undertaking, company or other body corporate being a member of our Group, a representative whom we or another undertaking of our Group appoint, or any other person with whom we have a contractual, agency or other relationship that might reasonably be expected to give rise to a community of interest between us and them.

References in this document to “Group” are references to Finalto FS and any entity controlled by or controlling Finalto FS and entities under common ownership and control with Finalto FS where “control” means direct or indirect control, of at least 50% of the voting rights or capital of an undertaking;

When collecting, processing and storing Personal Data provided by you, we are subject to the provisions of the GDPR and the revenant Personal Data protection laws and regulations of the Republic of England and Wales.

We, our Associates, any persons deriving rights from us or our Associates, any members of our Group, agents or sub-contractors which we engage or work through for the purpose of collecting, storing and processing Personal Data and any third parties acting on our or their behalf may collect, process use and store Personal Data provided by you for the purposes of, or related to, carrying out the transactions and other services which we provide to you, operational support and development of our or their businesses, providing us or them with professional or other services, in enforcing our or their contractual or other rights, and for the purposes of enabling compliance with the contractual, legal and regulatory provisions anywhere in the world to which we or our Associates and the aforesaid third parties are subject. By opening an account with Finalto FS, you hereby consent to such collection, processing, storage and use of Personal Data by us, our Associates or the aforesaid third parties in accordance with the provisions of this Policy, and agree that processing and storage of Personal Data provided to us by you may be carried out in or from any jurisdiction within or outside of the European Union including in or to countries or territories which do not offer the same level of protection of Personal Data as is enjoyed within the European Union.

You further represent and undertake that where you are a non-physical person providing to us Personal Data of any individual or where you are an individual providing us with Personal Data of any individual other than yourself, by opening an account with us you thereby undertake and represent that such person, whose Personal Data is collected, stored and processed in accordance with the provisions contained herewith, has been informed of and has given their consent to such collection, storage and processing of their Personal Data in accordance with the provisions contained herein and that they have been informed of their rights in relation to their Personal Data which is held and processed in accordance with the provisions contained herein.

2. COLLECTION OF PERSONAL DATA

WHAT PERSONAL DATA DO WE COLLECT?

Information you provide us when you apply for a trading account with Finalto FS:

This is the Personal Data you provide us when completing our account opening application form at our website www.markets. com/uk/ (the “Website”), including but not limited to your name, address, date of birth, email address, phone number(s), your professional background and income source etc. in order for us to facilitate the evaluation of your application and complete the relevant know-your-customer, anti-money laundering and appropriateness assessments that we are required to under the laws and regulations applicable to us. We also use this information for the purposes of communicating with you. We may collect details of your e-mail at the moment when you fill them in on the Website’s landing page to create an account but before you fully complete the registration process.

You may provide additional information as necessary in relation to your particular/personal circumstances which may include sensitive information such as information on retirement, bereavement, changes in income, long-term illness, mental health conditions, gambling addiction, long term debt issues etc, either via the vulnerability form available on our website and when logging into your account or via our standard communication methods (phone, email, LiveChat). This information will be used by us in our effort to better understand potential areas of vulnerabilities for appropriate and fair customer handling which will be in the best interests of our customers.

We may also collect information from you if you require technical assistance or customer support.

As a part of our verification procedure which we perform in accordance with the requirements of the applicable laws and regulations, we also collect information necessary to verify your identity, such as an identification card, passport or driver’s license. This information can also be obtained or verified by matching it with background information we receive about you from public records or from other entities not affiliated with Finalto FS.

Additional information we may collect:

We may (but not necessary shall) also collect the following information:

• name, contact information and message if you contact us or participate in any survey, contest or promotion;
• details such as traffic information, location data and other IT communication data (including IP address and browser type) collected when you access and use our electronic trading platforms (the “Platforms”);
• information about devices that you use when accessing the Platforms including unique device identified;
• pages (including the Website and MARKETS.COM application and all of their inner pages/Landing pages/) visited and content viewed, links and buttons clicked, URLs visited before and after you visit our Website (the “Web Data”). For more information about cookies and how to manage them please see our Cookie Policy;
• Information about the anticipated and actual volume and value of your transactions with us, payment methods information provided in order to enable the construction of your economic profile;
• your telephone, email or LiveChat conversations with Finalto FS’s customer support specialists;
• your responses to our marketing campaigns (e.g. open/click on our promotional or marketing emails whether sent by ourselves or any third-party service providers); and
• your social media profile details (name, profile photo and other information you make available to us, if any) when you connect with or contact us through a social media account; and
• information from third party databases to comply with our legal and regulatory obligations. Information necessary to verify your identity, such as an identification card, passport or driver’s license. This also includes background information we receive about you from public records or from other entities not affiliated with Finalto FS.

Finalto FS collects the necessary information required to open, transact and safeguard your assets and your privacy and to provide you with the services you require. To this end, Finalto FS gathers information from you and may, in certain circumstances, gather information from relevant banks and/or credit agencies, and/or other sources (such compliance verification databases and similar service providers) which help us profile your requirements and preferences and provide better services to you.

For the purposes of GDPR, Finalto FS acts as data controller in respect of the Personal Data that we collect from you.

3. HOW DO WE USE YOUR PERSONAL DATA?

For further information on how we use your personal data, please contact Privacy@markets.com. Finalto FS processes your Personal Data for the following purposes:

1. Account setup, verification and management. We use personal information such as your name, ID/passport details, email address, phone number, and information about your device to open and administer your trading account with Finalto FS, provide technical and customer support and training, verify your identity, process payment information and send you important information about your account with us and our service information. This information is required for the purposes of Finalto FS performing its obligations under the terms of the investment services agreement between you and Finalto FS (the “Agreement”), and also for the purposes of complying with the laws and regulations applicable to us.
   
   To verify your identity, age and accuracy of your registration details provided, we may disclose such information to third parties e.g. financial institutions and third party reference agencies and data verification service providers. This is required for the purpose of our complying with our legal obligations.
   
   We may also use such personal information to enforce the terms of the Agreement and/or in the event this becomes necessary for the purposes of any litigation, action or claim that you or us may have against each other in connection with the Agreement or our services.
2. Personalisation. We may use your personal information, including but not limited to you professional background details and your account trading history to determine, deliver and/or suggest tailored solutions to you to personalize your experience with our services in line with your background, prior exposure to financial markets and your general experience in trading. This type of processing is necessary for the purposes of our legitimate interests in developing, delivering or presenting relevant personalized services and content to our customers.
3. Marketing. Subject to any preferences you have expressed (where applicable), we may use your personal information, including but not limited to your name, e-mail, address, phone number, location and Web Data, to deliver marketing and event communications to you across various platforms, such as social networks, email, telephone, text messaging, direct mail, online, push notification or otherwise. We will do this either (i) until you withdraw your consent (or it ceases to be valid) or (ii) during the period of your relationship with us and, unless specifically instructed otherwise by you, for a reasonable period of time after the relationship has ended in order to inform you about products, services, promotions and special offers which we think may be of interest to you.
   
   We may engage our Associates and other third party marketing and advertising service providers for the purposes of providing marketing solutions to us or running marketing/re-marketing activities and advertising campaigns on our behalf. We may provide your Personal Data to such service providers on a limited basis for the purposes of enabling them to perform their aforesaid services.
   
   If we or our Associates send you a marketing email or other marketing communication, it will include instructions on how to opt out of receiving these marketing communications in the future. You can also manage your information and update your marketing preferences in the settings of your account on our Website. We shall require up to 72 hours to process any changes you make to your marketing preferences. We note that even if you opt out of receiving marketing communications, we may still send you important information related to your account(s) with us and our services to you.
   
   We or our Associates may, from time to time, send you marketing materials which may be of particular interest to you based upon your behavior i.e. your trading activity and history, and your background. These marketing messages will provide you with information about the products, services, active promotions or offers (as applicable) available to you by any company within the Group and information about products and services provided by our selected partners and third parties.
   
   We use a combination of information collected such as advertising cookies, your email address/phone number and your onsite activity to show you targeted and relevant advertisement on a selection of whitelisted websites and social media. This information can also be used to measure and analyze the effectiveness and reach of these ads, to help us improve and refine our marketing strategy in accordance with our legitimate interests in promoting our products and services to you.
   
   Except where we use your Personal Data for marketing purposes on the basis of your prior express and informed written consent and subject to any opt out preferences you notify to us in respect of marketing communications, we process Personal Data for marketing purposes only as necessary on the lawful basis and for the purpose of our legitimate interests in promoting our products and services to you.
4. Risk Management. In order to provide you our services and comply with our regulatory obligations we process your Personal Data as needed to evaluate and manage risks to our business. The types of Personal Data that we may process for these purposes includes, but it is not limited to, your trading history and patterns (which may required to identify and prevent abusive trading and other unlawful trading practices), your name, ID, passport and residence details.
5. Diagnostics, research and development. We may use your personal information for internal research and development purposes, to help diagnose system problems, to administer our websites, to improve and test the features and functions of our services to you, to develop new content, products and services. To carry out testing and analysis. This processing is necessary for the purpose of our legitimate interests.
6. Legal and regulatory obligations. We may be required to use and retain personal information for legal and compliance reasons, such as the prevention, detection, or investigation of a crime; or fraud. We may also use personal information to meet our internal and external audit requirements, information security purposes, and as we otherwise believe to be necessary or appropriate: (a) under applicable law, which may include laws outside your country of residence; (b) to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, which may include such authorities outside your country of residence; and (c) to enforce the terms of the Agreement, or for the purposes of defending any claim you may have against us in connection with your trading with us.
7. Profiling. In accordance with our legitimate interests detailed below or, as the case may be, in order to comply with our legal obligations, we may carry out profiling and analysis based upon your location data, address, age, professional background, experience, trading activity and behaviors for the following purposes:
   • Customer segmentation to offer you products and services which are appropriate for you, and to develop the more relevant marketing;
   • We run with lookalikes campaigns in Facebook. A lookalike campaign is a way to reach out to new potential customers who are likely to be interested in our business because they have interests similar to our existing customers
   • To perform our target market assessments in accordance with the regulatory requirements applicable to us;
   • Risk and trading analysis; and
   • Licensing and legal obligations i.e., Anti Money Laundering, Age Verification, prevention of fraud.
8. Other purposes. We may be required to use and retain your personal information for loss prevention or to protect our rights, privacy, safety, or property, or those of other persons in accordance with our legitimate interests.

4. HOW LONG DO YOU RETAIN THE PERSONAL DATA?

Once your Agreement with us terminates, we shall keep your Personal Data provided to us, including but not limited to your name, address, email, phone number, your trading and transaction history, deposits and withdrawals history, for at least 5 (five) years, as is required under Directive 2014/65/EU of the European Parliament and of the Council of 15 May 2014 on markets in financial instruments and amending Directive 2002/92/EC and Directive 2011/61/EU (“MiFID II”). Where we keep and process your personal data for marketing purposes based on your consent, we shall retain it until your consent is withdrawn or ceases to be valid.

However, depending on your country of residence and/or citizenship, there may be different statutes of limitation in force. A “statute of limitations” is a statute prescribing a period of limitation for the bringing of actions or claims of certain kinds, which means that, depending on the jurisdiction, you have the right to bring a claim against Finalto FS in connection with your trading with Finalto FS only during a certain period of time (the “Limitation Time”). We have a legitimate interest in retaining your personal information (such as your ID, address, transactional and trading history with us and records of your communications with us) in order to enable us to defend ourselves against any such claim that you may have. Accordingly, such personal information shall be retained by us after the date of expiration or termination of the Agreement during the Limitation Time.

5. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

Your personal information may be transferred or disclosed to any company within the Group or, subject to appropriate agreements and arrangements to ensure data protection, to third parties, for the processing of that personal information based on our instructions and in compliance with this policy and any other appropriate confidentially and security measures.

5.1 Within the Group

Finalto FS may share information to the Associates within its Group and their respective legal, accounting, tax and financial advisors in the event such information is reasonably required by such Associates for the following purposes:

• Account set up, verification and management;
• Marketing and event;
• Risk management; and
• Legal and regulatory obligations.

Where we share your personal data within the Group, we may share it, and you consent to us sharing it, with the following Associates:

1. TradeFX CY Limited, a company incorporated in Cyprus, a provider of dealing services to us;
2. Safecap Investments Limited is a company incorporated under the laws of Cyprus, the registered office of which is at 148 Strovolou Ave., Strovolos, 2048 Nicosia, Cyprus a provider of support services to us;
3. Lane Square Enterprises Limited, a company incorporated in the Isle of Man, a provider of IT technology services to us
4. Finalto (Israel) Ltd, a company incorporated in Israel, a provider of IT development and IT maintenance services to us; and
5. KSTT Services Ltd, a company incorporated in Ukraine, a provider of IT development and IT security services to us.

Each of the above Associates is under 100% control of the Group.

5.2 Non-Affiliates Third Parties

Finalto FS may, from time to time, retain third parties to process your information to provide us with services globally, including for customer support, payments processing, verification information technology, payments, sales, marketing, data analysis, research and surveys. As part of our agreements with our partners, we may be required to share your information for the purposes of such partners being able to provide the aforesaid services to us. We may disclose information as necessary to credit reporting or collection agencies as reasonably required in order to provide the services to you.

Where you have been introduced to us by a third party business introducer, such business introducer may have access to your personal information, and we may share your personal information with such business introducers for the legitimate purpose of complying with your obligations under the relevant business introducer agreements between us and such business introducers. As at the date of this policy, we may share data of introduced clients with the following licensed entities:

1. London & Eastern LLP, a company incorporated in the United Kingdom and regulated by the Financial Conduct Authority (FCA), reference number 534484,
2. TMS Capital Limited, a company incorporated in the United Kingdom and regulated by the Financial Conduct Authority (FCA), reference number 195581.

Furthermore, and for the purposes of fulfilling our regulatory obligations concerning transaction reporting, we are sharing your data with the following third parties:

1. MAP Financial Technologies (Europe) Limited, a company incorporated in Cyprus, reference number HE 328705;
2. UnaVista Limited., a company incorporated in the United Kingdom with company number 08451384 and regulated by the Financial Conduct Authority as an approved Trade Repository.

Personal information to which read-only access may be given includes information such as name, residency details, contact details (such as email and phone number) and trading activity. If you do not wish for your data to be shared with the third party business introducer, you can withdraw your consent by notifying us via Live Chat or email.

We will share with third parties your personal information when we believe it is required to so for legal and regulatory reasons, including but not limited to:

1. To comply with our legal obligations and respond to requests from government agencies, including law enforcement and other public authorities, which may include such authorities outside your country of residence. Without limitation to the generality of the foregoing, Finalto FS, as a regulated English Investment Firm, is required to comply with certain obligations such as obligations under: the Intergovernmental Agreement between England and Wales and the United States and has taken all reasonable steps to be considered in compliance with The Foreign Account Tax Compliance Act (FATCA), the OECD Common Reporting Standard (“CRS”) as well as any obligations arising under any laws or regulations of the United States Internal Revenue Service (“IRS”) to which we are required to adhere to;
2. In the event of a merger, sale, restructure, acquisition, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings); and
3. To protect our rights, customers, systems, and Platforms.

The Client acknowledges and accepts that Finalto FS is required to disclose information in relation to any US reportable persons to the relevant authorities, in accordance with the reporting requirements of FATCA and the IRS. The Client may contact Finalto FS for additional information or clarifications prior to the signing of this Agreement.

Countries outside the European Economic Area (“EEA”) do not always have strong data protection laws. Where we transfer your personal information from the EEA to other countries in which applicable laws do not offer the same level of data privacy protection as the EEA states y, we take measures to provide an appropriate level of data privacy protection. For example, we use approved model contractual clauses, other measures designed to ensure that the recipients of your personal information protect it. We take steps to ensure that the information we collect is processed according to this privacy policy and the requirements of the applicable.

6. YOUR RIGHTS UNDER GDPR

Under the GDPR, you, as a data subject have certain rights which are detailed below. Some of these only apply under specific circumstances and are qualified in several respects by exemptions in data protection legislation. We will advise you in our response to your request if we are relying on any such exemptions.

1. Access to Personal Data: You have a right to request a copy of the personal information that we hold about you. Should you wish to make such a request, please contact our Customer Support Department on our Contact Us page or via Live Chat.
   You should include adequate information to identify yourself and such other relevant information that will reasonably assist us in fulfilling your request. Your request will be dealt with as soon as possible.
2. Correction of Personal Data: You can request us to rectify and correct any Personal Data that we are processing about you which is incorrect.
3. Right to withdraw consent: Where we have relied upon your consent to process your Personal Data, you have the right to withdraw that consent. To opt out of email marketing, you can use the unsubscribe link found in the marketing communication you receive from us. To unsubscribe of SMS/push marketing, you can send us a message to the number provided in the SMS/push marketing communications that you receive from us. You can also contact us at the following address: unsubscribe@markets.com.
4. Right of erasure: You can request us to erase your Personal Data where there is no compelling reason to continue processing by sending us a request at privacy@markets.com or by contacting our Customer Support team via our Contact Us page or via Live Chat. This right only applies in certain circumstances, it is not a guaranteed or absolute right (for example, we may retain your data as described in Section 4 above).
5. Right to data portability: This right allows you to obtain your Personal Data that you have provided to us with your consent or which was necessary for us to provide you with our products and services in a format which enables you to transfer that Personal Data to another organisation. You may have the right to have your Personal Data transferred by us directly to the other organisation, if this is technically feasible.
6. Right to restrict processing of Personal Data: You have the right in certain circumstances to request that we suspend our processing of your Personal Data. Where we suspend our processing of your Personal Data we will still be permitted to store your Personal Data, but any other processing of this information will require your consent, subject to certain exemptions.
7. Right to object to processing of Personal Data: You have the right to object to our use of your Personal Data which is processed on the basis of our legitimate interests. However, we may continue to process your Personal Data, despite your objection, where there are compelling legitimate grounds to do so or we need to process your Personal Data in connection with any legal claims.
8. Rights relating to automated decision making and profiling: You have the right not to be subject to a decision which is based solely on automated processing (without human involvement) where that decision produces a legal effect or otherwise significantly affects you. This right means you can request that we involve one of our employees or representatives in the decision-making process. We are satisfied that we do not make automated decisions of this nature.
9. Right to lodge a complaint: You have the right to lodge a complaint with the Data Protection Authority of your jurisdiction. The UK Data Protection authority is the Information Commissioner’s Office - https://ico.org.uk/global/contact-us/. If you wish to exercise any of your rights or submit a complaint to us, you can do so by contacting us at privacy@markets.com com or by contacting our Customer Support team via our Contact Us page or via Live Chat. Please note that where you make a request to exercise any of your rights, we will require proof of identification and/or any clarifications that may be deemed necessary.

7. USE OF "COOKIES"

Our Website, and all its sub digital assets, mobile app and the landing page use cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. By continuing to browse the site, you are agreeing to our use of cookies.

For more information about cookies and how to manage them please see our Cookie Policy

PRIVACY POLICY UPDATES

From time to time, Finalto FS may update this Privacy Policy. In the event Finalto FS materially changes this Privacy Policy including how we collect, process or use your Personal Data, the revised Privacy Policy will be posted on the website keeping you informed. Any dispute over our Privacy Policy is subject to this Privacy Policy and the Agreement.

AGREEMENT

I have read, understood and agree with the terms of this Privacy Policy, and I confirm that I have full power and authority to be bound by the terms of this Privacy Policy.

For any queries or further information in relation to this Privacy Policy please Contact Us.