Privacy Policy

XF Traders is the trading name used by [FULL LEGAL ENTITY NAME] (“XF Traders”, “we”, “us” or “our”). We operate the website and campaign landing pages at [DOMAIN(S)] and provide information and services relating to online trading and financial markets. For data-protection purposes, [FULL LEGAL ENTITY NAME] is the controller of personal information collected through our website, landing pages, account-opening journey, customer support channels and advertising campaigns, except where another party is identified as an independent controller under applicable law. Controller address: [FULL REGISTERED ADDRESS]. Privacy contact: [PRIVACY EMAIL].

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit our website or landing pages, submit a form, respond to a Meta (Facebook or Instagram) lead advertisement, create or maintain an account, contact us, or interact with our marketing and analytics technologies. If you become a client, additional account, trading, KYC/AML, payment or regulatory notices may also apply. Where those notices conflict with this general policy, the more specific notice will apply to the relevant processing activity.

Contact and lead information: name, email address, telephone or WhatsApp number, country of residence, preferred language, and information you choose to provide. Account and onboarding information: date of birth, residential address, nationality, occupation, tax information, trading experience, financial suitability information and other eligibility information. Identity and compliance information: where required, identification documents, proof of address, verification results, sanctions/PEP screening, source-of-funds or wealth information. Transaction and trading information: account identifiers, deposits, withdrawals, payment status, trading activity, instruments and orders, where applicable. Website and device information: IP address, browser, device, operating system, language, referring URL, pages viewed, timestamps and cookie identifiers. Marketing and attribution information: campaign, ad, source, UTM and click identifiers, consent preferences, form events and lead status. Communications: records of emails, calls, chats, WhatsApp messages or other communications where lawfully retained.

If you submit information through a lead form on Facebook or Instagram, Meta collects the displayed fields and makes the information you choose to submit available to XF Traders. Depending on the campaign, this may include your name, email, telephone, country, language or trading experience. We use it only for purposes described in the form and this policy, such as responding, assisting with registration, measuring campaigns, preventing fraud and marketing where permitted. We do not sell Meta lead data. We disclose it only as described here, including to approved CRM, communications, compliance, hosting or support providers, or where law requires. Contact [PRIVACY EMAIL] to ask about this use or exercise applicable rights.

Our pages may use Meta Business Tools, including Meta Pixel, Conversions API and related measurement technologies, to measure visits and conversions, understand performance, deduplicate events and build or refine audiences where permitted. Depending on configuration and consent, information sent may include browser or device data, IP address, page or event information, campaign identifiers and normalized and hashed contact identifiers. Passwords, full payment-card details, identity or KYC documents, financial credentials and information unnecessary for advertising must not intentionally be sent. Meta processes information under its own terms and privacy notices.

We may use personal information to respond to enquiries; provide information; create, verify and administer accounts; perform eligibility, suitability, KYC, AML, sanctions and fraud checks where required; provide support; process transactions; maintain records; protect systems, clients and rights; analyze and improve pages and campaigns; attribute leads and conversions; send service messages or permitted marketing; comply with legal, regulatory, tax, audit, reporting and record-keeping obligations; and establish, exercise or defend legal claims.

Our legal basis depends on the information, purpose and applicable law. It may include steps requested before a contract, contract performance, legal or regulatory obligations, legitimate interests in operating and protecting our business, or consent where required. Where we rely on consent for non-essential cookies, direct marketing or another use, you may withdraw it at any time without affecting prior lawful processing.

Where permitted, we may contact you by email, phone, SMS, WhatsApp or another selected channel about your enquiry, registration, services, educational content or promotions, using permissions and preferences collected through the relevant form. Opt out using an available unsubscribe mechanism or by contacting [PRIVACY EMAIL]. Necessary service, security, compliance or account communications may still be sent.

We use essential cookies and similar technologies needed for security, load balancing, language preferences, forms and core features. We may use analytics and advertising technologies where permitted. Where law requires prior consent, a consent mechanism will allow users to accept or reject non-essential technologies before they fire. Rejecting optional cookies will not prevent basic access or contact. Cookie categories, providers, purposes and durations should be listed in a separate Cookie Notice or consent manager and kept consistent with actual deployment.

Where permitted, we may use contact information or website activity to create, exclude or measure advertising audiences on platforms such as Meta. For customer-list audiences, identifiers may be hashed before matching. We use audience data only with required rights, permissions and lawful basis, respect applicable opt-outs and do not sell or transfer Meta audiences contrary to applicable terms.

Only as necessary, we may share information with affiliated entities; hosting, cloud, cybersecurity and IT providers; CRM, communications and support providers; identity, KYC/AML, fraud and screening providers; payment and banking providers; trading technology, platform, liquidity or execution providers where applicable; analytics and advertising providers such as Meta where permitted; advisers and auditors; regulators, courts, law enforcement or government bodies where required; and a legitimate corporate buyer or successor. We do not sell personal information as a business model. Providers are expected to follow appropriate contractual, confidentiality and security obligations.

Our providers or group companies may process information outside your country. Where applicable law requires safeguards for international transfers, we will use an approved transfer mechanism or another lawful safeguard appropriate to that transfer.

We keep information only as long as reasonably necessary to respond to leads, provide services, maintain business and security records, meet legal or regulatory requirements, resolve disputes and enforce agreements. Lead and marketing records: [INSERT APPROVED RETENTION PERIOD]. Client, KYC/AML, account and transaction records: [INSERT PERIOD REQUIRED BY APPLICABLE LAW/REGULATOR]. Technical logs and consent records: [INSERT APPROVED PERIOD]. We may retain information longer where required by law, a regulator, litigation hold or another legitimate legal requirement.

We use reasonable technical and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration or disclosure. Measures may include access controls, encryption in transit, secure credential management, logging, vendor controls, confidentiality obligations, backups and incident response. No internet transmission or storage system is completely secure. Never send passwords, full card numbers or identity documents through ordinary marketing forms unless specifically designed and secured for that purpose.

Depending on your location and applicable law, you may have rights to request access, correction, deletion, restriction, portability, objection, withdrawal of consent, or opt-out from certain targeted advertising or marketing. Contact [PRIVACY EMAIL]. We may verify identity and some rights may be limited by legal, regulatory, fraud-prevention, record-keeping or other lawful exceptions. You may also complain to a competent authority.

XF Traders trading and account services are not intended for children or persons below the minimum legal age for the relevant service. We do not knowingly seek trading leads from minors. Paid campaigns should comply with applicable age and financial-advertising restrictions.

Our website may link to trading platforms, payment providers, social networks or other third-party services. Those parties process information under their own privacy policies. This policy does not control their independent practices.

We may update this policy to reflect changes in services, technologies, legal obligations or business practices. The current version will be posted with an updated effective date. Where law requires, we will give additional notice of material changes.

Privacy questions or requests: [PRIVACY EMAIL]. Customer support: [SUPPORT EMAIL / PHONE]. Legal entity: [FULL LEGAL ENTITY NAME]. Registered address: [FULL REGISTERED ADDRESS]. Regulatory information: [REGULATOR / LICENSE / LEGALLY APPROVED WORDING].