Fx-Digital (hereafter the “Company”) is an Investment Firm incorporated and registered under the laws of St. Vincent and the grenadines, with registration number 1379 LLC 2021. The Com- pany is authorized and regulated by the St. Vincent and the Grenadines Financial Services Authority (hereafter the “SVGFSA”).

In this privacy statement, your data is sometimes called “personal data” or “personal infor- mation”. We may also sometimes collectively refer to handling, collecting, protecting and storing your personal data or any such action as “processing” such personal data. Personal data shall mean any information relating to you which identifies or may identify you and which includes, for example, your name, address, identification number.

Fx-Digital is committed to safeguarding your privacy and handling your personal data in an open and transparent manner which respects the privacy of any user that accesses our site(s). Our Privacy Notice Online Statement policy is intended to explain how we protect the privacy of your personal and financial information. We will only use your information as described in our Privacy Notice Online Statement policy.

This document will help you understand the following:

• What personal data we collect and process about you as a customer and as a user of our website, mobile applications and online
• Why we collect and process your
• How the Company collects and processes your personal
• Where we obtain the data
• How and when we share your personal data with other third parties (for example, our service providers or suppliers).

This document is directed to natural persons who are either current or potential customers of the Company, or are authorized representatives/agents or beneficial owners of legal enti- ties or of natural persons which/who are current or potential customers of the Company.

TYPES OF PROCESSED DATA

Personal data is all information which enables you to be identified. Such data include for ex- ample your name, contact details, payment details.

We collect and process different types of personal data which we receive from our customers (potential and current) in the context of our business relationship.

Specifically, we may collect the following types of data:

• The data you give us for the creation of your account. Generally, these include your Name, home address, e-mail address, telephone number, birth date, place of birth (city and country), if you hold/held a prominent public function (for PEPs), FATCA / CRS info, passport or other recognized personal ID card numbers and
• The data you enter when funding your account. Generally, these include your cred- it/debit card details or other payment details (IBAN, SWIFT codes etc).
• The data you give us in relation to your financial status and Generally, these include your education, employment status, your income and net worth, your past ex- perience with other investment services.

• The data you provide when requested to do so from our AML/KYC department in rela- tion to your identity and or residence. Generally, these include copies of your identity document, proof of residence (e.g. utility bill) and copies of your credit/debit card(s).
• The data you provide when requested to do so from our AML department in relation to the source of your funds. These include all information and documents you send us, generally being bank statements, pay slips, shareholder certificates, dividend certifi- cates
• The communications you exchange with us or direct to us via letters, emails, chat ser- vice, calls, and social
• The results of enhanced due diligence we have performed on you. Generally, this in- clude data about your alleged commission or conviction of offences, your position in public office and any other publicly available

YOUR OBLIGATION TO PROVIDE US WITH YOUR DATA

The establishment and legality of the contractual relationship between yourself and the Company is dependent on the provision by yourself of the data requested by the Company. You must provide to us those of your personal data are necessary for commencement and execution of a contractual based business relationship between ourselves and for the performance of both parties’ contractual obligations.

To maintain the contractual relationship and to receive services from the Company, you are obliged to provide us with certain personal data, as we are compelled by applicable AML/CTF legislation and regulations to identify you, verify your identity and perform due diligence or enhanced due diligence if applicable on your person to fulfil our AML obligations.

If you fail to provide us with the requested data, the commencement or the continuation of our business relationship will not be possible.

WHY

Your data is processed with a de minimis principle in mind, meaning that we limit the processing of your data and the type of data processed to those strictly necessary for a legitimate reason. For example:

1. To provide you with the services you have requested (e.g. creation of your account, transmission of the orders you requested).
2. Assessment of the appropriateness of the financial instrument offered to
3. To perform payment For example, funding/defunding operations on your ac- count as per your instructions or as per the outcome of your investments.
4. To maintain communication with you and provide you with Customer Support services for resolving your concerns and generally enhancing your client
5. General administrative functions. Maintenance of our internal records necessary for keeping your account up to date in our systems, troubleshooting and general record
6. Credit card fraud prevention. Your payment information shall be used for accounting, billing and audit purposes and to detect and / or prevent any fraudulent
7. Anti-Money Laundering and Terrorist Financing checks and
8. Market abuse checks and
9. General crime prevention and/or cooperation with competent
10. Tax reporting

We will only process your personal data where we have a legal basis to do so. This legal basis may vary according to the reasons for which we need to use your personal data. We may process your personal data if the processing is founded on one or more of the following legal bases:

• The processing is necessary for compliance with a legal obligation to which we are subject.

The majority of your data is processed under this category, as we are legally obliged to process it.

The legal framework governing our operations imposes on us obligations which involve the process of personal data for the performance of identity verification, compliance with court orders, tax law or other reporting obligations and anti-money laundering controls.

We are subject to numerous legal obligations, emanating from the relevant laws and statutory requirements applicable to us. We may process your data as required by the Money Laundering Law, Tax laws, the Law on Deposit Guarantee and Resolution of Credit and Other Institutions Scheme, the Payments Law.

• The processing is necessary for the performance of the contract.

The processing of your data is necessary for the fulfilment of the services you have requested from us via the establishment of a contractual relationship. We process personal data in order to offer and perform the financial services and transactions as specified in the contract we have entered into with you.

The processing may also be necessary to complete our acceptance procedure so as to enter into a contract with prospective customers.

• You have specifically consented to your personal data being used by us for a specific purpose.

Such consent shall usually be relied upon for sending you marketing communications, news emails, financial market updates, announcements that may interest you etc.

You may revoke your consent to this processing, however without any retroactivity.

• The processing is necessary for the purposes of our legitimate interests as an invest- ment firm.

The processing of your data is necessary for the safeguarding of a legitimate interest in using your data. Generally, these interests include the Company’s risk management, defense in litigation, security measures, business development, crime prevention.

The use of your data in this case shall not infringe on your fundamental rights and freedoms.

The majority of the data shall be acquired directly from you, either via the forms available on our website or via email or via other means of communication you chose to use and we chose to accept.

However, we may also collect and process personal data which we lawfully obtain from other entities such as information aggregation agencies, public authorities, entities that introduce you to us, companies that process your card payments, your Bank(s) and intermediary/correspondent institutions.

We can lawfully collect, and we are permitted to process personal data from publicly available sources such as National Company Registrars, National Land Registries, Bankruptcy Archives, commercial registers, the press, media and the Internet.

HOW LONG

The retention period for your data is primarily dependent on the retention rules imposed upon us by the applicable legislation. We are obliged by various laws to keep your data for a specific amount of time. Destruction of the data prior to the lapse of this period is not possible.

We shall keep your data for up to 10 (ten) years from the date of the creation of your account (with a margin of error of 1 (one) year) unless legal or regulatory reasons prohibit us from destroying the data.

When applicable, your data shall be securely deleted and/or destroyed and shall not be recoverable. We shall not notify you upon deletion as we will have no contact details to reach you.

If we anonymize your personal data so that it can no longer be associated with you or identify you it shall not be considered personal data as per the definition of the Law and we may keep that information without further notice to you.

WHO

Only if necessary, your personal data may be shared between departments within the Company who have a legitimate reason to process it.

The Company may transmit your data to non-Company entities such as outsourced service providers, only if necessary and if a valid legal basis, as described in this document, exists to support the necessity.

Such service providers shall have contractual relationships with the Company and are contractually bound to observe the same confidentiality and data protection rules that the Company has to follow.

Your personal data may be, for example, transmitted to the following entities:

• Supervisory, regulatory and public authorities, including courts of justice, law enforce- ment authorities and other governmental
• Financial institutions, payment service providers, card payment processors, corre- spondent
• Information aggregation agencies for Anti Money-Laundering and Counter-Terrorist
• Legal counsel and
• Auditors and accounting
• Administrative service
• Marketing and customer support service

We reserve the right to disclose your personal information as required by rules and regulations, and when the Firm believes that disclosure is necessary to protect our rights and/or to comply with a judicial proceeding, court order, or legal process served. We will not be liable for misuse or loss of personal information resulting from cookies on the site(s) that we do not have access to or control over. We are not liable for unlawful or unauthorized use of your personal information due to the negligent or malicious misuse or misplacement of your passwords.

AUTOMATED DECISION-MAKING AND PROFILING

In general, your data is not processed automatically, and no decision is taken based on automated processes.

The only automatic “profiling” we may do based on your data is a risk assessment for AML/CTF purposes and for establishing your investment risk appetite and tolerances. This process is however not entirely automatic and ultimately depends on manual overview and decision taking.

DATA PROTECTION RIGHTS

If you are a physical person who is the data subject of what is legally considered “personal data” which we hold as a “controller” and/or “processor” you are entitled to certain rights.

Without prejudice to the above, your rights may be limited due to the legal basis relied upon by the Company to process your data. As the majority of the processing performed by the Company is the consequence of legal obligations, some of the rights below may be partially or fully in conflict with other legal instruments and as such, unenforceable.

• Right to information.

You may request to know whether we hold any of your personal data, and, if so, information on the Company, what type of data we process and why/how we are processing it.

• Data subject access request.

You may request to receive a copy of your personal data and check that the processing is lawful.

• Right to rectification.

You may request that we rectify and incorrect data we hold and you may complete any incomplete data we may hold.

• Right to erasure (‘right to be forgotten’).

You may request that your personal data is deleted, provided that you meet the legal criteria for this request. Generally, you may request to be forgotten if the processing is unnecessary, unlawful, illegitimate, or you have objected to it. Note that since the majority of the pro- cessing performed by the Company is based on legal requirement, your request to be forgot- ten may be legally rejected by the Company.

• Object to processing of your personal information.

If we are processing your data based on our (or a third party’s) legitimate interest and you are in a particular situation which gives you reason to object to the processing you may submit this request. You may also object if we are processing your data for direct marketing purposes. If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your in- terests, rights and freedoms.

• Object to automated decision-making including profiling.

You may object to any automated decisions or profiling taken and performed by us based on your personal data.

• Right to restriction.

You may request the restriction of the processing of your data under some circumstances, for example so as to determine if the data is accurate or to establish the reason for processing it.

• Right to data portability.

You may request a copy of your personal information in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller. This right may not be fully applicable in cases where the processing is done due to a legal obligation of the Company.

• Right to withdraw consent.

Where you have consented to the collection, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. Once your consent is withdrawn, the processing of your data will be halted, unless said processing is found on another legitimate basis, for example due to a legal obligation to keep your data.

Unless your requests are manifestly unreasonable or excessively burdensome, you shall not be charged a fee by the Company. In such cases your requests may also be denied, as they may not be submitted in good faith.

SITE SECURITY

We are committed to protecting your information, and we take extra precautions to ensure that your data is safe using the following procedures:

• We use two layers of firewall protection (one at the application level and one at the server level) to ensure that no unauthorized access attempts are
• We use an advanced Verisign SSL to authenticate users and data
• The server that handles our traders’ online activity is separate from the transaction in- formation, which is stored on another data
• We use separate servers in different Since data must be synchronized to both locations, it cannot be tampered with, and encryption ensures that all the data on our servers is secure.
• The servers are protected at all times. Any unauthorized personnel are forbidden to enter the premises of the

You can feel secure knowing that we employ top-of-the-line security measures to ensure that both your money and your data are safe.

COOKIES

A cookie is a small text file stored on your computer for record-keeping purposes. Fx-Digital uses cookies on its site(s). We do not link the information stored in cookies to any personally identifiable information you may submit. We use both, session ID and persistent cookies. A session ID cookie expires when you close your browser. A persistent cookie remains on your

hard drive for an extended period of time. You can remove persistent cookies by following directions provided in your internet browser’s “Help” file.

We may set a persistent cookie for statistical purposes. Persistent cookies also enable us to track and target the location and the interests of users that access our site(s) and to enhance the experience of services offered to you. You may reject our cookies, which could result in a lower quality user experience. Some of our business partners use cookies on their site(s). We have no access or control over these cookies.

COMPLAINTS

If you have any complaints about the processing of your data, you may contact the Company’s Data Protection Officer at [email protected].

CHANGES TO THIS POLICY

We may change our Privacy Notice Online Statement policy from time to time and shall alert you to this fact by way of an e-mail or a notice on our website.