Privacy Policy

1. General provisions and scope

1.1. This Privacy Policy (the “Policy”) explains what personal data Atlant Trade collects, how and why it is used, to whom it may be disclosed, how long it is retained and which rights may be available to a user.

1.2. The Policy applies to the Atlant Trade website, account area, trading interface, mobile or responsive version of the Platform, customer support, payment and verification processes, and the affiliate programme to the extent personal data is processed.

1.3. This Policy forms part of the Terms and Conditions and should be read together with the Cookie Policy, AML/KYC Policy, Deposit and Withdrawal Policy and other documents published on the Platform.

1.4. By using the Platform or submitting data, you acknowledge that you have read this Policy. Where processing requires consent, consent will be requested separately and may be withdrawn in accordance with this Policy and applicable law.

1.5. This Policy does not govern the independent processing activities of third-party websites, payment providers, banks, KYC providers or affiliates where they act as independent controllers.

2. Definitions and principles

2.1. “Personal Data” means information relating directly or indirectly to an identified or identifiable natural person.

2.2. “Processing” includes collection, recording, organisation, storage, alteration, use, disclosure, restriction, erasure and other operations involving Personal Data.

2.3. We seek to process Personal Data in accordance with the following principles:

• lawfulness, fairness and transparency;

• processing for specified and clearly communicated purposes;

• collecting only data necessary for those purposes;

• keeping data accurate and up to date;

• retaining data no longer than necessary;

• using reasonable technical and organisational security measures;

• maintaining records and being able to demonstrate compliance where required.

3. Data we collect

Category

Examples

Identity and registration data

First and last name, date of birth, country of residence, nationality, address, identity-document details and images, and other information provided during registration or verification.

Contact data

Email address, telephone number, correspondence address, language settings and preferred communication channels.

Account and profile data

User ID, registration date, verification status, Account settings, login history, selected Account currency, status and restrictions.

Trading and transaction data

Currency pair, direction, amount, opening and expiry time, quotes, outcome, potential and actual payout, balance, and activity on Live and Demo Accounts.

Payment data

Payment method, amount, currency, date and status, transaction identifier, bank or wallet details, masked card details, evidence of ownership, refunds and chargebacks.

KYC/AML and source-of-funds data

Documents and information used to verify identity, address, payment ownership, source and origin of funds, and the results of sanctions, fraud and related screening.

Technical data

IP address, browser type and version, device, operating system, language, time zone, approximate IP-based location, session identifiers, error logs, security data and suspicious-activity indicators.

Usage data

Pages visited, interface actions, session time and duration, clicks, settings, interaction with emails and notifications, and marketing source.

Communications and support

Support correspondence, requests, complaints, feedback, files and documents voluntarily submitted for handling a request.

Marketing and affiliate data

Marketing consents and opt-outs, referral code, affiliate or campaign identifier, referral source, registration time and data required for attribution and commission calculation.

3.1. We do not ask you to send passwords, two-factor authentication codes, a full payment-card number or CVV/CVC by email, chat or customer support.

3.2. Full payment credentials may be entered directly into a secure form operated by a payment provider. Depending on the technical arrangement, the Platform may receive only a token, masked details, instrument type and transaction status.

3.3. We do not intend to collect special categories of Personal Data unless required by law and separately disclosed. Do not submit health information, political opinions, religious beliefs, information about sex life or other sensitive information unless lawfully requested.

4. Sources of data

We may obtain Personal Data:

• directly from you when you register, verify your identity, fund or withdraw, place transactions or contact support;

• automatically from your device and the Platform when you visit or use the interface;

• from payment institutions, banks, wallets, KYC and fraud-prevention providers;

• from an affiliate or advertising platform through which you reached the Platform;

• from public, governmental, sanctions, anti-fraud and other lawfully available sources where a check is necessary;

• from another user who provides your details, provided there is a lawful basis for doing so.

5. Purposes and lawful bases

Purpose

Use and basis

Contract and service delivery

Creating an Account, providing Platform access, processing trading requests, calculating outcomes, maintaining records, providing support, deposits and withdrawals. Basis: steps to enter into and performance of a contract.

Identity and payment verification

KYC/AML, age and country checks, payment-instrument ownership, source of funds, sanctions, fraud and abuse screening. Basis: applicable legal obligations, the contract and/or legitimate interests in security and prevention.

Platform security

Protecting Accounts, detecting unauthorised access, automated abuse, multiple accounts, manipulation and technical attacks. Basis: legitimate interests and contract performance.

Payments and accounting

Deposits, withdrawals, refunds, reconciliation, accounting, disputes and fraud prevention. Basis: contract, legal obligations and legitimate interests.

Support and complaints

Responding to requests, investigating incidents and complaints and recording communications. Basis: contract, legal obligations and legitimate interests.

Analytics and improvement

Diagnostics, usage statistics, testing and improvement of the interface and functionality. Basis: legitimate interests; consent for non-essential analytics cookies where required.

Marketing

Informational and promotional communications, offer personalisation and campaign measurement. Basis: consent or legitimate interests where permitted and with an easy opt-out.

Affiliate attribution

Identifying the referring affiliate, preventing affiliate fraud and calculating commission. Basis: contract performance, legitimate interests and consent where required.

Legal compliance and claims

Complying with binding requirements, authority requests and court orders, and establishing, exercising or defending claims. Basis: legal obligation and legitimate interests.

5.1. The precise lawful basis depends on the user’s jurisdiction and applicable law. Where processing is based on consent, consent may be withdrawn for the future without affecting the lawfulness of processing before withdrawal.

5.2. Where data is required for the contract, KYC/AML, security or payment processing, failure to provide it may prevent Account registration or verification, funding, trading or withdrawal.

6. Registration, KYC/AML and payments

6.1. We may verify identity, age, country of residence, payment ownership, source of funds and related information before granting full access, during use of the Platform or before a withdrawal.

6.2. Verification may be performed by the Controller or a specialist provider. A provider may perform document recognition, authenticity checks, data matching, sanctions screening and fraud screening in accordance with its role and applicable law.

6.3. Payment organisations process transactions under their own rules. They may act as processors or independent controllers and may conduct their own checks.

6.4. Anonymous and third-party payments may be restricted. Statements, receipts or evidence of payment-instrument ownership may be requested.

6.5. We may restrict functions while a review is pending, but verification should not be used as an arbitrary reason to retain funds. Decisions are made under the Terms and Conditions, payment policy and applicable law.

7. Cookies and similar technologies

7.1. The Platform may use cookies, local storage, pixels, SDKs and similar technologies for sessions, security, preferences, analytics and marketing.

• Strictly necessary technologies support login, security, payments and core functions.

• Functional technologies remember language, region, settings and user choices.

• Analytics technologies help us understand usage, diagnose errors and improve functions.

• Advertising technologies measure campaigns, limit repetition and personalise advertising.

7.2. Non-essential cookies are used only after consent where required by law.

7.3. A separate Cookie Policy should list the actual technologies, providers, purposes and storage periods.

8. Sharing and recipients

We do not sell Personal Data for monetary consideration. Data may be disclosed only to the extent necessary for the stated purposes to:

• hosting, cloud infrastructure, database and backup providers;

• payment organisations, banks, card networks, wallets and currency-conversion providers;

• KYC/AML, sanctions, fraud-prevention and cybersecurity providers;

• analytics, cookie, communications, email/SMS, CRM and support providers;

• affiliated companies where necessary to operate the Platform and disclosed to users;

• professional advisers, auditors, lawyers, accountants and insurers under confidentiality obligations;

• courts, law-enforcement, tax and other authorities where a binding lawful request applies;

• an acquirer, successor or participant in a corporate transaction subject to appropriate safeguards.

8.1. Providers acting on our behalf receive only necessary data and are required to process it under instructions, contract and applicable law.

8.2. If applicable law treats disclosures to advertising or analytics providers as a “sale” or “sharing” of data, the legally required opt-out mechanism will be made available.

9. Affiliate programme and attribution

9.1. If you arrive through an affiliate link or use a referral code, we may process an affiliate, campaign and click identifier, registration time, country, registration status and limited data required for attribution and fraud prevention.

9.2. An affiliate may receive limited information confirming that an attributed user completed an action relevant to commission. Passwords, KYC documents, full payment credentials, support content and detailed individual trading history should not be disclosed unless there is a separate lawful basis and clear notice.

9.3. Affiliates may collect data independently on their own websites and are then governed by their own privacy policies.

10. International transfers

10.1. Providers and recipients may be located outside your country, which may involve transfers to jurisdictions with different levels of legal protection.

10.2. Where applicable law requires safeguards, we use permitted mechanisms such as adequacy decisions, standard contractual clauses, contractual protections or other lawful bases.

11. Retention

We retain data no longer than necessary for the relevant purpose, taking into account contractual obligations, AML/KYC, accounting and tax requirements, fraud prevention and limitation periods.

11.1. At the end of the retention period, data is deleted, anonymised or aggregated unless continued retention is supported by a lawful basis.

11.2. Account deletion ends access but does not always result in immediate erasure of records that must or may be retained for legal, payment, fraud-prevention or dispute purposes.

12. Security and incidents

12.1. We use reasonable technical and organisational measures appropriate to the nature of the data and processing risk. These may include encryption in transit, access controls, role separation, logging, backups, monitoring, vulnerability management and provider assessments.

12.2. No method of transmission or storage is completely secure. You are responsible for protecting passwords, verification codes, email, telephone and devices and should report suspected compromise immediately.

12.3. If an incident occurs, we take steps to contain, investigate and mitigate it. Supervisory authorities and affected users are notified where and within the time required by applicable law.

13. User rights

Depending on applicable law, you may have the right to:

• receive information about processing and access your data;

• correct inaccurate or incomplete data;

• request erasure where legal conditions are met;

• restrict processing in specified cases;

• receive data in a structured, machine-readable format and transmit it to another controller;

• object to processing based on legitimate interests;

• opt out of direct marketing at any time;

• withdraw consent for future processing;

• request human review of a decision based solely on automated processing where such a right applies;

• lodge a complaint with a competent data-protection authority.

13.1. Requests should be sent to support@atlant-trade.net. We may ask for identity verification and clarification to avoid disclosing data to an unauthorised person.

13.2. We respond within the period required by applicable law. A request may be limited or refused where it is manifestly unfounded or excessive or would adversely affect the rights of others, with reasons provided where required.

13.3. Rights are not absolute. Data may be retained to comply with a mandatory duty, prevent fraud or establish, exercise or defend legal claims.

14. Automated processing

14.1. We may use automated rules and models to assess fraud risk, verify documents, detect suspicious payments, technical attacks, multiple Accounts and other misuse.

14.2. Automated processing may lead to additional review, temporary delay or restriction. Where required by law, a decision producing significant effects will not be based solely on automation without an opportunity for human review.

14.3. The general logic involves comparing user, device, payment and behavioural information with known risk indicators. We do not disclose details that would enable circumvention, but will provide legally required information about consequences and review rights.

15. Minors

15.1. The Platform is not intended for anyone under 18 or a higher age of majority applicable in the user’s country.

15.2. If we learn that a minor’s data has been submitted without a lawful basis, the Account may be blocked and the data deleted or retained only as necessary to prevent re-registration, return funds and comply with law.

16. Marketing and communications

16.1. We may send necessary service messages concerning security, verification, payments, document changes and Account operation. These are not marketing and may be necessary to provide the Platform.

16.2. Promotional communications are sent on the basis of consent or another permitted basis. You may opt out through the message link, Account settings or by contacting support@atlant-trade.net.

16.3. Opting out of promotions does not stop required service notices. We may retain an address or number on a suppression list to respect the opt-out.

17. Third-party sites and services

17.1. The Platform may contain links or embedded elements operated by third parties. Their processing is governed by their own policies.

17.2. You should review a third party’s policy before submitting data. We do not control an independent controller’s activities, although we seek to select providers with reasonable safeguards.

18. Policy changes and language

18.1. We may update this Policy because of legal, functional, provider or processing changes. The current version is published on the Platform with its update date.

18.2. Material changes will be communicated through the website, Account, email or another reasonable method before they take effect where required by law.

18.3. This Policy may be available in several languages. If versions conflict, the English version prevails to the extent permitted by applicable law.

19. Contact details and complaints

For questions regarding the use of Personal Data and the exercise of your rights, please contact: support@atlant-trade.net.