Privacy Policy

1. Definitions

In this policy "we", "us" and "Finorix Pro" mean the operator of this website and platform. "You" means the person who visits the site or registers an account. "Personal data" means any data about an individual who can be identified from it, alone or together with other information we hold.

2. Personal data we collect

At registration we collect your first name, last name, email address and mobile number, together with the content of any message you send us. During verification we collect identity and address documents and a liveness image. When you use the platform we collect account activity, strategy settings and connection details for the exchanges you link.

3. Usage data

Our systems automatically record technical information such as your IP address, browser type and version, device identifiers, the pages you visit, the time spent on them and referring pages. We use it to keep the service secure, to diagnose faults and to understand how the site is used.

4. Cookies

Cookies are small files stored on your device. We use essential cookies to keep you signed in and to protect forms, and analytics cookies, only where enabled, to count visits. You can refuse or delete cookies in your browser settings, though parts of the site may then work less well.

5. Data controller and processors

Finorix Pro is the organisation responsible for deciding how and why your personal data is used. Hosting, identity verification, payment and communication suppliers act on our instructions as data intermediaries under the PDPA.

6. How we use your information

We use your information to respond to your enquiries, to open and run your account, to arrange a call from your personal manager, to verify identity, to process deposits and withdrawals, to meet legal and regulatory duties, to improve the platform and, with your consent, to send you information about our services.

7. Legal basis and consent

Under the PDPA we rely on your consent, which you give when you submit the registration form, and on deemed consent where you provide data for a purpose that is obvious from the context. Some processing is necessary to comply with the law, such as anti-money laundering checks, and some is based on legitimate interests such as fraud prevention. You may withdraw consent for marketing at any time.

8. Retention

We keep personal data only for as long as it is needed for the purpose it was collected for or as the law requires. Registration enquiries that do not become accounts are removed after twelve months. Verification and transaction records are kept for the period that anti-money laundering rules require after the relationship ends. Technical logs are kept for a limited period for security purposes.

9. Transfers outside Singapore

Some suppliers process data on servers outside Singapore. Where that happens we take steps to ensure the recipient provides a standard of protection comparable to the PDPA, usually through contractual safeguards, in line with the PDPA's transfer limitation obligation.

10. Disclosure

We disclose personal data to affiliated companies, to verification and technology providers, to the licensed counterparties through which transactions are executed, to professional advisers and, where legally required, to regulators and law enforcement authorities. We do not sell personal data.

11. Security

We use encryption, access controls, monitoring and staff training to protect personal data against loss, misuse and unauthorised access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Details of account protection are on the security page.

12. Your rights

You may ask for access to the personal data we hold about you, ask us to correct it, withdraw your consent and, where applicable, ask us to stop using or to delete it. Write to [email protected]. We will respond within the time allowed by the PDPA, and may need to verify your identity first.

13. Service providers

We use service providers for hosting, email delivery, customer support tools, identity verification and payment processing. Each is bound to use the data only to provide its service to us and to protect it appropriately.

14. Analytics

We may use analytics tools to measure traffic and improve content. Where those tools are enabled they receive limited, usually aggregated, information about visits. You can block them through your browser or device settings.

15. Advertising and retargeting

If we run advertising campaigns, advertising partners may set cookies to measure the effect of the campaign or show you relevant ads on other sites. This only takes place where you have allowed the corresponding cookies, and you can change your choice at any time.

16. Links to third-party sites

Our site may link to sites we do not run. Their privacy practices are their own, and we encourage you to read their policies before sharing information.

17. Children's privacy

Our services are not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided data to us, contact us and we will delete it.

18. Changes to this policy

We may update this policy when our practices or the law change. The revised version takes effect when posted on this page with a new date, and for significant changes we will tell registered clients by email.

19. Contact us

Our Data Protection Officer can be reached at [email protected] or by post at 10 Collyer Quay, #12-05, Ocean Financial Centre, Singapore 049315.