Your privacy matters. Riftvol Markets Ltd is committed to protecting your personal data. This policy explains what data we collect, why we collect it, how we use it and what rights you have. We act as the data controller for your personal information.
Section 01
Data We Collect
We collect personal data that you provide to us directly, data generated through your use of our services, and data obtained from third parties. The categories of personal data we collect include:
| Category | Examples | Source |
|---|
| Identity Data | Name, date of birth, nationality, government ID | You provide directly |
| Contact Data | Email address, phone number, postal address | You provide directly |
| Financial Data | Bank account details, transaction history, account balances | You & your bank |
| Technical Data | IP address, browser type, device ID, login timestamps | Automatically collected |
| Usage Data | Trading activity, pages visited, features used | Automatically collected |
| Marketing Data | Preferences, communication opt-ins | You provide directly |
We do not collect any special categories of personal data (such as health, biometric or political data) unless required by law or you have provided explicit consent.
Section 02
How We Use Your Data
We use your personal data for the following purposes:
- Account management: To create, verify and administer your trading account.
- Service delivery: To execute trades, process deposits and withdrawals, and provide customer support.
- Regulatory compliance: To meet our obligations under FCA rules, anti-money laundering (AML) laws, and other applicable regulations.
- Risk management: To detect, investigate and prevent fraud, market abuse and other illegal activities.
- Platform improvement: To analyse usage patterns and improve our services, features and user experience.
- Marketing: To send you relevant information about our products and services, where you have consented or where we have a legitimate interest.
- Legal proceedings: To establish, exercise or defend legal claims.
Section 03
Legal Basis for Processing
Under UK GDPR and the Data Protection Act 2018, we rely on the following legal bases to process your personal data:
- Contract performance: Processing necessary to perform the Client Agreement and provide trading services.
- Legal obligation: Processing required to comply with FCA, HMRC, AML and other regulatory requirements.
- Legitimate interests: Processing for fraud prevention, security, business analytics and service improvement, where these interests are not overridden by your rights.
- Consent: For marketing communications and cookies where consent is required. You may withdraw consent at any time.
Note: Where we rely on legitimate interests, you have the right to object to this processing. Please contact our Data Protection Officer if you wish to do so.
Section 04
Data Sharing & Transfers
We may share your personal data with the following categories of recipients:
- Group companies: Other entities within the Riftvol group for internal administrative purposes.
- Service providers: Third-party vendors who provide IT, payment processing, identity verification and customer support services on our behalf.
- Regulators & authorities: The FCA, HMRC, law enforcement agencies or courts where required by law or to protect our legal rights.
- Professional advisers: Lawyers, auditors and consultants under confidentiality obligations.
- Business transfers: In connection with any merger, acquisition or sale of all or part of our business.
We do not sell your personal data to third parties for their own marketing purposes.
Where we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place — such as UK Adequacy Regulations, Standard Contractual Clauses or Binding Corporate Rules — to protect your data to an equivalent standard.
Section 05
Your Rights
Under UK data protection law, you have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you (Subject Access Request).
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your data where it is no longer necessary for the purpose it was collected, or where you withdraw consent.
- Right to restrict processing: Request that we limit how we use your data in certain circumstances.
- Right to data portability: Receive your data in a structured, commonly used format and transfer it to another controller.
- Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
- Rights related to automated decisions: Not to be subject to decisions made solely by automated means that significantly affect you.
To exercise any of these rights, please contact our Data Protection Officer. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Section 06
Cookies & Tracking
We use cookies and similar tracking technologies to provide and improve our services, personalise your experience, and measure the performance of our marketing. The types of cookies we use include:
- Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled.
- Performance cookies: Help us understand how visitors use the Platform by collecting anonymous analytics data.
- Functional cookies: Remember your preferences and settings to improve your experience.
- Marketing cookies: Used to deliver relevant advertisements and measure campaign effectiveness. These require your consent.
You can manage your cookie preferences at any time through our Cookie Settings panel or by adjusting your browser settings. Note that disabling certain cookies may affect the functionality of our services.
Section 07
Contact Our Data Protection Officer
If you have any questions about this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer: