Privacy Policy (draft)

1. Who we are

SFB Market Ltd, [ADDRESS], is the data controller. Data protection contact: privacy@sfbmarket.com.

2. What we collect

Identity: name, date of birth, nationality, ID documents, selfie for verification.
Contact: email, phone, address.
Financial: source of funds, bank and card details (card numbers are tokenised by our payment partners and never stored by us), transaction history.
Trading: orders, positions, platform logs, IP address and device data.
Communications: emails, chats and recorded calls with support.

3. Why we use it

To open and run your account (contract).
To meet AML, KYC, sanctions and regulatory reporting duties (legal obligation).
To detect fraud and abuse (legitimate interest).
To send service notices; marketing only with your consent, which you can withdraw at any time.

4. Who we share it with

Identity-verification providers, payment processors, our liquidity and technology providers, auditors, regulators and law enforcement where required, and our group companies. We never sell personal data.

5. International transfers

Some providers are outside [COUNTRY]. Transfers are covered by contractual safeguards.

6. Retention

Account and transaction records are kept for at least [7] years after the account closes, as required by law. Marketing data is deleted when you withdraw consent.

7. Your rights

You may request access, correction, deletion (where the law allows), restriction, portability and object to marketing by emailing privacy@sfbmarket.com. You may complain to [data protection authority].

8. Cookies

We use necessary cookies for login and security, and analytics cookies with your consent. See the cookie banner for choices.

9. Security

Data is encrypted in transit and at rest; access is role-based and logged; 2FA is available on all client accounts.