Privacy Policy

1. Data we collect

• Account data: name, email address, phone, country and password (stored as a secure hash).
• Identity (KYC) data: document type and number, provided to verify your identity. Sensitive identifiers are encrypted at rest.
• Financial data: deposit, investment and withdrawal records, and — where you provide them — bank account details, which are encrypted at rest.
• Usage & device data: IP address, browser type, pages viewed and similar technical data collected via cookies and logs.
• Support data: messages you send us through support requests.

2. How we use your data

• to create and operate your account and provide the Service;
• to process deposits, investments, withdrawals and referrals;
• to verify your identity and prevent fraud and money laundering;
• to send transactional emails (e.g. verification, deposit/withdrawal updates);
• to provide support and respond to your requests;
• to measure and improve the Service, and — with your consent — for marketing; and
• to comply with legal and regulatory obligations.

3. Legal bases (UK GDPR)

We rely on: performance of a contract (to provide the Service); legal obligation (KYC/AML, accounting); legitimate interests (security, fraud prevention, service improvement); and consent (non-essential cookies and marketing, which you can withdraw at any time).

4. Who we share data with

We share data only with providers that help us run the Service, including:

We may also disclose data where required by law, regulation or lawful request, or to protect our rights and users.

5. International transfers

Some providers process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

6. Retention

We keep personal data for as long as your account is active and thereafter only as long as needed for the purposes above or to meet legal, tax and regulatory requirements.

7. Security

We protect your data with encryption in transit and at rest for sensitive fields, hashed passwords, access controls and monitoring. No method of transmission or storage is completely secure, but we work to protect your information and to notify you of incidents where required.

8. Your rights

Subject to law, you have the right to access, correct, delete or export your data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email support@capitaltrade.world. You may also complain to the UK Information Commissioner's Office (ICO).

9. Cookies

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are only set with your consent.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

11. Changes & contact

We may update this policy and will post the new version here. Questions or requests? Email support@capitaltrade.world.