Privacy Policy

Information We Collect

We collect various types of information in connection with the services we provide, including:

1.1 Personal Information

When you register for an account or use our services, we may collect:

• Identity Information: Full name, date of birth, nationality, government-issued ID
• Contact Information: Email address, phone number, physical address
• Financial Information: Bank account details, payment card information, trading account details
• Verification Information: KYC (Know Your Customer) documents, proof of address, source of funds documentation
• Employment Information: Occupation, employer name, income information

1.2 Automatically Collected Information

When you access our platform, we automatically collect:

• Device Information: IP address, browser type, device type, operating system
• Usage Data: Pages visited, features used, time spent on platform, click patterns
• Trading Data: Transaction history, trading patterns, portfolio holdings, risk preferences
• Location Data: Approximate geographic location based on IP address
• Log Data: Server logs, error reports, performance data

1.3 Information from Third Parties

We may receive information about you from:

• Credit bureaus and fraud prevention agencies
• Identity verification services
• Payment processors and financial institutions
• Marketing partners and affiliates
• Public databases and regulatory authorities

How We Use Your Information

We use the information we collect for the following purposes:

2.1 Service Provision

• Create and manage your trading account
• Process transactions and execute trades
• Provide customer support and respond to inquiries
• Send service-related communications and notifications
• Facilitate deposits, withdrawals, and fund transfers

2.2 Compliance and Security

• Verify your identity and prevent fraud
• Comply with KYC/AML regulations and legal obligations
• Monitor for suspicious activity and market manipulation
• Conduct risk assessments and due diligence
• Respond to legal requests and regulatory inquiries

2.3 Platform Improvement

• Analyze usage patterns to improve our services
• Develop new features and functionality
• Conduct research and analytics
• Optimize platform performance and user experience
• Test new technologies and innovations

2.4 Marketing and Communications

• Send promotional materials and special offers (with your consent)
• Provide personalized recommendations and insights
• Conduct surveys and request feedback
• Inform you about new features and updates

Data Sharing and Disclosure

We may share your information with the following parties:

3.1 Service Providers

We work with trusted third-party service providers who assist us in operating our platform:

• Payment processors and banking partners
• Cloud hosting and storage providers
• Customer support and communication platforms
• Analytics and data processing services
• Identity verification and fraud prevention services
• Marketing and advertising partners

3.2 Legal and Regulatory Authorities

We may disclose your information when required by law or to:

• Comply with legal obligations, court orders, or subpoenas
• Respond to requests from regulatory authorities (FCA, ASIC, CySEC, etc.)
• Enforce our Terms of Service and other agreements
• Protect our rights, property, or safety
• Prevent fraud, security threats, or illegal activities

3.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity.

3.4 With Your Consent

We may share your information with other parties when you explicitly consent to such sharing.

Data Security

We implement comprehensive security measures to protect your information:

4.1 Technical Safeguards

• Encryption: 256-bit SSL/TLS encryption for all data in transit
• Data Storage: AES-256 encryption for data at rest
• Secure Infrastructure: SOC 2 Type II certified data centers
• Access Controls: Role-based access and multi-factor authentication
• Network Security: Firewalls, intrusion detection, and DDoS protection

4.2 Organizational Measures

• Regular security audits and penetration testing
• Employee training on data protection and security
• Incident response and disaster recovery plans
• Data minimization and privacy by design principles
• Third-party security assessments

4.3 Account Security

You can enhance your account security by:

• Using strong, unique passwords
• Enabling two-factor authentication (2FA)
• Regularly reviewing account activity
• Keeping your contact information up to date
• Not sharing your login credentials

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

5.1 Types of Cookies We Use

5.2 Third-Party Tracking

We may use third-party analytics and advertising services, including:

• Google Analytics
• Facebook Pixel
• LinkedIn Insights
• Mixpanel
• Hotjar

5.3 Managing Cookies

You can control cookies through:

• Your browser settings (most browsers allow you to refuse cookies)
• Our cookie consent tool (available on first visit)
• Your account preferences
• Industry opt-out tools like Network Advertising Initiative

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

6.1 General Rights

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Restriction: Limit how we use your information
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to certain types of processing, including direct marketing
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

6.2 GDPR Rights (EEA Residents)

If you are located in the European Economic Area, you have additional rights under GDPR:

• Right to lodge a complaint with a supervisory authority
• Right to object to automated decision-making and profiling
• Right to be informed about data processing activities

6.3 CCPA Rights (California Residents)

California residents have the following rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access personal information
• Right to equal service and price

6.4 How to Exercise Your Rights

To exercise any of these rights, please:

• Email us at privacy@indohmarket.com
• Use the privacy request form in your account settings
• Contact our Data Protection Officer

We will respond to your request within 30 days (or as required by applicable law).

International Data Transfers

As a global platform, we may transfer your information to countries outside your country of residence, including:

7.1 Transfer Mechanisms

When transferring data internationally, we use appropriate safeguards:

• Standard Contractual Clauses: EU-approved data transfer agreements
• Adequacy Decisions: Transfer to countries deemed adequate by relevant authorities
• Privacy Shield: Compliance with applicable frameworks
• Binding Corporate Rules: Internal data transfer policies

7.2 Data Processing Locations

Your data may be processed in the following regions:

• European Union (primary data centers in Ireland and Germany)
• United States (cloud infrastructure and analytics)
• United Kingdom (customer support and operations)
• Australia (regional data center)
• Singapore (Asia-Pacific operations)

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

8.1 Retention Periods

• Active Accounts: Data retained for the duration of your account plus applicable retention periods
• Closed Accounts: Most data deleted within 90 days, except where required by law
• Financial Records: Retained for 7 years to comply with tax and regulatory requirements
• KYC Documents: Retained for 5 years after account closure as required by AML regulations
• Transaction History: Retained for 7 years for audit and compliance purposes
• Communication Records: Retained for 3 years
• Marketing Data: Retained until you opt out or for 2 years of inactivity

8.2 Secure Deletion

When data is deleted, we:

• Use secure deletion methods to prevent recovery
• Remove data from all systems, including backups (within backup retention cycles)
• Maintain deletion logs for audit purposes

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@indohmarket.com. We will take steps to delete such information from our systems.

To use our platform, you must:

• Be at least 18 years old (or the age of majority in your jurisdiction)
• Have legal capacity to enter into binding contracts
• Comply with all applicable laws and regulations

Third-Party Services and Links

Our platform may contain links to third-party websites, applications, or services that are not operated by us.

10.1 Third-Party Privacy Practices

We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

10.2 Third-Party Services We Use

Our platform integrates with various third-party services, including:

• Payment processors (Stripe, PayPal)
• Identity verification (Jumio, Onfido)
• Communication tools (Intercom, Zendesk)
• Analytics platforms (Google Analytics, Mixpanel)
• Cloud services (AWS, Microsoft Azure)

10.3 Social Media

If you connect your account to social media platforms, those platforms may collect information about your use of our services according to their own privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

11.1 Notification of Changes

When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email for material changes
• Display a prominent notice on our platform
• Request your consent if required by applicable law

11.2 Your Acceptance

By continuing to use our services after changes become effective, you accept the updated Privacy Policy. If you do not agree to the changes, you must stop using our services and may close your account.

11.3 Previous Versions

You can request previous versions of this Privacy Policy by contacting privacy@indohmarket.com.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Regulatory Authorities

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority:

• UK: Information Commissioner's Office (ICO) - ico.org.uk
• EU: Your national Data Protection Authority
• Australia: Office of the Australian Information Commissioner (OAIC)
• USA: Federal Trade Commission (FTC)