Privacy Policy

This Privacy Policy applies to the Spiral Global website, trading platforms, applications, and related services (collectively, the "Services"). It explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our Services.

To provide our financial services and comply with regulatory requirements (such as AML/KYC), we collect several different types of information:

Personal Identification Information

• Full name, date of birth, and gender.
• Contact details including email address, physical address, and phone number.
• Government-issued identification (Passport, National ID, Driver's License).
• Proof of residence (Utility bills, bank statements).

Financial Information

• Bank account details, credit card numbers (partially masked), or electronic payment identifiers.
• Information regarding your financial status, trading experience, and risk profile (required for regulatory suitability assessments).
• Source of funds and verification declarations.

Automated & Technical Data

• IP addresses, browser types, and device identifiers.
• Trading activity, platform execution statistics, and interaction data.
• Cookies and similar tracking technologies (please see our separate Cookie Policy).

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site or our Services to:

• Create, manage, and verify your trading account (KYC/AML compliance).
• Process your account funding, withdrawals, and trade execution orders.
• Deliver customer support and respond to your inquiries.
• Monitor and analyze usage and trends to improve your experience with the Site.
• Send administrative information, such as updates to terms, conditions, and policies.
• Notify you of updates, new platform features, or relevant market analysis (you can opt-out at any time).
• Prevent fraudulent transactions, monitor against theft, and protect against unauthorized trading activity.

We do not sell, trade, or rent your personal data. However, we may share information we have collected about you in certain situations:

Third-Party Service Providers

We may share your information with third parties that perform services for us or on our behalf, including payment processing, identity verification, data analysis, email delivery, hosting services, and customer service.

Regulatory and Legal Obligations

If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation. This includes exchanging information with financial regulators and law enforcement.

International Transfers

As a global brokerage, your data may be transferred to, and maintained on, servers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. We ensure appropriate safeguards are in place for all international transfers.

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable.

We implement AES-256 encryption for data at rest and TLS 1.3 for data in transit. Access to personal data is strictly limited to authorized personnel on a need-to-know basis.

Retention: We retain personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. Typically, financial regulators require us to hold client transaction data and KYC documents for 5 to 7 years after account closure.

Depending on your location (such as the EEA, UK, or California), you may have certain rights regarding your personal information:

• Right to Access: Request copies of your personal data.
• Right to Rectification: Request that we correct any information you believe is inaccurate.
• Right to Erasure ('Right to be Forgotten'): Request that we erase your personal data, subject to our regulatory retention obligations.
• Right to Restrict Processing: Request that we restrict the processing of your personal data.
• Right to Data Portability: Request that we transfer the data that we have collected to another organization, or directly to you.

If you would like to exercise any of these rights, please contact our Data Protection Officer using the details provided below.