Privacy Policy

Privacy Policy

Introduction
SmartGoldenFx (referred to as “we”, “us”, “our”, “ours”, “ourselves” and ‘’the Company”) is authorised and regulated by the Cyprus Securities and Exchange Commission (“CySEC”) as a Cyprus Investment Firm (“CIF”) with CIF license number 921/18, to conduct designated Investment and Ancillary Services and Activities to the Client under the Provision of Investment Services, the Exercise of Investment Activities, the Operation of Regulated Markets and Other Related Matters Law of 2017, Law 87(Ι)/2017, as subsequently amended or replaced from time to time (“the Law”) and authorised by the FSCA, South Africa (FSP No. 47857).
The Company is registered in Cyprus under the Companies Law, with registration number HE 414092. Our registered office address is at: 4c Olympou 4820 Platres Pano, 4820 Limassol, Cyprus, email: info@smartgoldenfx.com
This Privacy Notice Policy (“Privacy Notice”) is issued pursuant to and reflects compliance with the requirements and/or obligations and/or duties introduced by the EU General Data Protection Regulation 2016/679 (“GDPR”), as amended and replaced from time to time, the e-privacy Directive 2002/58/EC as amended and replaced by the Directive 2009/136/EC, as amended and replaced from time to time, their implementing legislations and the Cyprus Law on Data Protection, as amended and replaced from time to time (collectively referred to as the “Data Protection Laws”), in regards with any and all Personal Data or Information (“Personal Data” or “Data”) processing activities carried out by the Company.

2. Scope and Objective of the Privacy Notice
The Company respects individuals’ rights to privacy and the protection of Personal Data. The scope of this Privacy Notice is to explain and elaborate on how we collect, use, process and store Personal Data in the course of our business. Personal Data means any information relating to an identified or identifiable natural person (“Data Subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. The Company may update the Privacy Notice from time to time. When we make any updates, we will communicate such updates to you and publish the updated Privacy Notice on our website, namely https://www.smartgoldenfx.com
We would encourage you to visit our websites regularly to stay informed about the purposes of processing of your Personal Data and your rights to control how we collect, use or process your Personal Data.

3. The Personal Data we process
We collect, use and process various categories of Personal Data at the start of, and for the duration of, your business relationship with us. The Company will limit the collection and processing of Personal Data to the necessary Data to meet the purpose and legal basis as described in Section 5 of this Privacy Notice.
Personal Data may, inter alia, include:
1. Basic Personal Data, including but not limited to name, residential address, date of birth, email address, telephone number, citizenship, marital status, family and next of kin information and contact details of such persons;
2. Financial status information including but not limited to source of income, gross income, net worth, transactional and trading history, deposits and withdrawal requests, financial needs and goals;
3. Purpose and reason of account including but not limited to the nature of the transactions and the anticipated account turnover;
4. Employment status information including the industry of employment and position of employment;
5. Education information including but not limited to field of study and level of study;
6. Visual images including but not limited to copies of passports, identity cards and driver’s license;
7. Online profile and social media information and activity based on your interaction with us, our websites and applications including but not limited to trading account profile, login information, Internet Protocol (IP) address, smart device information, location coordinates, mobile phone network information, searches and site visits;
8. Trading experience information;
9. Bank account details including but not limited to IBAN number, SWIFT code, account number and Sort Code (where applicable).
The Company may also process certain special categories of Personal Data for specific and limited purposes and only on the basis of an explicit consent granted by you or on any other legal basis, as described in the Section 5 of this Privacy Notice. These special categories of Personal Data include:
1. Physical or psychological health details or medical conditions;
2. Information about racial or ethnic origin;
3. Religious or philosophical beliefs;
4. Biometric information, relating to the physical, physiological or behavioural characteristics of a person, including but not limited to using voice recognition or similar technologies whatsoever to prevent fraud and/or money laundering activities.
When you open an account with us, a unique account number will be issued as well as a User ID and password. Only certain employees of the Company shall have access to your account number and User ID. However, please note that you are fully responsible for the secrecy of your account number, User ID and password. As a result, if you disclose your account number, User ID and/or password by any means, to any person, you shall be considered as fully responsible for such action. Subject to the Law, the Company may process Personal Data about criminal convictions or offences and/or alleged offences for specific and limited activities and purposes including but not limited to perform checks to prevent and detect crime and comply with the Law relating to Anti-money laundering and terrorist financing, fraud, bribery, corruption and international sanctions. It may involve investigating and gathering intelligence on suspected financial crimes, fraud and threats and sharing Data between credit or financial organisations, CySEC or other Competent or other authorities, including non-governmental authorities in any jurisdiction within or outside the European Economic Area (“EEA”).

4. How Personal Data is collected
Your Personal Data is collected:
1. From you;
2. From third parties – including subsidiaries or sister companies of the Company, third parties who provide services to you or us including but not limited to Business Introducers (hereinafter referred to as the “BIs”), Affiliates and/or Tied Agents, established or located within and/or outside the EEA;
3. Credit reference and fraud prevention agencies, banks or other financial institutions, third authentication service providers and the providers of public registers;
4. During our business relationship with you and the way you operate your account/s including but not limited to your trading activity, deposits, withdrawals;
5. From the technology that you use to access our services including location data from your mobile phone, or an IP address or telephone number and how you use it;
6. From publicly available sources including the press, company registers and online search engines whatsoever.
1. It is your duty and responsibility to provide us with updates as to the Personal Data provided in order for such Data to remain current, accurate and correct and you acknowledge that we rely on the Personal Data provided to us in carrying out our obligations, under the law and our business relationship with you.
2. Where you are a non-physical person providing to us Personal Data of any other individual or where you are an individual providing us with Personal Data of any individual other than yourself, you hereby undertake and represent that such individual, whose Personal Data is collected, used, processed and stored in accordance with this Privacy Notice, has been fully informed of and clearly consented in writing to such collection, use, processing and store of his/her Personal Data under this Privacy Notice and that he/she has been informed of his/her rights in relation to the Personal Data which is collected, used, processed and stored, under this Privacy Notice.

5. Purpose and Legal Basis of processing Clients’ Personal Data
We would like to ensure that you fully understand the purpose and the legal basis of collecting, using, processing and storing of your Personal Data. Thus, in this Section we will describe the purposes for which your Personal Data may be used as well as the legal basis of processing of your Personal Data.
5.1. Purpose
We will only collect, use, process, store, share or transfer your Personal Data where it is necessary for us to carry out our lawful business activities and provide our services and/or products.

5.2. Legal Basis
We have described the Legal Basis for which your Personal Data may be used in the following terms. We may process your Personal Data where it is necessary to enter into a contract with you for the provision of our products or services or to perform our obligations or duties under such contract.
The Data that may be collected, used, processed and stored on the basis of contractual necessity include, inter alia, the following:
1. Client’s name;
2. IP address;
3. Email;
4. Date of birth;
5. Bank Account details;
6. History of Transactions;
7. Payment method information;
8. Withdrawal information;
9. Information about payment cancellation;
10. Wire transfer Document; and
11. Payment method ownership.
Please note that if you do not agree to provide us with the Data outlined above, we may be obliged to suspend the operation of your account and/or the services and/or products provided to you.

5.3. Legal & Regulatory Obligations When you register for a product or service and throughout your relationship with us, we are required by the Law to collect, use, process and store certain Personal Data about you. This may include Personal Data necessary:
1. To comply with any and all legal or regulatory obligations whatsoever under the Laws and Regulations, in any jurisdiction, within or outside the EEA;
2. To be used in the Courts, Law Enforcement Agencies, Regulatory Agencies, and other public or Competent or tax authorities or other authorities, governmental or not, in any jurisdiction, within or outside the EEA;
3. To carry out checks in relation to anti-money laundering and terrorist financing, bribery, fraud, and/or sanctions whatsoever as required by the laws and regulations;
4. To protect our rights, privacy, safety or property whatsoever; and/or
5. To be used for the prevention, detection or investigation of crimes whatsoever.
The Data that may be collected, used, processed and stored on the basis of legal or regulatory obligations of the Company include, inter alia, the following:
1. Client’s name;
2. Date of birth;
3. Information on whether you are an US citizen;
4. Anticipated account turnover;
5. Purpose and reason for account (e.g. speculation, hedging);
6. Information about the Nature of transactions;
7. Information about your source of income;
8. Information about your Gross income;
9. Information about your Net worth;
10. Politically Exposed Person (“PEP”) status;
11. Information about trading experience;
12. Copy of Passport, national ID or drivers’ license;
13. Third party proof of identity;
14. Telephone recordings/telephone verification between you and the Company or Company’s employees, associates, whatsoever, in regards with your trading activity or Orders or provision of services or enquiries or complaints or support or verification whatsoever;
15. Tax Identification Number (“TIN”);
16. Citizenship; and
17. Trading activity/transactions [Trade Repositories (“CCPs”), Approved Reporting Mechanisms, (“ARMs”)].
Please note that if you don’t agree to provide us with the Data outlined above we may have to suspend the operation of your account and/or the services and/or products provided to you.

Legitimate Interest of the Company
We may collect, process, use, and store your Personal Data where it is in our legitimate interests and without prejudicing your interests or fundamental rights and freedoms.
We may process your Personal Data to manage our business, financial affairs as well as to protect our employees, Clients and property. It is in our interests to ensure that our processes and systems operate effectively and that we can continue operating as a business.
This may include processing of your Data to:
1. Monitor, maintain and improve internal business processes, information and data, technology and communications solutions and services;
2. Ensure business continuity and disaster recovery responding to information technology and business emergencies;
3. Ensure network and information security, including but not limited to monitoring authorised users’ access to our information technology for the purpose of preventing cyber-attacks, unauthorised use of our telecommunications, trading or other systems and websites, prevention or detection of crime and protection of your Personal Data;
4. Provide assurance on the management of the Company’s material risks;
5. Perform general, financial and regulatory accounting and reporting; and
6. Protect our legal rights and interests.
It is in the Company’s interest to ensure that we provides you with the most appropriate products and services. This may require processing of your Data to enable us to:
1. Understand your actions, behaviour, preferences, expectations, feedback and financial history in order to improve our products and services, develop new products, new business opportunities and services, and to improve the relevance of products offered;
2. Monitor and improve the performance and effectiveness of products and services.
The Data that may be collected, used, processed and stored on the basis of legitimate interest of the Company include, inter alia, the following:
1. Address, ZIP code, country of location;
2. Information about employment status;
3. Information about industry of employment;
4. Information about position of employment;
5. Information about level of education;
6. Information about field of study;
7. Utility bill;
8. Bank confirmation letter;
9. Declaration of address;
10. Deposit Statement;
11. Copy of Bank statement;
12. Telephone recordings/telephone verification (for the purpose of customer service or support improvement whatsoever);
13. Payment method ownership;
14. Telephone number, email, fax (only for the purposes of the Section 9 of this Privacy Notice);
15. Copy of Credit Card; and
16. Bank Account details.
Please note that if you don’t agree to provide us with the Data outlined above we may have to suspend the operation of your account and/or the services and/or products provided to you.

7. Special Category of Data – Client’s Consent
For special category of data as well as for research, statistical or marketing purposes we may only collect, use, process and store Personal Data where an explicit consent has been granted.
The Data that may be collected, used, processed and stored on the basis of legitimate interest of the Company include, inter alia, the following:
1. Telephone number (for marketing or statistical or research purposes whatsoever).
8. Client’s Rights
8.1 Outline
The Company takes all the appropriate measures to make sure that you are fully informed about your rights in regards with all Personal Data we collect, process, use and store.
As a result, all rights and the circumstances under which such rights may be exercised are described in the table below. In the event you wish to exercise any of the rights described below or if you have any queries about how we collect, use, process or store your Personal Data that are not answered in this Privacy Notice, or if you wish to complain to our Data Protection Officer, please contact us at info@smartgoldenfx.com or at our office address: 4c Olympou 4820 Platres Pano, 4820 Limassol, Cyprus.
Please note that in some cases, if you do not agree to the way we collect, use, process or store your Personal Data, it may not be possible for us to continue providing you with our services and/or Products and as a result your account will be suspended and/or closed.
8.2 Explanation Of Client’s Rights

RIGHTS EXPLANATION
Access – You have the right to get access to the Personal Data including the records of any and all telephone conversations, email and/or text message correspondence, between you and the Company, held by the Company. If you would like a copy of your Personal Data held by the Company, please contact us at info@smartgoldenfx.com or at our office address: 4c Olympou 4820 Platres Pano, 4820 Limassol, Cyprus.
Rectification – You have a right to rectification of inaccurate Personal Data and to update incomplete Personal Data. In case you believe that any of the Personal Data held by the Company is inaccurate, you are entitled to request to restrict the processing of that Personal Data and rectify the inaccuracies. Please note that if you request us to restrict processing your Personal Data we may have to suspend the operation of your account and/or the services and/or products provided.
Erasure – You have a right to request to delete your Personal Data. You may request to delete your Personal Data in case you believe that: · the Company no longer needs to process your Personal Data for the purposes for which it was provided; · the Company requested your consent to process your Personal Data but you withdraw your consent; · the Company is not using your Personal Data in a lawful manner. Please note that if you request us to restrict processing your Personal Data we may have to suspend the operation of your account and/or the services and/or products
Restriction – You have a right to request us to restrict the processing of your Personal Data. You may request us to restrict processing your Personal Data in case you believe that: · any of your Personal Data held by the Company is inaccurate; · the Company no longer needs to process your Personal Data for the purposes for which it was provided, but you require such Data to establish, exercise or defend legal proceedings; · the Company is not using your Data in a lawful manner. Please note that if you request us to restrict processing your Personal Data we may have to suspend the operation of your account and/or the services and/or products provided
Portability – You have a right to data portability. Where the Company asks for your permission in order to process your Personal Data or where you have provided us with Data for the purposes of entering into a contract with us, you have a right to receive the Personal Data you provided to us in a portable format. Where it is feasible, you may also request us to provide it directly to third parties. However, in such case the Company shall not be responsible for any such third parties’ use of your Personal Data, which will be governed by their agreement with you and any privacy statement they provide to you.
Objection – You have a right to object to the processing of your Personal Data. You have a right to object to us processing your Personal Data on the basis of the legitimate interest as described in the Section 5 of this Privacy Notice – unless we can demonstrate compelling and legitimate grounds for the processing, which may override your own interests, or where we need to process your Personal Data to investigate and protect us or others from legal proceedings.
Marketing – You have a right to object to direct marketing. You have a right to object at any time to collect, use, process or store your Personal Data for direct marketing purposes, including profiling you for the purposes of direct marketing.
Withdraw consent – You have a right to withdraw your consent.