Introduction
Effective Date: September 16, 2026
Fortexa ("Fortexa," "we," "us," or "our") operates an online platform for trading Contracts for Difference ("CFDs") on instruments such as cryptocurrencies, forex, indices, commodities, and other underlying assets. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you open an account, access our website or applications, or otherwise use our trading and related services (collectively, the "Services").
CFDs are complex leveraged products that carry a high risk of losing money rapidly. This document concerns the processing of your personal data only; it is not a risk disclosure or investment advice. Please also review our Terms and Conditions and Risk Disclosure Statement.
By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. Where required by applicable data protection law, we process your personal data on the legal bases described below rather than relying solely on your acceptance of this notice.
Information You Provide
When you register and use a Fortexa account, we may collect:
- Identity Information: Full name, date of birth, nationality, gender, and government-issued identification (such as a passport, national ID, or driver's licence), together with photographs or selfies used for identity verification.
- Contact Information: Email address, telephone number, residential address, and other contact details.
- Financial & Suitability Information: Cryptocurrency wallet addresses and blockchain transaction details, source of funds and source of wealth, income range, employment and occupation, and information about your trading knowledge and experience used to assess the appropriateness of leveraged products for you.
- Trading & Account Information: Username, password, security questions, account preferences, balances, crypto deposits and withdrawals, open and closed CFD positions, order history, leverage and margin levels, profit and loss, and related transaction data.
- KYC / AML Information: Information required to comply with Know Your Customer, Anti-Money Laundering (AML), Counter-Terrorism Financing (CTF), and sanctions-screening obligations, including proof of address, politically-exposed-person (PEP) status, and tax-residency details.
- Communications: Records of your correspondence with us, including support tickets, chat messages, and, where permitted by law, recordings of telephone calls.
Information Collected Automatically
When you access or use our Services, we may automatically collect:
- Device Information: IP address, device type, browser type and version, operating system, device identifiers, and similar technical information.
- Usage Information: How you interact with the platform, including pages and instruments viewed, features used, session duration, and trading behaviour.
- Location Information: General location derived from your IP address, used in part to confirm eligibility and apply jurisdictional restrictions.
- Cookies & Similar Technologies: Data collected through cookies and similar tools, as described in our Cookie Policy.
How We Use Your Information
We use your information for the following purposes:
Providing and Operating the Trading Service
- Opening, maintaining, and administering your trading account
- Executing your orders and managing your CFD positions, margin, and leverage
- Processing deposits, withdrawals, and settlement of profit or loss
- Providing customer support and responding to your requests
- Maintaining, securing, and improving the platform and its features
Compliance, Risk, and Security
- Verifying your identity and conducting KYC, AML, CTF, and sanctions checks
- Assessing the appropriateness of leveraged products and applicable limits
- Detecting, investigating, and preventing fraud, market abuse, and prohibited activity
- Complying with legal, regulatory, tax, and reporting obligations
- Managing operational and financial risk and conducting audits
Communication and Marketing
- Sending service messages, margin and account notifications, and policy updates
- Where permitted, sending marketing about our products and services, subject to your preferences and applicable law
- Conducting surveys and collecting feedback to improve the Services
Where data protection law applies, we rely on one or more legal bases for this processing: performance of our contract with you, compliance with a legal obligation, our legitimate interests (such as security, fraud prevention, and improving our Services), and, where required, your consent.
How We Share Your Information
We may share your information with the following categories of recipients:
- Service Providers: Trusted third parties that help us operate the platform, including crypto payment and on-ramp processors, blockchain analytics and liquidity/execution providers, cloud and hosting providers, identity-verification and AML-screening vendors, analytics providers, and customer-support tools.
- Affiliates and Business Partners: Companies within the Fortexa group and partners that process data on our behalf under appropriate safeguards.
- Legal and Regulatory Authorities: Regulators, tax authorities, courts, and law-enforcement bodies where required by law, regulation, or legal process, or to establish, exercise, or defend legal claims.
- Corporate Transactions: In connection with a merger, acquisition, financing, or sale of assets, your information may be disclosed to counterparties and their advisers, subject to confidentiality.
We do not sell your personal information. When we share information with service providers, we require them by contract to use it only to provide services to us and to protect it consistently with this Privacy Policy.
International Data Transfers
Fortexa operates internationally and may transfer your information to countries other than your country of residence, including jurisdictions where we, our group companies, or our service providers operate.
Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland to a country that does not provide an adequate level of protection, we put in place appropriate safeguards, such as:
- Standard contractual clauses approved by the relevant authorities
- Binding confidentiality obligations on recipients of your information
- Appropriate technical and organisational security measures
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request that we correct inaccurate or incomplete information.
- Deletion: Request deletion of your personal information in certain circumstances.
- Restriction: Request that we restrict processing in certain circumstances.
- Data Portability: Request your information in a structured, commonly used, machine-readable format.
- Objection: Object to processing based on our legitimate interests or to direct marketing.
- Withdrawal of Consent: Where we rely on consent, withdraw it at any time without affecting prior lawful processing.
To exercise these rights, please contact us using the details in the "Contact Us" section. These rights may be limited where we have a legal or regulatory obligation to retain certain information — for example, AML and transaction records. You may also lodge a complaint with your local data protection authority.
Marketing Communications
You can opt out of marketing communications at any time by:
- Clicking the "unsubscribe" link in any marketing email
- Adjusting the communication preferences in your account settings
- Contacting us using the details in the "Contact Us" section
Even if you opt out of marketing, we will continue to send essential service communications, such as margin calls and account or security notifications.
We implement appropriate technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction. These measures include:
- Encryption of sensitive information in transit and at rest
- Controlled wallet infrastructure for client funds, with AML screening and withdrawal verification
- Access controls, multi-factor authentication, and the least-privilege principle
- Regular security assessments, monitoring, and testing
- Staff training on data protection and information security
No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information using commercially reasonable measures, we cannot guarantee absolute security.
Data Retention
We retain your information for as long as necessary to provide the Services, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Account, KYC, and transaction records are typically retained for the period required by applicable financial-services and AML legislation (commonly at least five years after the end of the business relationship). The specific retention period depends on:
- The nature and sensitivity of the information
- Legal, regulatory, and contractual requirements
- The purpose for which the information was collected
When information is no longer required, we will delete or anonymise it in accordance with our retention policies and applicable law.
Eligibility & Children's Privacy
Our Services are intended only for individuals who are at least 18 years old (or the age of majority in their jurisdiction) and legally eligible to trade leveraged products. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will take steps to delete it.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Post the updated Privacy Policy on our platform
- Update the "Effective Date" at the top of this Privacy Policy
- Notify you via a service announcement or email where required by law
We encourage you to review this Privacy Policy periodically. Your continued use of the Services after changes take effect constitutes acknowledgement of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or to contact our Data Protection Officer, please reach us at:
- Email: support.fortexatrade@gmail.com
- Data Protection Officer: support.fortexatrade@gmail.com
We will respond to your request in accordance with applicable law.
Last updated: September 16, 2026