At LumaTrade ("we", "us", "our", or "Company"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trading platform and services ("Service").

By using our Service, you consent to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

1. Information We Collect

We collect several types of information from and about users of our Service:

1.1 Personal Information

When you register for an account, we collect:

• Full name and contact information (email address, phone number)
• Date of birth and government-issued identification documents
• Proof of address (utility bills, bank statements)
• Financial information (bank account details, payment card information)
• Selfie photo for identity verification
• Tax identification numbers (where required by law)

1.2 Trading and Transaction Information

We collect information about your trading activities, including:

• Trading history, positions, and transaction records
• Account balance and transaction amounts
• Deposit and withdrawal records
• Trading preferences and risk profile

1.3 Technical Information

When you access our Service, we automatically collect:

• IP address and device information
• Browser type and version
• Operating system
• Usage data, including pages visited, time spent, and features used
• Cookies and similar tracking technologies
• Log files and error reports

1.4 Communications

We collect information from your communications with us, including:

• Customer support inquiries and responses
• Feedback and survey responses
• Correspondence with broker-mentors

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Service Provision

• To create and manage your trading account
• To process and execute your trading orders
• To facilitate deposits and withdrawals
• To provide customer support and respond to your inquiries
• To connect you with broker-mentors
• To customize your trading experience

2.2 Compliance and Legal Obligations

• To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• To verify your identity and prevent fraud
• To comply with tax reporting requirements
• To respond to legal requests and court orders
• To enforce our Terms of Service

2.3 Security and Risk Management

• To detect and prevent fraud, unauthorized access, and other security threats
• To monitor for suspicious trading activity
• To assess and manage credit and financial risks
• To protect the integrity of our platform

2.4 Business Operations

• To improve our Service and develop new features
• To conduct analytics and research
• To send you important updates about your account and the Service
• To provide marketing communications (with your consent, where required)
• To conduct surveys and gather feedback

3. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: To perform our contract with you and provide the Service
• Legal Obligation: To comply with applicable laws and regulations
• Legitimate Interests: To operate our business, prevent fraud, and improve our Service
• Consent: Where you have provided explicit consent for specific processing activities

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our platform, including:

• Payment processors and financial institutions
• Cloud hosting and infrastructure providers
• Identity verification and KYC service providers
• Customer support platforms
• Analytics and marketing service providers

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal and Regulatory Requirements

We may disclose your information when required by law or to:

• Comply with court orders, subpoenas, or legal processes
• Respond to requests from government or regulatory authorities
• Enforce our Terms of Service or protect our rights
• Investigate potential violations or fraudulent activity

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

4.4 With Your Consent

We may share your information with third parties when you have explicitly consented to such sharing.

5. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL protocols. Sensitive data is encrypted at rest using AES-256 encryption
• Access Controls: We limit access to your personal information to authorized employees and service providers who need it to perform their duties
• Authentication: We require strong passwords and offer two-factor authentication (2FA) for additional security
• Monitoring: We continuously monitor our systems for security threats and vulnerabilities
• Regular Audits: We conduct regular security audits and assessments
• Secure Storage: Financial data and sensitive documents are stored in secure, encrypted databases

Despite these controls, no Internet transmission or storage system can be guaranteed 100% secure. We continuously improve safeguards and response procedures to reduce risk.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide you with our Service
• Comply with legal and regulatory obligations (including AML/KYC requirements, which may require retention for up to 7 years)
• Resolve disputes and enforce our agreements
• Maintain accurate financial and trading records

When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention policies and applicable law.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

8.1 Access and Portability

You have the right to access and receive a copy of your personal information in a structured, commonly used format.

8.2 Correction

You may request correction of inaccurate or incomplete personal information.

8.3 Deletion

You may request deletion of your personal information, subject to our legal and regulatory obligations to retain certain data.

8.4 Objection and Restriction

You may object to certain processing activities or request restriction of processing in specific circumstances.

8.5 Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time. This will not affect the lawfulness of processing before withdrawal.

8.6 Marketing Communications

You can opt out of marketing communications by clicking the unsubscribe link in our emails or by contacting our support team.

To exercise these rights, please contact us through our support channels. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and improve our Service. Cookies are small text files stored on your device.

We use the following types of cookies:

• Essential Cookies: Required for the Service to function properly
• Analytics Cookies: Help us understand how users interact with our platform
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Service.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete such information promptly.

11. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy on our website and updating the "Last updated" date.

Your continued use of our Service after such changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through support channels available on the platform.

For data protection inquiries, you may also contact our Data Protection Officer (if applicable) through the same channels.

By using LumaTrade, you acknowledge that you have read and understood this Privacy Policy and consent to our data practices as described herein.