01 Introduction
This Data Protection Notice explains how ABDFX ("we," "our," or "us") collects, uses, and protects your personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other relevant privacy regulations.
We are committed to protecting your privacy and ensuring that your personal data is processed lawfully, fairly, and transparently. By using our website and services, you acknowledge and agree to the terms set out in this notice.
⚖️ Lawful
All data is processed on a lawful, fair, and transparent basis
Purpose-Bound
Data is only used for the specific purposes it was collected for
Protected
Comprehensive security measures protect your data at all times
02 Data Controller
The data controller responsible for your personal information is:
ABDFX
03 Personal Data We Collect
We collect and process different categories of personal data depending on your relationship with us:
3.1 Identity and Contact Information
Identity Data
- Full name, date of birth, and nationality
- Government-issued identification documents
- Passport or national ID details
Contact Data
- Email address and phone number
- Physical address and proof of address
- Communication preferences
3.2 Financial and Trading Information
Financial Data
- Bank account details and payment information
- Source of funds documentation
- Risk assessment and suitability information
Trading Data
- Trading history and transaction records
- Account balances and open positions
- Order history and execution details
3.3 Technical and Usage Information
Device Data
IP address, device type, browser type, and operating system
️ Usage Data
Website usage patterns, feature interactions, and preferences
Session Data
Login times, session duration, and communication logs
04 Legal Basis for Processing
We process your personal data on the following lawful grounds under applicable data protection legislation:
Contract Performance
- Account opening and maintenance
- Order execution and trade processing
- Risk management and compliance
- Customer support and communication
⚖️ Legal Obligations
- Anti-money laundering regulations
- Financial services regulatory requirements
- Tax reporting and filing obligations
- Record-keeping requirements
Legitimate Interests
- Fraud prevention and platform security
- Service improvement and development
- Marketing and business development
- Risk assessment and management
✅ Consent
- Marketing and promotional communications
- Sharing data with specific third parties
- Non-essential cookies and tracking
- Profiling for personalised services
05 How We Use Your Data
We use your personal data for the following clearly defined purposes:
Service Delivery
- Providing and maintaining trading services
- Processing transactions and managing accounts
- Executing orders and managing positions
️ Compliance & Security
- Complying with legal and regulatory requirements
- Preventing fraud and ensuring platform security
- Conducting risk assessments and due diligence
Communication
- Providing customer support and assistance
- Sending service-related notifications
- Sharing important account updates
Improvement
- Improving services and user experience
- Conducting analytics and research
- Marketing and business development (with consent)
06 Data Sharing and Transfers
6.1 Internal Sharing
Your data may be shared internally between different departments for legitimate business purposes, such as account management, compliance, and customer support. All internal access is governed by strict access controls.
6.2 Third-Party Sharing
We may share your data with trusted third parties only where necessary:
Service Providers
Technology and infrastructure partners who assist in our operations under strict data processing agreements
️ Regulatory Authorities
Government bodies, regulators, and law enforcement where legally required or obligated
Financial Institutions
Banks and payment processors required for processing deposits and withdrawals
⚖️ Legal Advisors
Legal and professional advisors when required for business or compliance purposes
6.3 International Transfers
Your data may be transferred to and processed in countries outside your jurisdiction. We ensure that all international transfers comply with applicable data protection laws and implement appropriate safeguards, including standard contractual clauses where required.
We do not sell your personal data to third parties. Any data sharing is conducted under strict legal agreements and only for the purposes described in this notice.
07 Data Security
We implement comprehensive, multi-layered security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction:
Encryption of sensitive data in transit and at rest using industry-standard protocols
Access controls and multi-factor authentication mechanisms for all systems
Regular security assessments, audits, and penetration testing by third parties
Ongoing employee training and awareness programmes on data protection
Documented incident response and breach notification procedures
Physical and environmental security controls at all data storage facilities
08 Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this notice, or as required by applicable law:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Information | Duration of account + 7 years | Legal and regulatory compliance |
| Transaction Records | 7 years from transaction date | Financial regulation requirements |
| Identity Verification Docs | 7 years from account closure | AML/KYC regulatory obligations |
| Marketing Data | Until consent withdrawal or 2 years | Consent-based processing |
| Compliance Records | As required by applicable regulations | FATF & regulatory requirements |
| Communication Logs | 3 - 5 years | Dispute resolution & compliance |
09 Your Data Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Right to Access
Obtain a copy of the personal data we hold about you
Right to Information
Be informed about how and why your data is being processed
Data Portability
Receive your data in a structured, machine-readable format
Right to Rectify
Correct inaccurate or incomplete personal data
Right to Restrict
Limit how we process your personal data in certain circumstances
Right to Object
Object to processing of your data based on legitimate interests
Right to Erasure
Request deletion of your personal data ("right to be forgotten")
Withdraw Consent
Withdraw any consent you previously gave for data processing
Automated Decisions
Request human review of any automated decision-making affecting you
As a regulated financial services provider, we must retain certain data to comply with FATF recommendations and anti-money laundering regulations. Some erasure requests may therefore not affect information required for legal compliance.
10 Exercising Your Rights
To exercise any of your data rights, please contact our Privacy Team using the contact details below. We will respond to your request within 30 days, unless additional time is required due to the complexity or volume of requests.
✅ Identity Verification
We may need to verify your identity before processing certain requests to protect your data security
No Charge
We will not charge you for exercising your rights, except in cases of manifestly unfounded or excessive requests
⏱️ 30-Day Response
All privacy requests will receive a full response within 30 days of receipt
Email your request to privacy@abdfx.com with the subject line "Data Rights Request". Please include your full name, account number, and a description of your request. We will acknowledge receipt within 5 business days.
11 Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience and analyse website usage. For detailed information, please refer to our full Cookie Policy.
✅ Essential Cookies
Required for core website functionality and security. These cannot be disabled without affecting site performance.
Analytics Cookies
Help us understand visitor interactions to improve our website. Can be controlled via your browser settings.
Marketing Cookies
Used for personalised advertising and remarketing. You can withdraw consent at any time through your browser preferences.
You can control cookie settings through your browser preferences and withdraw consent for non-essential cookies at any time.
12 Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will take the following immediate steps:
Detect & Contain
Immediately identify and contain the breach to prevent further data loss
Notify Authorities
Report to relevant supervisory authorities within 72 hours of becoming aware
Inform Individuals
Notify affected individuals without undue delay where high risk exists
Document & Remediate
Record all breach details, assess impact, and implement preventive measures
13 Changes to This Notice
We may update this Data Protection Notice from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes through the following channels:
Posting the updated notice prominently on our website with a new "Last updated" date
Sending email notifications directly to all registered and active account holders
Displaying an in-platform notification when you next log in to your ABDFX account
We encourage you to review this notice periodically. Continued use of our services following any changes constitutes your acceptance of the updated notice.
14 Contact Information
For questions about this Data Protection Notice or to exercise your data rights, please contact us using the details below:
Data Protection Officer
privacy@abdfx.comFor privacy and data rights inquiries
General Support
support@abdfx.comFor general account and service support
Phone Support
+1 (800) 000-0000Available during business hours
Registered Address
Ground Floor, The Sotheby Building, Rodney Village, Rodney Bay, Gros-Islet, Saint Lucia
You also have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately. We strongly encourage you to contact us first so we can resolve any issues directly and promptly.