Prestige-Fx(hereafter the “Company”) is an investment firm incorporated and registered under the laws of St. Vincent and the Grenadines, with registration number 1379 LLC 2021. The Company is authorized and regulated by the St. Vincent and the Grenadines Financial Services Authority (hereafter the “SVGFSA”).

In this privacy statement, your data is sometimes called “personal data” or “personal information.” We may also sometimes collectively refer to handling, collecting, protecting, and storing your personal data or any such action as “processing” such personal data. Personal data shall mean any information relating to you which identifies or may identify you and which includes, for example, your name, address, identification number.

Prestige-Fx is committed to safeguarding your privacy and handling your personal data in an open and transparent manner which respects the privacy of any user that accesses our site(s). Our Privacy Notice Online Statement policy is intended to explain how we protect the privacy of your personal and financial information. We will only use your information as described in our Privacy Notice Online Statement policy.

This document will help you understand the following:

• What personal data we collect and process about you as a customer and as a user of our website, mobile applications, and online services.
• Why we collect and process your personal data.
• How the Company collects and processes your personal data.
• Where we obtain the data.
• How and when we share your personal data with other third parties (for example, our service providers or suppliers).

This document is directed to natural persons who are either current or potential customers of the Company, or are authorized representatives/agents or beneficial owners of legal entities or natural persons which/who are current or potential customers of the Company.

TYPES OF PROCESSED DATA

Personal data is all information which enables you to be identified. Such data include, for example, your name, contact details, payment details.

We collect and process different types of personal data which we receive from our customers (potential and current) in the context of our business relationship.

Specifically, we may collect the following types of data:

• The data you give us for the creation of your account. Generally, these include your name, home address, e-mail address, telephone number, birth date, place of birth (city and country),if you hold/held a prominent public function (for PEPs),FATCA / CRS info, passport or other recognized personal ID card numbers, and other relevant details.
• The data you enter when funding your account. Generally, these include your credit/debit card details or other payment details (IBAN, SWIFT codes, etc.).
• The data you give us in relation to your financial status and general background. These may include your education, employment status, income, net worth, and past experience with other investment services.
• The data you provide when requested to do so from our AML/KYC department in relation to your identity and/or residence. These may include copies of your identity document, proof of residence (e.g., utility bill),and copies of your credit/debit card(s).
• The data you provide when requested to do so from our AML department in relation to the source of your funds. These may include all information and documents you send us, generally being bank statements, pay slips, shareholder certificates, dividend certificates, etc.
• The communications you exchange with us or direct to us via letters, emails, chat services, calls, and social media.
• The results of enhanced due diligence we have performed on you. Generally, this includes data about your alleged commission or conviction of offences, your position in public office, and any other publicly available information.

YOUR OBLIGATION TO PROVIDE US WITH YOUR DATA

The establishment and legality of the contractual relationship between yourself and the Company is dependent on the provision by you of the data requested by the Company. You must provide us with those of your personal data that are necessary for the commencement and execution of a contractual-based business relationship between us and for the performance of both parties’ contractual obligations.

To maintain the contractual relationship and to receive services from the Company, you are obliged to provide us with certain personal data, as we are compelled by applicable AML/CTF legislation and regulations to identify you, verify your identity, and perform due diligence or enhanced due diligence if applicable to fulfill our AML obligations.

If you fail to provide us with the requested data, the commencement or the continuation of our business relationship will not be possible.

WHY WE COLLECT AND PROCESS YOUR DATA

Your data is processed with a de minimis principle in mind, meaning that we limit the processing of your data and the type of data processed to those strictly necessary for a legitimate reason. For example:

• To provide you with the services you have requested (e.g., creation of your account, transmission of the orders you requested).
• Assessment of the appropriateness of the financial instrument offered to you.
• To perform payment operations. For example, funding/defunding operations on your account as per your instructions or as per the outcome of your investments.
• To maintain communication with you and provide you with customer support services for resolving your concerns and generally enhancing your client experience.
• General administrative functions. Maintenance of our internal records necessary for keeping your account up to date in our systems, troubleshooting, and general record-keeping.
• Credit card fraud prevention. Your payment information shall be used for accounting, billing, and audit purposes and to detect and/or prevent any fraudulent activity.
• Anti-Money Laundering and Terrorist Financing checks and reporting.
• Market abuse checks and reporting.
• General crime prevention and/or cooperation with competent authorities.
• Tax reporting.

We will only process your personal data where we have a legal basis to do so. This legal basis may vary according to the reasons for which we need to use your personal data. We may process your personal data if the processing is founded on one or more of the following legal bases:

• The processing is necessary for compliance with a legal obligation to which we are subject.

The majority of your data is processed under this category, as we are legally obliged to process it.

The legal framework governing our operations imposes on us obligations which involve the processing of personal data for the performance of identity verification, compliance with court orders, tax law or other reporting obligations, and anti-money laundering controls.

We are subject to numerous legal obligations, emanating from the relevant laws and statutory requirements applicable to us. We may process your data as required by the Money Laundering Law, Tax laws, the Law on Deposit Guarantee and Resolution of Credit and Other Institutions Scheme, the Payments Law, etc.

• The processing is necessary for the performance of the contract.

The processing of your data is necessary for the fulfillment of the services you have requested from us via the establishment of a contractual relationship. We process personal data in order to offer and perform the financial services and transactions as specified in the contract we have entered into with you.

The processing may also be necessary to complete our acceptance procedure to enter into a contract with prospective customers.

• You have specifically consented to your personal data being used by us for a specific purpose.

Such consent shall usually be relied upon for sending you marketing communications, news emails, financial market updates, announcements that may interest you, etc.

You may revoke your consent to this processing; however, without any retroactivity.

• The processing is necessary for the purposes of our legitimate interests as an investment firm.

The processing of your data is necessary for safeguarding a legitimate interest in using your data. Generally, these interests include the Company’s risk management, defense in litigation, security measures, business development, and crime prevention.

The use of your data in this case shall not infringe on your fundamental rights and freedoms.

HOW WE COLLECT AND PROCESS YOUR DATA

The majority of the data shall be acquired directly from you, either via the forms available on our website, via email, or via other means of communication you choose to use and we choose to accept.

However, we may also collect and process personal data which we lawfully obtain from other entities such as information aggregation agencies, public authorities, entities that introduce you to us, companies that process your card payments, your bank(s),and intermediary/correspondent institutions.

We can lawfully collect, and we are permitted to process personal data from publicly available sources such as National Company Registrars, National Land Registries, Bankruptcy Archives, commercial registers, the press, media, and the Internet.

HOW LONG WE RETAIN YOUR DATA

The retention period for your data is primarily dependent on the retention rules imposed upon us by the applicable legislation. We are obliged by various laws to keep your data for a specific amount of time. Destruction of the data prior to the lapse of this period is not possible.

We shall keep your data for up to 10 (ten) years from the date of the creation of your account (with a margin of error of 1 (one) year),unless legal or regulatory reasons prohibit us from destroying the data.

When applicable, your data shall be securely deleted and/or destroyed and shall not be recoverable. We shall not notify you upon deletion, as we will have no contact details to reach you.

If we anonymize your personal data so that it can no longer be associated with you or identify you, it shall not be considered personal data as per the definition of the law, and we may keep that information without further notice to you.

WHO WE SHARE YOUR DATA WITH

Only if necessary, your personal data may be shared between departments within the Company who have a legitimate reason to process it.

The Company may transmit your data to non-Company entities such as outsourced service providers, only if necessary and if a valid legal basis, as described in this document, exists to support the necessity.

Such service providers shall have contractual relationships with the Company and are contractually bound to observe the same confidentiality and data protection rules that the Company has to follow.

Your personal data may be, for example, transmitted to the following entities:

• Supervisory, regulatory, and public authorities, including courts of justice, law enforcement authorities, and other governmental entities.
• Financial institutions, payment service providers, card payment processors, correspondent banks.
• Information aggregation agencies for Anti-Money Laundering and Counter-Terrorist Financing purposes.
• Legal counsel and advisors.
• Auditors and accounting services.
• Administrative service providers.
• Marketing and customer support services.

We reserve the right to disclose your personal information as required by rules and regulations, and when the Firm believes that disclosure is necessary to protect our rights and/or to comply with a judicial proceeding, court order, or legal process served. We will not be liable for misuse or loss of personal information resulting from cookies on the site(s) that we do not have access to or control over. We are not liable for unlawful or unauthorized use of your personal information due to the negligent or malicious misuse or misplacement of your passwords.

AUTOMATED DECISION-MAKING AND PROFILING

In general, your data is not processed automatically, and no decision is taken based on automated processes.

The only automatic “profiling” we may do based on your data is a risk assessment for AML/CTF purposes and for establishing your investment risk appetite and tolerances. This process is, however, not entirely automatic and ultimately depends on manual overview and decision-taking.

DATA PROTECTION RIGHTS

If you are a natural person who is the data subject of what is legally considered “personal data” which we hold as a “controller” and/or “processor,” you are entitled to certain rights.

Without prejudice to the above, your rights may be limited due to the legal basis relied upon by the Company to process your data. As the majority of the processing performed by the Company is the consequence of legal obligations, some of the rights below may be partially or fully in conflict with other legal instruments and as such, unenforceable.

• Right to information:You may request to know whether we hold any of your personal data and, if so, information on the Company, what type of data we process and why/how we are processing it.
• Data subject access request:You may request to receive a copy of your personal data and check that the processing is lawful.
• Right to rectification:You may request that we rectify any incorrect data we hold and you may complete any incomplete data we may hold.
• Right to erasure (‘right to be forgotten’):You may request that your personal data is deleted, provided that you meet the legal criteria for this request.
• Object to processing of your personal information:You may object if we are processing your data for direct marketing purposes or based on legitimate interests.
• Object to automated decision-making including profiling:You may object to any automated decisions or profiling taken and performed by us based on your personal data.
• Right to restriction:You may request the restriction of the processing of your data under certain circumstances.
• Right to data portability:You may request a copy of your personal information in a structured, commonly used, and machine-readable format.
• Right to withdraw consent:You have the right to withdraw your consent for the specific processing at any time.

Unless your requests are manifestly unreasonable or excessively burdensome, you shall not be charged a fee by the Company. In such cases, your requests may also be denied if they are not submitted in good faith.

SITE SECURITY

We are committed to protecting your information, and we take extra precautions to ensure that your data is safe using the following procedures:

• We use two layers of firewall protection (one at the application level and one at the server level) to ensure that no unauthorized access attempts are made.
• We use advanced Verisign SSL to authenticate users and data.
• The server that handles our traders’ online activity is separate from the transaction information, which is stored on another data server.
• We use separate servers in different locations. Since data must be synchronized to both locations, it cannot be tampered with, and encryption ensures that all the data on our servers is secure.
• The servers are protected at all times. Any unauthorized personnel are forbidden from entering the premises of the servers.

You can feel secure knowing that we employ top-of-the-line security measures to ensure that both your money and your data are safe.

COOKIES

A cookie is a small text file stored on your computer for record-keeping purposes. Prestige-Fx uses cookies on its site(s). We do not link the information stored in cookies to any personally identifiable information you may submit. We use both session ID and persistent cookies. A session ID cookie expires when you close your browser. A persistent cookie remains on your hard drive for an extended period of time. You can remove persistent cookies by following directions provided in your internet browser’s “Help” file.

We may set a persistent cookie for statistical purposes. Persistent cookies also enable us to track and target the location and interests of users that access our site(s) and to enhance the experience of services offered to you. You may reject our cookies, which could result in a lower quality user experience. Some of our business partners use cookies on their site(s). We have no access or control over these cookies.

COMPLAINTS

If you have any complaints about the processing of your data, you may contact the Company’s Data Protection Officer at [email protected].

CHANGES TO THIS POLICY

We may change our Privacy Notice Online Statement policy from time to time and shall alert you to this fact by way of an e-mail or a notice on our website.