Privacy Policy
Last updated: 28 March 2026 | Effective date: 28 March 2026
Pipsla Markets Ltd ("Company", "we", "us", "our") is committed to protecting the privacy and personal data of our clients, prospective clients, and website visitors ("you", "your"). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our website at pipslamarkets.com ("Website") and our trading platform ("Platform").
By accessing the Website or using our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.
1. Information We Collect
1.1 Information You Provide
| Category | Data Collected | Purpose |
|---|---|---|
| Registration | Full name, email address, username, password (hashed) | Account creation and authentication |
| Profile | Date of birth, country of residence, phone number (optional), profile picture | Account personalisation, age verification, communication |
| KYC / Identity | Government-issued ID (passport, national ID, driver's licence), selfie photo, proof of address documents | Identity verification, AML compliance, regulatory obligations |
| Financial | USDT wallet addresses (deposit and withdrawal), transaction history, account balances | Processing deposits and withdrawals, account management |
| Trading | Trading history, order details, positions, strategies, AI configuration preferences | Trade execution, analytics, AI training (with consent) |
| Communications | Support tickets, Discord messages (in-platform chat), email correspondence | Customer support, community moderation, service improvement |
1.2 Information Collected Automatically
| Category | Data Collected | Purpose |
|---|---|---|
| Device Information | IP address, browser type and version, operating system, device type, screen resolution | Security, fraud prevention, platform optimisation |
| Usage Data | Pages visited, features used, session duration, clickstream data, referral source | Analytics, product improvement, user experience |
| Cookies & Storage | Session tokens, preference settings, chart state, timezone | Authentication, personalisation, functionality |
| WebSocket Data | Real-time connection metadata, subscription channels | Price streaming, trade notifications, platform functionality |
1.3 Information from Third Parties
- Blockchain Networks: Transaction confirmations, wallet addresses, and amounts from the TRON network for deposit verification.
- Discord: If you interact with our Discord community, your Discord user ID and messages may be processed in accordance with Discord's own privacy policy.
2. How We Use Your Information
We process your personal data for the following purposes:
- Service Delivery: Account creation, trade execution, deposit/withdrawal processing, price streaming, and AI trading features.
- Identity Verification: KYC/AML compliance, fraud prevention, and regulatory obligations.
- Communication: Account notifications, trade confirmations, margin warnings, system alerts, and customer support.
- Security: Detecting and preventing unauthorised access, fraud, abuse, and other security threats.
- Analytics & Improvement: Understanding how our Platform is used to improve features, fix bugs, and enhance user experience.
- AI Training: With appropriate anonymisation and consent, aggregated trading pattern data may be used to improve AI signal accuracy. Individual trading strategies are never shared with other users without explicit opt-in.
- Legal Compliance: Meeting regulatory obligations, responding to lawful requests from authorities, and enforcing our Terms of Service.
- Marketing: With your consent, sending product updates, new feature announcements, and educational content. You may opt out at any time.
3. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract: Processing necessary to perform our contractual obligations (account management, trade execution, deposits/withdrawals).
- Legal Obligation: Processing required by law (KYC/AML, financial reporting, regulatory requests).
- Legitimate Interest: Processing for security, fraud prevention, analytics, and service improvement, balanced against your privacy rights.
- Consent: Processing based on your explicit consent (marketing communications, optional AI data sharing).
4. Data Sharing & Disclosure
We do not sell your personal data. We may share your information with:
- Service Providers: Infrastructure providers (hosting, CDN), email delivery services, and analytics tools that process data on our behalf under strict data processing agreements.
- Blockchain Networks: Wallet addresses and transaction data are inherently public on the TRON blockchain. We do not control on-chain data visibility.
- Law Enforcement & Regulators: When required by law, court order, or regulatory request, or when we reasonably believe disclosure is necessary to protect rights, safety, or property.
- Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction, subject to the same privacy protections.
We do not share your personal information with other traders, third-party brokers, or advertisers.
5. Data Retention
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & Profile Data | Duration of account + 5 years after closure | Regulatory requirements, dispute resolution |
| KYC Documents | 5 years after account closure | AML/CTF regulatory obligations |
| Trading History | Duration of account + 7 years | Financial record-keeping, regulatory compliance |
| Transaction Records | 7 years | Financial compliance, audit requirements |
| Support Communications | 3 years after resolution | Quality assurance, dispute resolution |
| Usage & Analytics Data | 2 years (then anonymised) | Product improvement |
| Marketing Consent Records | Duration of consent + 1 year | Compliance with consent requirements |
After the retention period, data is securely deleted or irreversibly anonymised.
6. Data Security
We implement robust technical and organisational measures to protect your data:
- Encryption: All data in transit is encrypted using TLS 1.2+. Sensitive data at rest (passwords, KYC documents) is encrypted using AES-256.
- Password Security: Passwords are salted and hashed using industry-standard algorithms. We never store plaintext passwords.
- Access Controls: Role-based access control (RBAC) ensures that only authorised personnel can access client data, on a need-to-know basis.
- Infrastructure: Our servers are hosted in secure, access-controlled data centres with DDoS protection and continuous monitoring.
- Incident Response: We maintain an incident response plan. In the event of a data breach, affected users will be notified within 72 hours where required by law.
While we employ best practices, no system is 100% secure. You are responsible for maintaining the security of your account credentials and enabling available security features.
7. Cookies & Tracking
7.1 Types of Cookies Used
- Essential Cookies: Required for authentication, session management, and core Platform functionality. Cannot be disabled.
- Preference Cookies: Store your chart layout, timezone, theme, and other settings.
- Analytics Cookies: Help us understand Platform usage patterns (pages visited, features used). Data is aggregated and not linked to individual identity.
7.2 Third-Party Cookies
We minimise the use of third-party cookies. Where used (e.g., CDN providers, analytics), these are governed by the respective third party's privacy policy.
7.3 Managing Cookies
You can manage cookie preferences through your browser settings. Disabling essential cookies may impair Platform functionality.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your data, subject to legal retention requirements.
- Restriction: Request that we restrict processing of your data in certain circumstances.
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interest or for marketing purposes.
- Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at [email protected] or via our support system. We will respond within 30 days. We may require identity verification before processing your request.
9. International Data Transfers
Your data may be processed in jurisdictions outside your country of residence, including but not limited to the jurisdiction where our servers and service providers are located. We ensure that appropriate safeguards are in place for any such transfers, including contractual protections with our service providers.
10. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data, we will take steps to delete such data and close the associated account.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform, email, or our Website. The "Last updated" date at the top of this page indicates the most recent revision. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related enquiries or to exercise your data rights:
Pipsla Markets Ltd
Registered in Saint Vincent and the Grenadines
Email: [email protected]
Support: Discord Community
Website: pipslamarkets.com
