Privacy Policy

Introduction

ABF Trade EU Limited ("the Company", "we", "us", or "our") is a Cyprus Investment Firm incorporated under the laws of Cyprus, with business address at 162 Fragklinou Rousvelt, 1st & 2nd Floors, Limassol 3045, Cyprus, registered under Company Registration No. ΗΕ 291958. The Company is authorised and regulated by the Cyprus Securities and Exchange Commission ("CySEC") under CIF Licence No. 171/12.

This Privacy Policy is provided to Clients and potential Clients in accordance with the provisions of the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), the Cyprus Data Protection Law (Law 125(I)/2018), and any other applicable data protection legislation (collectively referred to as "Data Protection Legislation").

For the purposes of Data Protection Legislation, the data controller is ABF Trade EU Limited. We are committed to protecting and respecting your privacy. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

Please read the following carefully to understand our views and practices regarding your personal information and how we will treat it. By using our services and website, you acknowledge that you have read and understood this Privacy Policy.

In this Privacy Policy, your information is sometimes called "personal data". We may also sometimes collectively refer to handling, collecting, protecting, and storing your personal information as "processing" that personal information.

Personal Data We Collect

Personal information is generally collected from you directly when you visit our website, open an account, use our services, correspond with us, or submit an application.

We may collect and process the following types of personal information about you:

Technical Data

Your Internet Protocol (IP) address. The IP address indicates the location of your computer or device on the internet and is used to identify you when you visit our website.
Your browser type and language.
Information about your visits to our website, including the full Uniform Resource Locators (URL), clickstream to, through and from our website (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, and page interaction information.

Registration and Account Data

When you register with us, use our services, or submit an application, we may collect:

Full name and date of birth.
National identification number, passport number, or other government-issued identity document details.
Contact information, including email address, telephone number, and residential address.
Financial information, including source of funds, employment status, annual income, and net worth.
Investor experience, investment objectives, and investment preferences.
Information relevant to Know-Your-Client (KYC) requirements and anti-money laundering verification.

Communications Data

We record telephone conversations and electronic communications in accordance with applicable regulatory requirements. These recordings may be used to monitor the quality of our service, resolve disputes, and comply with our regulatory obligations.

Survey and Feedback Data

We may, from time to time while you are accessing our website, request you to complete a survey form which may relate to the quality of our services or products. Participation in surveys is voluntary.

Sensitive Personal Data

We do not intentionally collect sensitive personal data (also known as special categories of data under GDPR) unless specifically required to do so for regulatory purposes. Where we do process such data (for example, data relating to criminal convictions for AML compliance purposes), we do so only on the basis of a legal obligation or with your explicit consent, as applicable.

When you apply for a position with us, you may need to provide us with certain personal data including, where relevant, data relating to your right to work. We will use such data only for recruitment purposes and will handle it in accordance with this Privacy Policy.

Cookies

When you visit our Website, we may place small text files called cookies on your device. Cookies help the Website function correctly, allow us to analyse how visitors use the Website, and support certain features such as live chat and partner referral tracking.

We use the following categories of cookies:

Strictly necessary cookies — essential for the Website to operate. These do not require your consent.
Functional/preference cookies — remember choices you make, such as language or display preferences.
Analytics/performance cookies — collect anonymised or pseudonymised data about how visitors use the Website to help us improve it.
Live chat/support cookies — support the live chat and customer support functionality.
Referral/partner tracking cookies — record whether you arrived via an affiliate or introducing partner link for attribution purposes.

We do not use targeting or advertising cookies and we do not build advertising profiles or share your browsing data with ad networks for marketing purposes.

For non-essential cookies, we seek your consent when you first visit the Website. You may update or withdraw your consent at any time using the cookie settings tool in the Website footer, or by adjusting your browser settings.

Full details of the cookies we use, their purpose, legal basis, and how to manage them are set out in our Cookie Policy, which is available on the Website at www.abftrade.com/eu.

How We Use Your Information

Our primary purpose in collecting personal information is to provide you with a safe, efficient, and customised experience and to comply with our regulatory obligations. We use your information for the following specific purposes:

To carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products, and services you request from us.
To comply with our legal and regulatory obligations, including KYC, AML/CTF verification, and reporting to regulatory authorities such as CySEC.
To notify you about changes to our services, terms, or this Privacy Policy.
To ensure that content from our website is presented in the most effective manner for you and for your device.
To administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical, and survey purposes.
As part of our efforts to keep our website safe and secure and to prevent fraud.
To measure or understand the effectiveness of our services and communications.
To send you service-related communications, including account statements, trade confirmations, and regulatory disclosures.
To consider your application where you have applied for a position with us.
To send you our newsletter or updates, or to make suggestions and recommendations to you, where you have consented to receive such communications.
For internal record keeping and business administration purposes.

Lawful Basis for Processing

We process your personal data on the following lawful bases under GDPR:

Consent: Where you have given your explicit consent to the processing of your personal data for specific purposes, such as receiving marketing communications.
Contractual necessity: Where processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract.
Legal obligation: Where processing is necessary for compliance with a legal obligation to which we are subject, including AML/CTF obligations, regulatory reporting requirements, and record-keeping obligations.
Legitimate interests: Where processing is necessary for the purposes of the legitimate interests pursued by us, such as running and administering our business, managing risks, preventing fraud, and improving our services, provided that such interests are not overridden by your interests or fundamental rights.

To the extent that we process any special categories of personal data, we do so on the basis of explicit consent or legal obligation, as applicable.

Provision of Information to Third Parties

We do not sell, distribute, or lease your personal information to third parties unless we are required by law to do so or you have given us permission.

The following categories of recipients may receive your personal information and process it for the purposes outlined in this Privacy Policy:

Third-party companies, agents, contractors, service providers, or related companies (including payment processors) engaged to provide services on our behalf or to provide services to you on our behalf.
Regulatory authorities, including CySEC and other competent authorities, where required by law or regulation.
Analytics and search engine providers that assist us in the improvement and optimisation of our website.
Third parties who support our information technology infrastructure or handle mailings or events on our behalf.
Law enforcement agencies, other governmental agencies, or third parties, if we are required by law to do so, or if we need to enforce or apply our terms and conditions, or to protect the rights, property, or safety of the Company, our clients, or others.
Other business entities should we plan to merge with, or be acquired by, that business entity, or if we undergo a re-organisation. Any such third party would be required to use your information in the same way as set out in this Privacy Policy.
Any successor in interest, in the event of a liquidation or administration of the Company.

The Company does not undertake marketing activities for third parties and does not provide personal information to third parties for direct marketing purposes without your consent.

The Company uses reputable cloud service providers for its data centre and server needs. Access to the Company's server is restricted to authorised personnel only, and all service providers are required to process personal data in accordance with applicable data protection requirements.

International Transfers

Your personal data may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). If we transfer your personal data to a country outside the EEA, we will ensure that such transfers are subject to appropriate safeguards in accordance with GDPR, such as:

Adequacy decisions: Transfers to countries that the European Commission has determined provide an adequate level of data protection.
Standard Contractual Clauses: The use of European Commission-approved standard contractual clauses with the recipient.
Binding Corporate Rules: Where applicable, legally binding rules within the Company's corporate group.

By submitting your personal data to us, you agree to this transfer, storing, and/or processing.

Data Retention

We will only keep the information we collect about you, through your use of our services, for as long as required by applicable law or as long as necessary for the purposes for which it was collected.

We are required to retain data collected on you, under a legal obligation basis, for a minimum of five (5) years from the end of the business relationship, in accordance with applicable AML/CTF and regulatory record-keeping requirements. In some circumstances, this retention period may be extended, for example, in connection with legal proceedings or regulatory investigations.

After the applicable retention period has expired, we will securely delete or anonymise your personal data.

Security

We take your privacy and the security of your personal data seriously. We have implemented generally accepted standards of technology and operational security to protect your personal information from loss, misuse, or alteration.

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect. Our security measures include, but are not limited to:

Encryption of personal data in transit and at rest.
Access controls and authentication procedures to limit access to personal data to authorised personnel.
Regular security assessments and penetration testing.
Employee training on data protection and information security.

Please note, however, that the transmission of information via the internet is not completely secure, and we cannot guarantee the security of data transmitted to our website; any such transmission is at your own risk.

Your Rights

In accordance with applicable Data Protection Legislation, you have the following rights in respect of your personal data:

The right to be informed: To be told about the processing of your personal data, including for what purposes, what types of data, and to what recipients.
The right of access: To request access to, or a copy of, any personal data we hold about you.
The right to rectification: To request that inaccurate personal data we hold about you be corrected.
The right to erasure ('right to be forgotten'): To request that personal data we hold about you be deleted, where we no longer have a lawful basis to retain it.
The right to withdraw consent: To withdraw your consent to our processing of your personal data at any time (to the extent such processing is based on previously obtained consent), without affecting the lawfulness of processing based on consent before its withdrawal.
The right to opt out of marketing: To request that we stop or start sending you marketing communications at any time.
The right to restriction of processing: To request that we restrict the processing of your personal data in certain circumstances.
The right to data portability: To receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
The right to object: To object to our processing of your personal data in certain circumstances, including for direct marketing purposes.
The right not to be subject to automated decision-making: Not to be subject to a decision based solely on automated processing (including profiling) that produces legal or similarly significant effects on you.

Any request for access to or a copy of your personal data must be in writing, and we will endeavour to respond within a reasonable time and, in any event, within one month of receiving your request. In some cases, we may extend this period by a further two months, where requests are complex or numerous, and we will notify you of any extension within one month of receiving your request.

All requests should be addressed to: support@abftrade.com

Opting Out of Marketing

You have the option of unsubscribing from our mailing list for newsletters, alerts, and updates at any time, thereby discontinuing any such communications from us. You may do this by clicking the 'unsubscribe' link in any marketing email we send you, or by contacting us at the details set out in this Privacy Policy.

Please note that it may take up to one month to process your request. Even after opting out of marketing communications, you will continue to receive service-related communications that are necessary for the performance of your contract with us or required by law.

Links to Third-Party Websites

Our website may contain links to enable you to visit other websites of interest easily. However, once you have used these links to leave our website, we do not have any control over those other websites and cannot be responsible for the protection and privacy of any information which you provide while visiting such websites. Such websites are not governed by this Privacy Policy. You should exercise caution and look at the privacy statement applicable to the website in question.

Complaints

If you have any concerns or questions about the security of our website, this Privacy Policy, or any personal information we hold about you, please contact our Data Protection Officer at:

Email: support@abftrade.com
ABF Trade EU Limited
162 Fragklinou Rousvelt, 1st & 2nd Floors
Limassol 3045, Cyprus

If you are not satisfied with our response, you have the right to make a complaint to the Office of the Commissioner for Personal Data Protection of Cyprus:

Office of the Commissioner for Personal Data Protection
1 Iasonos Street, 1082 Nicosia, Cyprus
P.O. Box 23378, 1682 Nicosia, Cyprus
Tel: +357 22 818 456
Website: www.dataprotection.gov.cy
Email: commissioner@dataprotection.gov.cy

Changes to This Privacy Policy

Any changes we make to our Privacy Policy will be posted on this page of our website. Where changes are material, we will notify you by email or by a prominent notice on our website. We encourage you to check this page periodically for any updates or changes to our Privacy Policy.

This Privacy Policy was last updated in May 2026.