Primary Controller

The company that enters into the applicable Terms of Service or Affiliate Terms with you is ordinarily the primary controller of personal data processed to administer your Account and Services (the “Primary Controller”). The Primary Controller will be identified during registration, in your Account confirmation, in the portal, in a private agreement or in another service-specific notice.

Geographic allocation

Unless your Account or another written notice states otherwise:

• Financial Trading Art SRL is the Primary Controller for Users habitually resident or established in the European Economic Area; and
• Financial Trading Art LTD is the Primary Controller for Users habitually resident or established outside the European Economic Area.

Shared platform processing

Where the two companies jointly determine the purposes and essential means of processing, including shared platform operations, security, fraud prevention, Affiliate administration, Partner reconciliation, support or group reporting, they may act as joint controllers. Where one entity acts only on documented instructions, it may act as a processor.

Joint-controller arrangement

Where joint controllership applies, the companies will maintain an arrangement allocating responsibility for transparency, rights requests, security, breach handling, supervisory-authority contact and international transfers. You may contact either entity through privacy [at] fxrebate.eu.

Applicable legal framework

Where relevant, processing is governed by the EU General Data Protection Regulation, Romanian data-protection and electronic-communications law, the Seychelles Data Protection Act 2023, and other applicable privacy laws.

Account and contact information

• Full name, username, title, date of birth, nationality and country of residence;
• Residential or business address, email address, telephone or WhatsApp number;
• Preferred language, communication preferences, Account ID, registration date and status.

Identity and verification information

• Passport, identity card, residence permit or other identification details and copies;
• Proof of address, tax identification details, signatures, photographs, selfies or liveness results;
• Verification status, document-authenticity information and risk indicators.

Corporate and KYB information

• Legal and trading names, registration number, incorporation country and registered address;
• Constitutional documents, certificates, registers of directors/shareholders and beneficial-ownership information;
• Regulatory or license details, tax/VAT details, resolutions, powers of attorney and authorized-signatory information;
• Business activity, website, source-of-funds and expected-service information.

Partner Account and attribution information

• Partner and regulated legal entity, Partner Account number or identifier, account type and base currency;
• Referral, tracker or IB code, account-opening and attribution dates, transfer status and eligibility information;
• Partner jurisdiction and country restrictions.

Trading, purchase and rebate information

• Eligible trading volume, lot size, notional value, instrument, trade duration, maker/taker activity and fee information;
• Transaction or purchase identifiers, prop-firm challenge or subscription information, CPA status and Partner Compensation;
• Rebate rate, calculation basis and pending, confirmed, adjusted, reversed or paid amounts.

Affiliate and referral information

• Affiliate ID, Affiliate Link, referral source, tier relationships and Referred User identifiers;
• Commissionable activity, Affiliate rates, earnings, campaign source and compliance records.

Payout and financial information

• Bank account holder, IBAN, account number, SWIFT/BIC, bank name and country;
• E-wallet or payment-service identifier, payout method/currency and ownership evidence;
• Payment status, amount, date, reference, fees, invoices, self-billing authorizations and tax information.

Cryptocurrency and blockchain information

• Wallet address, blockchain network, memo or tag, asset, amount, transaction hash, fees and wallet-ownership verification.

Support and communication information

• Support tickets, emails, live chat, telephone/video records where lawfully recorded, WhatsApp/Telegram/social-media messages;
• Complaints, attachments, screenshots, statements, delivery status and feedback responses.

Promotions, bonuses, contests and reward pools

• Participation, eligibility, qualifying activity, points, ranking, tier, claim date, reward status, winner-selection and fraud checks.

Reviews, testimonials and user content

• Reviews, ratings, comments, media, public display name, experience date, supporting records and moderation information.

Technical and usage information

• IP address, device/browser/operating-system details, identifiers, language, time zone and approximate location;
• Login/session information, pages viewed, clicks, referring URLs, errors, performance data and security logs.

Cookies and similar technologies

• Cookie and session identifiers, consent choices, Affiliate attribution, analytics/advertising identifiers, email pixels and local storage.

Security, fraud and compliance information

• Duplicate-account indicators, device/network risk signals, sanctions screening, document-authenticity indicators, payment risk, risk scores, investigation notes and Account restrictions.

Social-media and platform interaction information

• Platform username, display name, profile image and public profile details;
• Comments, likes, reactions, follows, shares, mentions, public posts, reviews and other engagement with FXRebate pages or content;
• Direct messages, business messages, lead-generation form submissions, platform event registrations and support requests;
• Platform-generated Page, channel, audience or campaign insights, advertising interactions and conversion data;
• Platform or campaign identifiers, subject to consent and platform terms.

Sensitive personal data

• FXRebate does not seek sensitive personal data unless it is necessary and lawful for verification, sanctions screening, accessibility, legal claims or another specifically disclosed purpose.

Directly from you

When you register, update an Account, add a Partner Account, verify identity, submit payment details, contact support, join a Promotion or Affiliate Program, submit a review or complete a form.

From Partners

Partners may provide attribution, trading/purchase metrics, commission, rebate, eligibility and account-status information.

From Affiliates

Affiliates may provide a referral identifier, campaign source or information needed to resolve attribution. Affiliates must be lawfully entitled to provide it.

From payment and verification providers

We may receive identity-verification results, payment ownership confirmation, payment status, fraud signals and returned-payment information.

From social-media and messaging platforms

When you follow, comment, react, message, complete a lead form, view an advertisement or interact with an FXRebate page, account, channel, group, community, bot or embedded feature.

Automatically

Technical, device, usage, cookie, referral and security information may be collected when you use the Platform.

From public or lawful third-party sources

These may include company/regulatory registers, sanctions lists, court records, publicly available websites, fraud databases and competent authorities.

Legitimate interests

Legitimate interests may include operating and improving FXRebate, verifying rebate calculations, preventing fraud, securing systems, maintaining records, managing Partner/Affiliate relationships, enforcing terms, defending legal claims and conducting proportionate analytics. FXRebate considers whether those interests are overridden by individual rights and freedoms.

Consent

Where processing relies on consent, it will be requested separately and may be withdrawn at any time. Withdrawal does not affect processing already lawfully completed.

Independent Partners

A Partner usually acts as an independent controller for its onboarding, KYC/AML, trading services, deposits/withdrawals, platform records, regulatory obligations and account decisions. Review the Partner’s own privacy policy.

Data received from Partners

Partners may disclose account identifiers, attribution status, eligible activity, transaction or trading metrics, commission information, eligibility and corrections needed to administer cashback.

Data sent to Partners

FXRebate may disclose Partner Account identifiers, name/contact information where necessary, referral codes, transfer requests or information required to resolve attribution and rebate disputes.

Controller roles

Depending on the arrangement, FXRebate and a Partner may act as independent controllers, joint controllers for a defined process, or controller and processor. Where legally required, the essence of a joint-controller arrangement will be made available.

Referral attribution

If you register through an Affiliate Link or code, FXRebate records the relevant Affiliate and network tier to attribute registration, calculate Affiliate Commission and prevent manipulation.

Information visible to Affiliates

The referring Affiliate may receive limited information such as a masked User identifier, country/general region, registration/verification status, referral validity, rebate or commission totals and Affiliate Commission generated. Unless necessary and authorized, Affiliates do not receive identity documents, full payment details, passwords, private keys, detailed support messages or unrelated information.

Affiliate responsibilities

Affiliates act independently for personal data collected through their own websites, lists, social-media pages or advertising. They must provide their own notices and comply with marketing and data-protection law.

Promotions and contests

FXRebate may process participation, eligibility, points/rankings, duplicate-entry checks, winner validation, reward delivery and complaints. Publication of a winner’s name, username, country, photograph or testimonial will be disclosed in the Promotion terms or a separate consent request.

Reviews and public submissions

When you submit a review, comment or other public content, the information you choose to publish may be publicly available and indexed by search engines. Do not include data you do not want to make public.

Categories

• Strictly necessary cookies for login, security, sessions and core functions;
• Preference cookies for language and interface choices;
• Analytics cookies for performance and usage;
• Marketing and attribution cookies for campaigns, social-media advertising and referral measurement.

Consent and withdrawal

Where required, non-essential cookies, pixels and similar technologies will not be activated until consent is provided. You may change or withdraw choices through the cookie-settings tool. Rejecting non-essential cookies will not prevent access to core Services, although some optional functions may be limited.

Cookie Policy

The Cookie Policy should identify each technology’s name, provider, purpose, duration, category and international-transfer information.

Independent platform processing

Each Social Media Platform is a third-party service that independently determines how it collects, uses, shares, retains, transfers and moderates information under its own privacy policy and terms. FXRebate does not control platform algorithms, profiling, advertising systems, security, retention, moderation, account suspension or international transfers.

FXRebate generally acts as controller for personal data that it receives from the platform and uses for support, lead management, marketing, promotions, fraud prevention, complaints or other FXRebate purposes. For specific Page Insights, advertising, lead-generation or business-tool arrangements, the relevant platform terms may allocate different roles, including joint controllership. Where legally required, additional information about that arrangement will be provided.

Information FXRebate may receive

• Your platform username, display name, profile image and information visible under your platform settings;
• Public posts, comments, reactions, likes, follows, shares, mentions, tags and reviews involving FXRebate;
• Direct or business messages, attachments and support information you send to FXRebate;
• Contact details and responses submitted through a platform lead-generation form, event registration or campaign form;
• Aggregated or statistical Page, channel, audience, post, video or advertisement insights;
• Campaign, click, conversion and attribution identifiers where pixels, SDKs, conversion APIs or similar tools are lawfully used.

How FXRebate uses social-platform information

• Responding to comments, enquiries, messages, complaints and support requests;
• Following up on an enquiry or lead where permitted and expected;
• Operating Promotions, contests, live events, webinars and communities;
• Moderating FXRebate pages and protecting Users and the brand from fraud, spam, impersonation or abuse;
• Measuring content, campaign and advertising effectiveness;
• Creating permitted audiences or suppressing existing customers from advertisements, subject to lawful basis and consent requirements;
• Maintaining evidence of important communications, disputes, consent or policy violations.

Public content and visibility

Content posted publicly may be visible to an unlimited audience, indexed by search engines, copied, downloaded, screenshotted, quoted, embedded, archived, licensed through platform APIs or reshared by other users. Removing a post from an FXRebate page or deleting your platform account does not guarantee that copies held by the platform, search engines, archives or other users will be removed.

Do not publish Partner Account numbers, identification documents, payment details, home addresses, tax numbers, wallet recovery information or other confidential data in public comments or posts.

Direct messages and business messaging

Messages sent through a Social Media Platform are processed by the platform provider and may be subject to its security, retention, moderation, automation and disclosure practices. FXRebate may retain the message and attachments under this Policy after receiving them.

WhatsApp states that personal messages and calls are end-to-end encrypted. This does not prevent FXRebate, as the intended business recipient, from reading, storing and using messages you send to FXRebate. A business may also use authorized service providers to manage communications, subject to applicable contracts and notices.

Telegram cloud chats are stored by Telegram, while Telegram Secret Chats use end-to-end encryption. Interactions with Telegram bots or connected business chatbots may disclose information to the bot operator. Users should not assume that every Telegram conversation is end-to-end encrypted.

Facebook/Instagram/Messenger, TikTok, X, LinkedIn, Reddit, Discord, Snapchat and other direct-message functions should not be used as a secure channel for identity documents, passwords, private keys, seed phrases, two-factor codes or complete financial credentials. FXRebate may redirect you to a secure Account upload process.

Advertising, pixels, conversion APIs and audience matching

FXRebate may use platform advertising and measurement tools, such as pixels, tags, SDKs, conversion APIs, lead ads, remarketing and audience matching. Non-essential browser or device tracking will be used only after consent where required.

Where permitted, contact identifiers such as an email address or telephone number may be transformed (for example, hashed) and provided to a platform for matching, measurement, suppression or audience creation. The platform may compare those identifiers with its own users under its terms.

FXRebate does not intentionally use identity documents, Partner Account passwords, full payment credentials, private wallet keys, special-category data or detailed trading history to create advertising audiences.

Social sign-in and connected accounts

If FXRebate offers sign-in or account connection through Google, Facebook, Apple, LinkedIn or another provider, FXRebate may receive the data shown on the authorization screen, such as name, email address, profile identifier and access token. FXRebate does not receive the provider password. You may revoke the connection using FXRebate or provider settings, but FXRebate may retain records required for security, contract administration or legal compliance.

Platform-specific summary

User rights and platform controls

You may exercise applicable rights against FXRebate for personal data controlled by FXRebate by contacting privacy [at] fxrebate.eu. For data controlled independently by a Social Media Platform, use that platform’s privacy settings, download/delete tools or privacy contact.

FXRebate can ordinarily act only on the copies and records it controls. It cannot guarantee deletion from platform systems, other users’ accounts, search engines, archives, public blockchains, third-party bots or copied content.

If a platform and FXRebate act as joint controllers for a specific tool, you may have rights against either party as provided by applicable law and the relevant platform addendum. The platform may be responsible for handling certain requests relating to its underlying platform data.

Moderation, restrictions and limitations

FXRebate may hide, remove, restrict, preserve, report or respond to content on its pages and channels where reasonably necessary to enforce rules, protect Users, prevent fraud, comply with law, preserve evidence or protect FXRebate/Partner rights. The platform may independently remove content, restrict reach, suspend accounts or impose other measures under its own rules.

Users must not use FXRebate social channels to publish unlawful content, spam, impersonation, phishing, malware, false investment claims, confidential information, third-party personal data without authority, or content that infringes rights. Moderation does not make FXRebate responsible for all content posted by third parties.

Retention of social-media information

FXRebate may retain social-media messages, lead submissions, consent records, complaints and moderation evidence according to the support, marketing, legal-claim and fraud-prevention periods in Section 23. Public content may remain on the platform for as long as the platform or user retains it. Aggregate insights may be retained in anonymised or non-identifying form for business analytics.

International processing

Social Media Platforms commonly operate globally and may process data outside your country under their own transfer mechanisms. FXRebate’s international transfers of data it controls are governed by Section 20, but FXRebate is not responsible for the independent transfer arrangements of each platform.

Minors

FXRebate Services are intended for persons aged 18 or older, even where a Social Media Platform permits younger users. FXRebate does not knowingly use social-media interactions to onboard a minor into trading cashback or Affiliate Services. If a minor contacts FXRebate, they should not provide identification, financial or trading information.

Platform changes

Social Media Platforms may change their functionality, privacy policies, controller arrangements, advertising tools, retention and settings independently. The platform policy in force when you use the platform applies to its processing. FXRebate may update this Policy or platform-specific notices when material changes affect FXRebate processing.

Financial Trading Art group companies

For shared platform operations, support, security, finance, compliance, Partner management and reporting.

Partners

To establish attribution, request transfers, verify eligible activity, calculate Rebates and resolve discrepancies.

Affiliates

Only limited referral and commission information needed to administer the Affiliate Program.

Social Media Platforms and advertising providers

Where you interact with an FXRebate page, advertisement, lead form, embedded feature or connected account, and for permitted campaign measurement or audience operations.

Banks and payment providers

Banks, e-wallets, international payment processors, crypto-payment providers, exchanges and wallet-screening services.

Identity and compliance providers

Identity/document verification, company checks, liveness/biometric services, sanctions screening, fraud prevention and payment ownership.

Technology and operational providers

Cloud hosting, databases, cybersecurity, CRM, communications, support, analytics, consent management, document generation, accounting and translation.

Professional advisers

Lawyers, auditors, accountants, tax advisers, consultants and insurers.

Authorities and legal recipients

Where required by law or necessary to protect rights, investigate fraud or comply with tax/regulatory obligations.

Business transfers

Prospective or actual purchasers, investors, successors or advisers in a merger, sale, financing or reorganization, subject to appropriate safeguards.

FXRebate does not sell personal data for monetary consideration. Analytics and advertising providers may be used only as permitted by law and, where required, after consent.

Romania and the EEA

You may complain to the supervisory authority where you live, work or where the alleged infringement occurred. The Romanian authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP), 28–30 Gheorghe Magheru Boulevard, District 1, 010336 Bucharest, Romania; email: anspdcp [at] dataprotection.ro; telephone: +40 318 059 211.

Seychelles

The Seychelles supervisory authority is the Information Commission of Seychelles, P.O. Box 1342, KLA Residence, 3rd Floor, Room 9, Mont Fleuri, Seychelles; email: enquiries [at] infocom.sc; telephone: +248 4303188.

We encourage you to contact FXRebate first, but this does not affect your right to contact an authority directly.