1. Introduction
Yellow Box Markets Ltd ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trading platform and services. By using our services, you consent to the data practices described in this policy.
2. Data Controller
Yellow Box Markets Ltd is the data controller responsible for your personal data. Company Registration Number: 2025-00712. Registered Address: Ground Floor, The Sotheby Building, Rodney Village, Rodney Bay, Gros-Islet, Saint Lucia. For data protection inquiries, contact our Data Protection Officer at: privacy@yellowboxmarkets.com
3. Personal Data We Collect
We collect various types of personal data including: Identity Data (full name, date of birth, gender, nationality, government-issued ID numbers, passport/ID document copies); Contact Data (email address, phone number, postal address, country of residence); Financial Data (bank account details, payment card information, source of funds, proof of address, tax identification numbers, employment and income information); Transaction Data (deposit and withdrawal history, trading activity, account balances, order history); Technical Data (IP address, device identifiers, browser type and version, operating system, login timestamps, session duration); Usage Data (pages viewed, features used, trading patterns, preferences); Communications Data (correspondence with our support team, survey responses, feedback); Verification Data (selfie photos, video verification recordings, document verification results).
4. How We Collect Your Data
We collect personal data through: Direct Interactions (account registration, KYC verification, trading activities, customer support requests, surveys and feedback forms); Automated Technologies (cookies, server logs, device fingerprinting, analytics tools); Third Parties (identity verification services, payment processors, credit reference agencies, fraud prevention databases, regulatory authorities, publicly available sources).
5. Legal Basis for Processing
We process your personal data based on the following legal grounds: Contract Performance (to provide our trading services, process transactions, manage your account); Legal Obligations (AML/KYC compliance, regulatory reporting, tax obligations, responding to law enforcement requests); Legitimate Interests (fraud prevention, security measures, service improvements, marketing communications to existing clients); Consent (for marketing communications to non-clients, optional data processing, cookies and tracking).
6. How We Use Your Information
We use your personal data for: Service Delivery (creating and managing your trading account, processing deposits and withdrawals, executing trades and maintaining positions, providing customer support); Compliance (verifying your identity, conducting AML and sanctions screening, reporting to regulatory authorities, maintaining required records); Security (detecting and preventing fraud, monitoring for suspicious activity, protecting our platform and users, investigating security incidents); Communications (sending service notifications, providing market updates and analysis, responding to inquiries, delivering marketing materials where permitted); Improvements (analyzing usage patterns, developing new features, enhancing user experience, conducting research and analytics).
7. Information Sharing and Disclosure
We may share your personal data with: Group Companies (affiliated entities for service provision and compliance); Service Providers (payment processors, identity verification services, cloud hosting providers, analytics services, customer support tools); Regulatory Authorities (financial regulators, tax authorities, law enforcement agencies when legally required); Legal Requirements (court orders, legal proceedings, to protect our rights or safety, to investigate potential violations); Business Transfers (in connection with mergers, acquisitions, or asset sales). We do not sell your personal data to third parties for marketing purposes.
8. International Data Transfers
Your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not have data protection laws equivalent to those in your jurisdiction. When we transfer your data internationally, we implement appropriate safeguards including: contractual clauses approved by relevant authorities, data processing agreements with recipients, technical and organizational security measures. By using our services, you consent to such international transfers.
9. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including: Active Accounts (for the duration of your business relationship with us); Closed Accounts (minimum 5 years after account closure for regulatory compliance); Transaction Records (minimum 7 years for financial and tax records); Marketing Data (until you withdraw consent or object to processing); Technical Logs (typically 12-24 months for security purposes). We may retain data longer if required by law, legal proceedings, or to establish, exercise, or defend legal claims.
10. Data Security
We implement comprehensive security measures to protect your personal data including: Encryption (SSL/TLS for data in transit, encryption for data at rest); Access Controls (role-based access, multi-factor authentication, regular access reviews); Infrastructure Security (firewalls, intrusion detection systems, regular security assessments); Employee Training (security awareness programs, confidentiality agreements); Incident Response (security incident procedures, breach notification protocols). While we strive to protect your data, no security system is completely impenetrable, and we cannot guarantee absolute security.
12. Third-Party Services
Our platform may integrate with third-party services including: Payment Processors (for deposits and withdrawals); Analytics Providers (Google Analytics and similar services); Trading Platforms (MetaTrader 5 and related services); Communication Tools (email, chat, and support services). These third parties have their own privacy policies governing their use of your data. We encourage you to review their policies. We are not responsible for the privacy practices of third-party services.
13. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data: Right of Access (request a copy of your personal data); Right to Rectification (correct inaccurate or incomplete data); Right to Erasure (request deletion of your data, subject to legal retention requirements); Right to Restriction (limit how we process your data); Right to Data Portability (receive your data in a structured, machine-readable format); Right to Object (object to processing based on legitimate interests or for marketing); Right to Withdraw Consent (where processing is based on consent); Right to Lodge a Complaint (with relevant data protection authorities). To exercise these rights, contact us at privacy@yellowboxmarkets.com. We may need to verify your identity before processing requests. Some rights may be limited where we have overriding legal obligations.
14. Marketing Communications
We may send you marketing communications about our products and services if: you have requested information from us, you have an existing client relationship with us, or you have provided consent. Marketing communications may include: newsletters and market updates, promotional offers and bonuses, new product and feature announcements, trading education and resources. You can opt out of marketing communications at any time by: clicking the unsubscribe link in emails, updating preferences in your account settings, contacting our support team. Opting out of marketing will not affect service-related communications.
15. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information. If you believe we have collected data from a minor, please contact us immediately.
16. Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will: notify relevant regulatory authorities within required timeframes, notify affected individuals without undue delay where required, document the breach and our response measures. We maintain incident response procedures to detect, assess, and respond to data breaches promptly.
17. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated through: email notification to registered users, prominent notice on our website, in-platform notifications. We encourage you to review this policy regularly. Continued use of our services after changes constitutes acceptance of the updated policy.
18. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Email: privacy@yellowboxmarkets.com, General Support: support@yellowboxmarkets.com. Yellow Box Markets Ltd, Ground Floor, The Sotheby Building, Rodney Village, Rodney Bay, Gros-Islet, Saint Lucia. We aim to respond to all inquiries within 30 days.
Ready to Start Trading?
Open a free account today and access global markets with competitive spreads and professional trading conditions.
Your capital is at risk. CFDs are complex instruments and come with a high risk of losing money rapidly due to leverage.
