Privacy Policy

TegasFX Limited (trading name tegasFX) is the controller of the personal data described in this policy. This means that we decide why and how your personal data is processed.

• Company: TegasFX Limited, company number HT01224150.
• Address: P.B. 1257 Bonovo Road, Fomboni, Comoros.
• Email for privacy requests: support@tegasfx.com.

In this policy, "tegasFX", "we", "us" and "our" mean TegasFX Limited. "You" means any person whose personal data we process, such as website visitors, prospective clients, clients, authorised persons of corporate clients and event participants.

This policy applies to personal data that we process through the following channels.

• Our website at www.tegasfx.com and all of its language versions.
• Our client area for registration, account opening and account management at account.tegasfx.com, and our dashboard at dash.tegasfx.com.
• The trading accounts and trading platforms we provide, including MetaTrader 5.
• Our apps and activities at events and trade fairs, including games and prize draws.
• Our marketing emails and newsletters.
• Emails, calls, chats, meetings and other communication with us.

Some services, such as copy trading, PAMM and third-party trading tools, are provided together with other companies. Where those companies decide for themselves how to use your personal data, their own privacy policies also apply.

Website visitors

When you visit our website, our hosting provider Cloudflare processes technical data that every browser sends, such as your IP address, the address of the page you request, the date and time of the request, your browser type and language settings, and the page that referred you. We use this data to deliver the website, to keep it secure and stable, and to detect and block abuse. This is based on our legitimate interest in running a secure website.

The website also remembers your language and, if you arrived through a partner link, the partner reference contained in that link. Analytics only runs if you accept it in our cookie notice. Section 5 lists the cookies and similar technologies we use.

You do not create an account on this website. The website does not ask for identity documents or payment details. These are only collected in our client area.

Contact requests

When you use the contact form on our website, you send us your name, your email address, the topic you choose and your message, and, if you wish, your phone number and the name of your organisation. The form is delivered to our support team by email. The website itself does not store your message.

We use this information to answer your request and to keep a record of our correspondence. If your request concerns your account or opening an account, the legal basis is the performance of a contract or steps taken at your request before entering into a contract. Otherwise, it is our legitimate interest in answering enquiries.

To protect the form against automated abuse, our hosting provider counts the requests sent from each IP address over a short period and blocks excessive requests.

Account opening and client relationship

When you register in our client area, open a trading account and use our services, we collect the following personal data.

• Identity data, such as your full name and any other names you use, date and place of birth, nationality, a photo identity document such as a passport or national identity card, and the results of identity checks.
• Contact data, such as your permanent address, proof of address, email address and phone numbers.
• Economic and financial profile, such as your profession or occupation, employer, income, source of funds and wealth, and your trading knowledge and experience.
• Screening data, such as whether you are a politically exposed person and the results of sanctions and other checks required by law.
• Account data, such as your account numbers, account type, login details, settings and the preferences you choose.
• Transaction and trading data, such as deposits, withdrawals, payment details, orders, positions, trading history and account statements.
• Technical data from the client area and trading platforms, such as IP address, device and browser information, login times and platform logs.
• Referral data, such as whether a partner or Introducing Broker referred you and the partner reference.

If you open an account for a company or another legal entity, we also collect the data listed above about its directors, shareholders, beneficial owners and authorised persons, as described in our AML-KYC Policy.

We use this personal data for the following purposes.

• To register you, verify your identity and decide whether we can open an account for you. This is based on the performance of a contract, steps taken at your request before entering into a contract, and our legal obligations.
• To provide our services, such as executing orders, processing deposits and withdrawals, providing account statements and supporting you. This is based on the performance of our contract with you.
• To meet our legal and regulatory obligations, such as anti-money laundering and counter-terrorist financing checks, customer due diligence, sanctions screening, record keeping, reporting to authorities and tax obligations. This is based on our legal obligations.
• To manage risk, prevent fraud and misuse, and keep accounts and systems secure. This is based on our legal obligations and our legitimate interest in protecting our clients and our business.
• To handle complaints, disputes and legal claims. This is based on our legitimate interest in establishing, exercising and defending legal claims.
• To improve our services and our clients' experience. This is based on our legitimate interest in developing our business.

If you do not provide the information we need for identity checks or to meet our legal obligations, we cannot open or continue your account.

Client area and dashboard

When you sign in to our client area or dashboard, we process your login data, information about your session and its security, such as your IP address and device information, and the actions you take, for example deposit and withdrawal requests or changes to your details. We use this data to provide the client area and dashboard, to keep your account secure and to detect suspicious activity. This is based on the performance of our contract with you and our legitimate interest in keeping accounts secure. The client area and dashboard use cookies that are needed to keep you signed in and to protect your account.

Marketing emails and newsletters

We send you marketing emails and newsletters only if you have given us your explicit consent, for example by ticking a box when you register in our client area, at an event or on a newsletter sign-up form.

For this purpose we process your name, email address and language, a record of when and how you gave your consent, and information about how you interact with our emails, such as whether an email was opened and which links were clicked. We use the email service provider Customer.io to send these emails and to manage your preferences.

Marketing emails we send will include an unsubscribe link. You can also withdraw your consent at any time by contacting support@tegasfx.com. Withdrawing your consent is free of charge and does not affect processing that took place before the withdrawal. After you withdraw your consent, we keep your email address on a suppression list so that we do not send you marketing emails again by mistake.

Messages we need to send you as a client, for example about your account, security, changes to our terms or legal notices, are not marketing. We send them based on our contract with you or our legal obligations.

Events, trade fairs, games and prize draws

When you take part in our activities at events and trade fairs, for example a game or a prize draw in our event app, we process your name, your email address and your game results and, if you win, the information needed to hand over your prize. We use this data to run the activity, to record results, to contact winners, to hand over prizes and to prevent manipulation. This is based on the participation terms you accept when you take part.

If you also sign up for our newsletter at an event, we use your email address for marketing only on the basis of that separate consent.

Communication and support

When you contact us by email, phone, chat, social media or in person, we process your contact details and the content of your communication to answer you and to support you. This is based on the performance of our contract with you or our legitimate interest in answering enquiries.

As described in our Client Service Agreement, we may record telephone conversations, chats and meetings with clients and use these recordings or transcripts as evidence of instructions and agreements. This is based on our legal obligations and our legitimate interest in documenting instructions and resolving disputes.

Security and prevention of abuse

We process technical data, account activity and transaction data to protect our website, systems and clients, to detect and prevent fraud, money laundering, market abuse and other misuse, and to enforce our terms. This is based on our legal obligations and our legitimate interest in keeping our services secure.

Where data protection laws require a legal basis for processing personal data, we rely on one or more of the following.

• Contract: the processing is needed to provide the services you request from us, or to take steps at your request before entering into a contract, such as opening an account.
• Legal obligation: the processing is needed to comply with laws that apply to us, such as anti-money laundering, sanctions, record keeping and tax laws, and to answer lawful requests from authorities.
• Legitimate interests: the processing is needed for our legitimate interests, such as running a secure website, preventing fraud, improving our services and defending legal claims, and these interests are not overridden by your interests, rights and freedoms.
• Consent: the processing is based on your consent, such as marketing emails and analytics. You can withdraw your consent at any time.

Cookies are small text files that a website stores in your browser. Similar technologies, such as the local storage of your browser, work in a comparable way. Our website uses the following cookies and similar technologies.

Set by our website

• NEXT_LOCALE: remembers the language you chose or the language version you visited, so that the website opens in that language next time. Stored for 12 months.
• tegas_referral_lid, tegas_referral_pid, tegas_referral_lid_client and tegas_referral_pid_client: store the partner reference from a partner link, which are the lid and pid values in the web address, so that the partner who referred you is credited when you register. Stored for 3 days and readable by our client area at account.tegasfx.com.
• tegasfx_cookie_consent: records that you accepted analytics. Set only if you select Accept in our cookie notice and stored for 6 months.
• tegasfx-cookie-consent in local storage: records whether you accepted or rejected analytics, so that we do not ask you again on every page. Kept until you clear the site data in your browser.

Analytics with your consent

If you select Accept in our cookie notice, our website loads Contentsquare, an analytics service. Contentsquare sets its own cookies and collects information about how you use our pages, such as the pages you view, clicks, scrolling and mouse movements, and information about your device and browser. We use this information to understand how visitors use our website and to improve it. This is based on your consent.

If you select Reject or close the notice, Contentsquare is not loaded. To change your choice later, delete the cookies and site data for tegasfx.com in your browser settings. The cookie notice then appears again on your next visit.

Content from other providers

• Trustpilot: some pages show reviews from Trustpilot. When you scroll to such a section, your browser loads the Trustpilot widget from Trustpilot's servers. Trustpilot receives your IP address and browser information, may set its own cookies and processes this data under its own privacy policy.
• fxcopy.community: our copy trading page loads the list of strategy providers and their pictures directly from fxcopy.community, the provider of our copy trading service. Your browser therefore sends your IP address and browser information to this provider. If you follow a link to invest in a strategy, you continue on the provider's website.
• Cloudflare: as our hosting provider, Cloudflare may set cookies that are strictly necessary to protect the website, for example when it checks that a visitor is not an automated program.

Our website does not use advertising cookies or social media plugins.

You can block or delete cookies in your browser settings. If you block the cookies set by our website, the website still works, but it may not remember your language or credit the partner who referred you.

We share personal data only where this is needed for the purposes described in this policy.

Service providers

These providers process personal data on our behalf and under our instructions.

• Cloudflare: hosts and delivers this website, protects it against abuse and limits requests to our contact form.
• Vercel: hosts our client area at account.tegasfx.com, our dashboard at dash.tegasfx.com and our event app, protects them against bots and abuse, and measures page performance and sign-in and registration events in the client area.
• FXBO: provides the back office system in which client accounts, applications and transactions are managed.
• MetaTrader 5: is the trading platform on which your trading accounts run.
• Supabase: stores the profile settings that connect your dashboard login to the right version of the dashboard, and the entries, results and marketing consents of our event games.
• Convex: stores your dashboard preferences, such as hidden accounts and loyalty goals.
• Upstash: stores the sign-in sessions of our client area and counters of sign-in and registration attempts, for session management and rate limiting. After you sign in, your session holds your email address, your user ID and encrypted session and refresh tokens for up to 30 days. The attempt counters use your email address and IP address, so that we can block abuse of the client area.
• Railway: hosts our API gateway at api.tegasfx.com, together with its database and job queue, through which approved partners and integrations access our client systems.
• Sentry: receives error reports from this API gateway, so that we can find and fix faults.
• Customer.io: sends our marketing emails, only to people who have given their consent, and manages their email preferences.
• Email delivery providers: deliver contact form messages and service emails, such as prize notifications from our event games.
• Contentsquare: analyses how visitors use this website, only if you accept analytics in our cookie notice.
• Providers of identity verification, payment processing and IT support: help us verify identities, process deposits and withdrawals and run our systems.

Other recipients

• Banks and payment service providers, to process your deposits and withdrawals.
• Partners and Introducing Brokers who referred you, with the information needed to attribute your account to them and to calculate their remuneration. Where an Introducing Broker works on our behalf, we may also share the information needed to complete due diligence and approve your account application, as set out in our Client Service Agreement.
• Providers of copy trading, PAMM and other services that you choose to use, with the information needed to provide that service.
• Other legal entities of tegasFX and agencies that work on our behalf to analyse client data for our sales and marketing, as set out in our Client Service Agreement.
• Regulators, supervisory authorities, tax authorities, law enforcement agencies, courts and other public bodies, where the law requires us to disclose information or where this is needed to establish, exercise or defend legal claims.
• Professional advisers, such as lawyers, auditors and accountants, where they need the data to advise us.
• A buyer or successor, if we sell or transfer all or part of our business, under the same protections as described in this policy.

We expect our service providers to protect personal data and to use it only for the services they provide to us.

tegasFX is based in Comoros. Our service providers operate in several countries, including the United States, the United Kingdom and member states of the European Union, and Cloudflare delivers our website from data centres around the world, usually from one close to you. Your personal data may therefore be processed in countries whose data protection laws differ from the laws in your country.

Where the law that applies to you requires safeguards for such transfers, we use appropriate safeguards, such as standard contractual clauses approved by the European Commission or the United Kingdom, or the safeguards our service providers offer for their services.

We keep personal data only as long as we need it for the purposes described in this policy, and at least as long as the law requires.

• Client records, including identity documents, due diligence information, transaction records and correspondence: at least 7 years after the end of our business relationship or after the transaction, as described in our AML-KYC Policy, and longer where a legal claim, an investigation or a request from an authority requires it.
• Applications that do not lead to an account: as long as needed to handle the application and to meet our legal obligations.
• Contact requests outside a client relationship: as long as needed to answer your request and any follow-up questions, unless we must keep them for legal reasons.
• Marketing data: until you withdraw your consent. We then keep your email address on our suppression list.
• Event and game data: as long as needed to run the activity and hand over prizes. We delete or anonymise the data of participants who did not win and did not consent to marketing no later than 90 days after the end of the event, and the data of winners no later than 12 months after the end of the event. Data covered by a marketing consent is kept until you withdraw that consent.
• Recordings and transcripts of communication with clients: as part of the client records described above.
• Technical logs: for a short period needed for security and troubleshooting.
• Cookies and local storage: for the periods listed in section 5.

We use technical and organisational measures appropriate to the risk to protect personal data against loss, misuse and unauthorised access. These include encrypted connections for our website and client area, access limited to staff and service providers who need the data for their tasks, and protection of our website against automated abuse.

No method of transmission or storage is completely secure. Please keep your passwords secret and contact us immediately if you believe that someone else has accessed your account.

Whatever country you live in, you have the following rights regarding your personal data.

• Access: ask for a copy of the personal data we hold about you and for information about how we use it.
• Rectification: ask us to correct inaccurate data or to complete incomplete data.
• Erasure: ask us to delete your data. We may need to keep some data where the law requires it, for example the client records described in section 8.
• Restriction: ask us to limit how we use your data, for example while we check a correction you requested.
• Objection: object to processing based on our legitimate interests and, at any time, to the use of your data for direct marketing.
• Data portability: receive the data you provided to us in a structured, commonly used and machine-readable format, or ask us to send it to another organisation where this is technically possible.
• Withdrawal of consent: withdraw your consent at any time where we rely on it. This does not affect processing that took place before the withdrawal.

To exercise your rights, write to support@tegasfx.com. Exercising your rights is free of charge. We may ask you to confirm your identity before we act on your request. We respond within one month. If a request is complex or we receive many requests, we may extend this period by up to two further months and will tell you why.

Right to complain

If you are not satisfied with how we handle your personal data, please contact us first so that we can try to resolve your concern. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live, where you work or where you believe the infringement took place.

Our services are only for adults aged 18 or over. This also applies to our games and prize draws at events.

We do not knowingly collect personal data from anyone under 18. If you believe that a minor has provided us with personal data, please contact us and we will delete it, unless the law requires us to keep it.

Our website links to other websites and social media pages, such as X, Instagram, Facebook and Discord. These links do not send personal data to those providers until you click them.

Once you leave our website, the provider of the other website is responsible for how it processes your data.

We may update this policy when our services or the law change. The date at the top of this policy shows when it was last updated.

If we make significant changes, we will inform clients by email or in the client area before the changes take effect.

For questions about this policy or to exercise your rights, contact us using the details below.

• Email: support@tegasfx.com, with the subject "Privacy request".
• Post: TegasFX Limited, P.B. 1257 Bonovo Road, Fomboni, Comoros.