Privacy Policy
Introduction
IUX MARKETS LIMITED (“IUX”, “the Company,” “us,” “we,” or “our”) recognizes the importance of personal data protection. Protecting client’s personal data and maintaining security are among our highest priorities. Thus, IUX has laid down this Privacy Policy (“the Policy”) to ensure its commitment to providing secure services and safeguard its client’s personal data with the highest standard. This Policy shall prescribe the process of data collection, usage, storage, transmission, and deletion, also including other rights of the Data Subject.
Clients are requested to carefully read through this Policy thoroughly, before entering into business relationship with the Company or carrying out any activity with the Company. Through entering into an agreement with the Company, clients agree to the terms of our Policy, as set out in this document.
Purpose and Scope of the Policy
This Policy shall apply to its clients, contractors, users of websites operated under IUX, and third-party service providers who have access to or process personal data (“Client,” “you,” “your”). This Policy shall cover all personal data collected, stored, processed, transferred, or deleted by IUX in the course of our business operations. In this regard, IUX shall act as the data controller for all additional personal data related to our platform, such as information you provide when you establish an account, post a review, or send a response. IUX shall act in compliance with relevant and applicable data protection/privacy laws and regulations.
Please be informed that if you’ve been invited to submit IUX reviews by businesses that use our services, or by us on their behalf, those businesses will be the data controllers responsible for such invitations and any personal data linked with them. If you have any queries regarding such invites or want to exercise your rights in relation to any data used in that context, please contact the relevant businesses directly, since we cannot assist you.
Interpretation of Terms
Unless otherwise stated herein, the following terms shall have the meaning as set forth here below:
“Data Controller” means any individual or public body which, alone or jointly with others, determines the purposes and means of the processing of personal data and has decision-making power with respect to the processing;
“Data Subject” means any individual, excluding legal entity, who can be identified from —
- personal data; or
- from personal data and other information to which the Company has or is likely to have access;
“individual” means a natural person, whether living or deceased;
“personal data” means any information that relates to a data subject and can identify such data subject, whether such information is —
- true or not;
- directly or indirectly;
- in any printed or electronic form;
“processing” or “process” means any operation performed on individual’s personal data, including collection, usage, storage, transmission, and deletion of personal data;
Collection of Personal Data
When register a IUX user account, create a business account on behalf of your company, or otherwise use our platform, Client agrees to have their personal data processed and specifically consent to the collection, systemization, aggregation, storage, revision (updating, changing), usage, anonymization, blocking, deletion, and distribution (transfer) of said personal data to third parties in accordance with the conditions set forth in this Policy. The Company shall collect personal data within the purpose, scope, and lawful and fair methods as is necessary for providing functional services, adherence to legal requirements, and using this data if a dispute arises between Client and IUX. Accordingly, Company will inform the Data Subject to gain acknowledgment and consent through electronic or other methods as specified by the Company.
Scope of Personal Data Collection
IUX collects personal data only for specific, legitimate purposes. The types of personal data we collect may include, but are not limited to:
- Contact information: Your name and email address, as well as any other contact information you may provide to us at any time.
- Device and location details: Your IP address, browser preferences (browser type, language, and time zone), and location.
- User account information: your username, password, photo, location, and preferred language.
- Business account information: Your password, your company name and domain, and certain other information you choose to add to your business profile, such as details about the type of services your company offers.
- Usage and profiling information: Your IUX search history, how you’ve interacted with our platform, or emails we send to you, including the time you spend on our site, features or functions you’ve accessed, marketing emails you’ve opened, and links you’ve clicked.
- Your verification data:
- Information about whether your user account or your business domain is verified (your verification badge).
- Data provided during the verification process for consumers and the verification process for businesses:
- Your first and last name.
- Images of the documents you submitted.
- Number and date of expiry of the documents you submitted.
- Information about questions you asked on a business’s website:
- Which business did you ask a question?
- The product you asked the question about.
- The date you asked the question.
- The business’s response to the question.
- Preferences data: Selected choices linked with your account, such as particular consents granted or denied, newsletters or similar email preferences, and cookies holding your preferences.
- Communication information: This includes messages we receive from you via email and other electronic communication means, such as notices, comments, assistance requests, and inquiries, as well as metadata linked with those interactions, such as time and date.
- Call recordings: For training, quality control, and compliance purposes, all inbound and outgoing phone calls made to or through IUX may be recorded. Personal data (such as name and contact information) given during a phone call will be digitally captured in order to provide suitable services.
- Information from other services, including social networks: You may link your IUX profile to your social media accounts, such as Facebook (“social network”). When you do this, we will automatically gather certain information about you from your social network, based on the information you have made public on that social network and your privacy settings for sharing such information on that social network. We may gather the following data:
- Username and/or name
- Profile picture
- Email address
- Your social networks
Providing this information is required for client identification and thus allows clients to perform various operations in their trading accounts on our platform. The Company may also collect data to improve our understanding of their needs and preferences by communicating through communication with clients over the phone. Clients provide this data to us voluntarily. The Company uses the data that clients directly provide when communicating.
If you provide personal data of third parties, such as family members, emergency contacts, or reference persons, please inform such persons of the information described in this Policy. Also, in some cases, you may need to obtain consent from the individuals in order for us to process their personal data.
In the event that the Company requires the processing of the client’s personal data for purposes beyond those initially specified, the Company shall inform the client accordingly. If such additional processing cannot be justified by any other legal bases, the Company shall seek the client’s explicit consent before proceeding with the processing of personal data for the new purpose. The client will have the option to provide or withhold consent based on their preferences.
How We Collect Personal Data
In general, IUX will directly collect your personal data through these processes or channels, including, but not limited to,
- when received directly via documents; and
- when communicating directly via email or any social network.
However, we may collect additional personal data through third-party organizations.
Personal Data Received From Data Subject Directly
IUX may gather its Client’s personal data directly via your identification documents or other information you entrust to IUX during our course of business or as requested by IUX with your consent for its operations, whether in the printed or digital form. It also includes, but is not limited to, information already held by IUX arising from the use of services, interactions, visits, searches through digital channels, telephone communications, email communications, fax communications, postal communications, or various social media platforms. For example, when you enter your details to create an account with us or engage with our platform or marketing communications.
This includes when you enter into legal contracts or agreements with IUX, when you submit documents and copies of documents to IUX, when you make payments to IUX, and when you offer goods or services to IUX. This also includes when you inquire, comment, provide feedback, or submit complaints to IUX via telephone, electronic mail, email, fax, postal services, applications, or other means of communication.
Personal Data Received from Third Parties
IUX may receive its Client’s personal data from third parties. Third parties refer to individuals or legal entities who are not the Data Subjects. This may include the collection of personal data through IUX’s contractual partners or intermediaries. When you sign up for an IUX account through Facebook, for example, your account is instantly pre-populated with the information we receive from them. In some cases, IUX may collect your personal data from public sources, government agencies, or state enterprises; sources related to your business; or commercial sources.
Personal Data Received From Data Subject Automatically
IUX also automatically generates or collects information from your computer or device as you use our services, such as your IP address, location, information about the device and browser you’re using to access IUX, or information about your usage and profiling, such as your interaction with our platform or marketing emails.
Other Methods of Personal Data Collection
When IUX collects its Client’s personal data, the client reserves the right to be informed of details as specified in the Policy. This includes, but is not limited to, the purposes and legal bases for the collection, use, disclosure, or any processing of personal data. If personal data processing requires your consent under the relevant data protection/privacy laws, IUX will seek your explicit consent.
In cases where IUX collected your personal data before the relevant data protection/privacy laws concerning the collection, use, disclosure, or any processing of personal data came into effect, IUX will continue to collect and use your personal data for the original purposes previously notified to you. Clients have the right to withdraw consent by contacting IUX using the contact details provided by the Policy. IUX reserves the right to consider requests for withdrawal of consent and to proceed according to the requirements of the relevant data protection/privacy laws.
Processing of Personal Data
Under the provisions of data protection/privacy laws, IUX will carry out any activities and process your personal data, according to the legal bases and the purposes as specified hereunder.
IUX will process its Client’s personal data for any activities based on one or more of the following legal grounds:
- Consent of the Data Subject;
- Performance of a contract;
- Compliance with legal obligations; and/or
- Legitimate interests pursued by IUX or a third-party service provider who have access to or process your personal data.
IUX shall process your personal data for each activity according to the following purposes:
- Provide our services to you, including giving you access to your user account and our platform, providing you with access to your company’s business account and our website, opening and configuring trading accounts, and issuing activation codes and passwords;
- Identify you as a registered user when you log into our platform and revisit our platform;
- Improve our platform and services;
- Respond to your questions and provide customer service;
- Send you our newsletters;
- Engage in various internal business purposes, such as data analysis, audits, fraud monitoring and prevention, developing new products and services, improving or modifying our platform and our services, identifying usage trends, determining the effectiveness of our promotional campaigns and operating and expanding our business activities;
- Train our staff and for quality control purposes, helping us improve the quality of our services;
- Exercise or comply with our own legal rights or obligations in connection with legal claims, or for compliance, regulatory, and auditing purposes, where necessary. For example, we may retain information where we are required by law, or if we are compelled to do so by a court order or regulatory body; and
- Enforce our Terms & Conditions.
We need to process your personal data to:
- Perform our contract with you or your company.
- Exercise and comply with our own legal rights and obligations and operate an online review platform in compliance with applicable legal acts.
- Pursue legitimate business interests related to operating our website and providing our services to you. Where we process your personal data based on a legitimate interest, we will only do so where the processing is relevant, adequate, and limited to what is necessary for the purpose it was collected for. And of course, we’ll always ensure our legitimate interests don’t unfairly impact your own rights and freedoms.
- Establish, exercise, or defend legal claims, where necessary.
We will process your personal data according to the stated legal bases and the purposes. If there came upon a case where your personal data were to be processed for other purposes that cannot be justified by any other legal bases, we would inform you and ask for your consent to process personal data on such uses.
If you have expressly given us your consent to process your personal data, such as when subscribing to our newsletters or accepting certain cookies on your device, you have the right to revoke your consent at any time, either by using the functionality provided within the relevant product feature or by contacting us. Please note, however, that we may still be entitled to continue processing your information if justified by another legal basis as mentioned above.
Disclosure of Personal Data
When IUX discloses its Client’s personal data to third parties, IUX will implement appropriate measures to protect the disclosed personal data and comply with personal data protection standards and duties. This may include establishing a Data Processing Agreement.
In cases where IUX sends or transfers your personal data abroad, IUX will ensure that the destination country, international organization, or foreign data recipient has adequate personal data protection standards. Alternatively, IUX will ensure that the transfer complies with the criteria set by data protection/privacy laws. This may also involve establishing a Data Processing Agreement. In certain events, IUX may seek your consent for the international transfer of your personal data.
Disclosure of Personal Data with Third Parties
IUX may disclose its Client’s personal data to the following third parties in accordance with the aforementioned legal bases, purposes, and legal requirements:
- Affiliates of IUX
This includes the executives, directors, employees, staff, agents, and/or internal personnel of such companies as necessary for processing your personal data.
- Business Partners
This includes prospective partners, individuals associated with partners or prospective partners, service providers, and data processors appointed or hired by IUX to manage/process personal data on IUX’s behalf in providing various services, such as information technology services, data recording services, payment services, postal services, parcel delivery services, printing services, data analysis services, research services, marketing services, or any other services that may benefit the Client or are related to IUX’s business operations.
- IUX’s Consultants
This includes legal advisors, lawyers, auditors, or other experts, both internal and external to IUX.
- Government Agencies with Regulatory Authority
This includes agencies that request the disclosure of personal data under legal authority or in connection with legal proceedings, or as permitted by relevant laws.
- Other Individuals or Entities
This includes any individuals or entities to whom the Client has consented to disclose your personal data.
In order for third-party organizations to process personal data as part of their responsibilities under contract with the Company or legal obligations, the Company may be required to disclose or transfer the client’s personal data to third-party organizations. The Company shall reserve the right to provide personal data to third parties if required by law or if we receive formal requests from law enforcement and other government agencies. The Company may also provide clients’ personal data to tax authorities or organizations that require the data to be provided in order to comply with laws against money laundering and financing terrorism, or when necessary to protect our rights or property. The Company may pass client’s personal data on to third-party authentication service providers when clients use our system to perform identity checks and document verification.
For the cases where personal data are being disclosed or transferred to third-party organizations, we will ensure that the minimum amount of personal data is being disclosed or transferred and may consider anonymization and pseudonymization techniques for greater security. Further, the third-party organizations who will process your personal data for us will be required to have in place appropriate privacy policies. We do not permit these third-party organizations to use your personal data in a way that diverges from the agreed legal bases and purposes. Personal data will only be shared with third parties when necessary to fulfill the intended purpose. The Company ensures that only the minimum amount of personal data required for the specific purpose is disclosed to third parties.
IUX may be required to pass on personal data to data recipients in foreign countries. The Company shall process and store your personal data in accordance with the scope and processing purposes specified in this Policy within Saint Lucia and other countries. The Company transfers your data to, or store or access, it in jurisdictions that may not provide levels of data protection equivalent to your home jurisdiction. The Company attest that we will provide appropriate data protection safeguards in compliance with the regulations of the destination country.
Retention of Personal Data
IUX will store its Client’s personal data in both physical and digital formats or as electronic documents at IUX’s headquarters and branches. The personal data will be stored on servers accessible by IUX, with appropriate security measures in place to protect the disclosed personal data and comply with personal data protection standards and duties as prescribed by relevant data protection/privacy laws.
IUX will retain its Client’s personal data for as long as necessary to achieve the purposes specified for processing such personal data. The retention period of personal data will vary based on the purposes specified for processing the personal data. Additionally, IUX will retain personal data for the duration required by relevant laws, taking into account the legal prescription period for any legal actions that may arise from or relate to the documents or personal data collected. For example, to fulfill a contract between us, perform a service you requested, meet legal requirements, or act for our legitimate interests.
Personal information you provide is retained for the duration of your IUX account or as needed to provide you with our services. If you choose to deactivate your user account, we will keep a log that includes your name, email address, and the date you deleted your account. Even if you deactivate your IUX account, we may preserve certain information for which we are obligated by law or have compelling legitimate interests. IUX may retain some data for longer periods of time for a variety of reasons, including (but not limited to) security, fraud and platform abuse prevention, compliance with legal or regulatory obligations, and defending our lawful business interests.
After the aforementioned retention period and if there is no longer a justifiable purpose for us to store your data, IUX will either delete or destroy the personal data from its storage or systems and those of service providers to IUX (if any) or render the personal data of its Client unidentifiable, unless IUX is permitted to retain such personal data further as prescribed by data protection/privacy laws or other relevant laws. However, you can remove or request that we erase your personal data at any time in accordance with your rights as specified in this Policy.
Security Measures for Personal Data Protection
IUX has implemented a variety of organizational, technological, and administrative safeguards and constantly evaluates our system for vulnerabilities to ensure the security of its Client’s personal data. In this connection, third-party organizations that process personal data on our behalf are required to ensure the security of your personal data and to carry out the processing in an appropriate manner.
We cannot, however, guarantee or warrant the security of the information you communicate to us since the internet is not a perfectly secure environment. Emails transmitted through the platform may not be encrypted; therefore, please do not include any private information in your emails to us.
Automated decision-making
IUX may utilize automated processes to enhance our service (e.g., automatic profiling). In any case, the Company made a decision that would significantly affect the Client based solely on the automated process. The Client may request human intervention and not be subject to such automated decision-making unless it is necessary for the performance of the contract. Further, the Client shall retain their right to contest the automated decisions to be reevaluated. The Company ensures that the decision made by the automatic system shall not violate and comply with relevant laws and regulations.
Rights of The Data Subject
- Access and download your personal data
If you have an IUX user account, you have the right to request access to the personal data we hold to check whether or not users’ personal data is being processed, and if it is, you can request details about that processing. Further, you may request a copy of their personal data undergoing processing. Please note that the Company may need to verify your identity before fulfilling such requests to secure your privacy and security.
You also have rights in respect to the personal information we have on file for you. These rights may be limited, for example, if complying with your request might expose personal information about another person or if you ask us to erase information that we are obligated by law or have strong legitimate interests in keeping. If your issues remain unanswered, you have the right to file a complaint with a data protection authority.
If you have an IUX business account or no account at all, you can email [email protected] and request details about your personal data.
- Correction and deletion of your personal data
If any of your personal data is incorrect or misleading, if your personal data changes, or if you no longer want to appear on the platform, you reserve the right to request a rectification of any inaccurate/incorrect personal information or remove the information yourself using your IUX user account. You may update or correct your information in order to keep it correct and concurrent with the present. In the event where the Client wishes to exercise such rights, you are required to submit a notice to the Company specifying the details of the information you wish to rectify. Notices must be sent by email with contents consisting of the first and last names of the Client, account numbers, phone numbers, and passport or annual leave, each with a valid proof of the Client’s information in which you wish to rectify.
The notices must be sent to [email protected] with the scanned files attached and have to be sent from the same email that the client used during their account registration. The Company has the right to request other documents to verify the Client’s identity and comply with the regulations relevant to its Client. Delay or failure to comply with this paragraph will be a violation of this Agreement by the Client and may lead to the Client’s account closure.
- Other rights
In addition to the rights outlined above, you have the right to object to the processing of your personal data, as well as the right to have the processing of your personal data restricted (particularly where the data is not required to meet a contractual or other legal requirement, such as the processing of your personal data for direct marketing purposes).
You may withdraw your consent at any moment if we have requested it. You may withdraw your permission at any time by utilizing the capability provided within the relevant product feature or contacting us. If you request that IUX stop processing your data, this will have no effect.
In some circumstances, IUX may not be able to carry out and support exercise of your rights, including, but not limited to, the cases where a legal process is taking place or where we are required to oblige with the court order. However, where you have given consent to process personal data, you will continue to have the right to retract your consent by contacting us. We will therefore be required to terminate such processing as soon as possible. Please note that the retraction only applies to the processing carried out thereafter. Any processing carried out before the retraction will not be reversed.
Please be informed that we do record all requests to ensure all issues are resolved.
In the case where you intend to exercise your rights or to file a complaint against your personal data processing, please contact our Data Protection Officer. We will process your request in a secure and timely manner as required by the laws.
Children’s information
Our platform is not intended for children under the age of 18, and we do not intentionally collect personal information from them. If you believe a child under the age of 18 has provided us with personal information, please notify us using the details provided below.
Data Protection Policy Revision
IUX reserves the right to amend, revise, modify, change, or terminate the Policy at its sole discretion at any time. Any changes or updates to the Policy shall be effective immediately upon posting on the Company’s website.
Contact Us
We want this information to be as straightforward and open as possible. However, in case you wish IUX to take any action, have any questions, or want to exercise your rights as specified in this Policy, please contact our Data Protection Officer at [email protected].
