Privacy Policy
We are committed to protecting your Personal Data and your privacy.
This Privacy Policy explains how we collect and store the information you provide through the website https://ccamarkets.com (the CCA Markets).
The following principles apply:
We want you to make informed decisions about how your Personal Data is used and processed. We use various methods to keep you informed and will provide specific details when relevant. We're also happy to address any questions about applicable legal limitations.
1. The Scope?
This policy describes the types of personal data CCA Markets collects about individuals, and how that data is processed, shared with third parties, and secured.
This policy applies to information relating to an identified or identifiable natural person. An identifiable person is one who can be identified directly or through a combination of information we hold or can reasonably access.
"Processing" refers to any operation involving the use or collection of personal data, including its organization, structuring, and storage.
Our services are intended for general audiences and are not directed at individuals under the age of 18. We do not knowingly collect information from anyone under 18, and we do not permit such individuals to use our services. If we become aware that we have collected data from a minor, we will delete it promptly.
2. What Personal Data Do We Hold About You?
When you access our services, service channels, or website, we collect personal data. This may occur directly — when you provide it to us — or indirectly, through analysis of how you use our services or channels, or when we receive it from our third-party partners.
3. You are not required to disclose personal information to the company. However, withholding it may prevent us from delivering our services or granting you access to the website.
You are not required to provide us with any personal data. However, choosing not to do so may prevent us from delivering our Services or granting you access to the website.
4. What personal data do we collect? When you visit our website, we collect the following personal data from you:
This includes information collected automatically when you visit our platform: your online activity log, traffic data (including IP address, access dates, and access times), browser type, language settings, and device information, as well as software crash logs. This information is non-personal and cannot be used to identify you.
Personal Data we receive from you: any personal data you voluntarily provide when connecting to a third-party online trading platform through us.
Personal information you provide directly to third-party platforms to facilitate trading: this includes your full name, address, phone number, and email address.
5. Legal Basis and Reasons for Processing Personal Data
Your personal data is processed by the Company for the purposes described in this section, in accordance with the applicable legal basis.
The Company may only process your personal data where a valid legal basis exists. The legal grounds on which the Company relies to process your personal data are:
- By submitting personal data through this Website, you consent to its processing for one or more specified purposes, including its transfer to a third-party trading platform.
- In some cases, the Company or a third party may need to process personal data to pursue a legitimate interest — such as improving Our Services or defending legal claims.
- Processing is required to fulfill a legal obligation.
To learn more about how we process personal data to protect our legitimate interests, please contact us by email.
Below is a list of the purposes and legal grounds under which we may use the personal data you provide.
Scope, Legal Basis
1. At your request, we may share your personal data with third-party companies to facilitate access to digital trading.
You have consented to the processing of your personal data for one or more purposes.
2. To respond to your requests, questions, or concerns, we require your personal data to provide the support you need regarding our Services.
Processing is required to serve the legitimate interests of the Company or a third party.
3. Personal data is processed to meet applicable legal, administrative, or judicial obligations.
Processing is required to meet our legal obligations.
4. We may use personal data to improve our Services, including through crash reports and malfunction data collected in connection with the Services.
Processing is required to support the legitimate interests of the Company or a third party.
5. To prevent fraud and misuse of our Services
Processing is required to support the legitimate interests of the Company or a third party.
6. To carry out and manage activities required to deliver Our Services — including back-office operations, business development, strategic decision-making, and oversight functions.
Processing is required to support the legitimate interests of the Company or a third party.
7. We use statistical and other analytical techniques to inform decisions across a range of issues.
Processing data is necessary to support the legitimate interests of the Company or a third party.
8. To protect our rights, interests, and assets — as well as those of third parties — we may process Personal Data to establish or defend legal claims, in accordance with applicable laws, regulations, agreements, and any relevant terms, conditions, or policies.
Processing is required to serve the legitimate interests of the Company or a third party.
6. Sharing Personal Data with Third Parties We may share your personal data with third parties under the following circumstances. Service providers and partners: We work with trusted third-party service providers who assist in operating our platform and delivering our services. These parties are granted access to personal data only to the extent necessary to perform their functions and are bound by confidentiality obligations. Legal and regulatory requirements: We may disclose personal data when required to do so by applicable law, court order, or regulatory authority, or where disclosure is necessary to protect our legal rights or the rights of others. Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the relevant third party as part of that transaction. You will be notified of any such transfer and any changes to how your data is handled. Your consent: Where required, we will obtain your explicit consent before sharing your personal data with third parties for purposes beyond those described in this policy. We do not sell your personal data to third parties. When personal data is transferred to third parties, we take reasonable steps to ensure it receives an equivalent level of protection to that applied under this policy. Withholding consent to share your personal data in certain cases may prevent us from delivering our services or granting you access to the website.
We may share your Personal Data with third-party service providers that support our operations, including hosting and storage providers and analytics services. You may also request that we share specific Personal Data with third-party trading platforms of your choosing. In such cases, we will share the Personal Data you have provided to us directly with those platforms. Your Personal Data will then be subject to their respective privacy policies and may be shared with more than one trading platform. We may share Personal Data with affiliated entities or business partners where doing so supports the development and improvement of our products and services. Where necessary to protect the rights or assets of third parties, we may disclose Personal Data to regulatory, government, or other competent authorities. We may also share your Personal Data with prospective investors, acquirers, or lenders in connection with any proposed or completed transaction involving the Company or any entity within our group — including an asset transfer or sale, merger, restructuring, consolidation, or bankruptcy proceeding.
7. Third-Party Cookies and Services
We may work with third-party service providers, including advertising networks and analytics companies, which may also use cookies or similar technologies on our website.
Cookies are small text files placed on your device when you visit the website. They are used to collect information about your browsing habits and preferences in order to improve your experience, remember your settings, and tailor the products and services presented to you. Cookies are also used for statistical and analytics purposes.
Some cookies we use are session cookies — temporary files downloaded to your device that expire when you close your browser. Others are persistent cookies, which remain on your device after your browser is closed. Persistent cookies help the website recognize you as a returning user and allow you to resume your experience seamlessly.
Types of Cookies:
We may use them based on their purpose:
1. Essential cookies only
These cookies are required to provide the features and information you've requested and to allow you to navigate the website. They enable your device to download and stream data, access site features, and return to previously visited pages.
Session cookies collect personal data such as your username and last login date to verify that you are logged in. They are automatically deleted when you close your browser.
2. Functionality Cookies
Cookies recognize you each time you visit our site and save your preferences.
Session cookies collect personal data — such as your username and last login date — to verify that you are logged in. They are deleted when you close your browser.
3. Cookies for performance
We use cookies to collect statistical data about site performance and to conduct analysis that helps us improve your experience.
Cookies store anonymous data not linked to any identified or identifiable individual. Session cookies are removed when you close your browser; others remain valid indefinitely.
Cookies are blocked or removed
To block or remove cookies, adjust your browser's settings. The links below walk you through the process for some of the most commonly used browsers.
- Firefox
- Microsoft Edge
- Google Chrome
- Safari
Please note that disabling certain features may prevent some or all Website functions from working as expected.
Online Tracking Notice
This service does not currently support do-not-track signals.
8. How We Retain Your Personal Data
We will retain your personal data for as long as necessary to fulfill the purposes described in this Policy, or for longer periods as permitted by applicable law, regulations, or orders.
Your information will be shared with third-party trading platforms for 12 months. With your consent, this sharing will continue for an additional 12 months.
We regularly review the personal data we hold to confirm it is no longer required.
9. Transfers of Personal Information to a Third-Party Country or International Organisation
Your personal information may be transferred to other countries or to international organizations outside the country in which you reside. The Company takes all necessary steps to protect your personal data and ensure that you retain the right to assert your rights and access effective legal recourse.
These protections apply to all individuals residing in the European Economic Area (EEA).
- Transfers to a third country or international organisation are permitted where the European Commission has determined, under Article 45(3) of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (the "GDPR"), that the recipient provides an adequate level of protection for personal data.
- This transfer is made pursuant to a legally binding and enforceable agreement between public entities or authorities, in accordance with Article 46(2)(a).
- This transfer was carried out in accordance with standard contractual clauses adopted by the EU Commission under Article 46(2)(c) of the GDPR. These clauses are available at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.
To learn about the security measures used to protect your personal data when transferred to third-party countries or international organisations, contact us at info@ccamarkets.com
10. Protecting Your Personal Data We implement appropriate technical and organizational measures to safeguard your personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures are reviewed and updated as necessary to reflect changes in technology and the nature of the data we hold. Access to your personal data is restricted to personnel and authorized third parties who require it to perform their functions. All such parties are bound by confidentiality obligations. While we take reasonable steps to protect your personal data, no transmission over the internet or electronic storage system is completely secure. We cannot guarantee absolute security, and you share information with us at your own risk. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately.
We have implemented appropriate organizational and technical measures to protect personal data, including safeguards against accidental or unlawful destruction, loss, or alteration. We cannot guarantee that the security of your personal data will be maintained without error, nor can we be held liable for any indirect, incidental, or consequential damages arising from the use or disclosure of personal data. This includes, without limitation, disclosures resulting from transmission errors, unauthorized third-party access, or other causes beyond our control. Where required by legal or other obligations beyond our control, we may be required to disclose your personal data to third parties, including public authorities. We have no control over how such third parties handle or secure your personal data in those circumstances. Transmitting personal data over the internet carries inherent risk. We cannot guarantee the security of personal data you transmit to us online.
11. Links to Third-Party Websites
Our website may contain links to third-party websites and applications. These sites and apps are not under the Company's supervision, and we are not responsible for how they collect or process Personal Data. This Policy does not apply to any actions taken through third-party sites or apps.
Before accessing or using any linked third-party website or app, we strongly recommend reviewing their privacy policy. We also advise exercising caution before providing any Personal Data to them.
12. Policy Updates We may update this Policy from time to time. Any changes will be posted on this page, and where appropriate, we will notify you directly. Continued use of our services after changes are posted constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed.
Before visiting any third-party website or app, read their privacy policy carefully. We also recommend exercising caution when sharing any personal data with them.
13. Your rights regarding your personal information
You have the right to request that we verify the accuracy of Personal Data collected about you, correct any inaccuracies, and delete any Personal Data we are not required to retain. You may also request restrictions on the scope or type of processing applied to your personal information.
If you are a resident of the EEA, please refer to this page:
These rights apply to the Personal Data you have provided to us. To exercise any of these rights, please submit your request by email to the address below.
Access Rights
We can verify whether Personal Data about you is being processed. If it is, you may access that Personal Data.
We will provide an electronic copy of the Personal Data currently being processed and may charge a reasonable fee for additional copies. Data will be provided in electronic format upon request.
The right to access Personal Data must not conflict with the rights and freedoms of others. Where a request would be detrimental to another person's rights or freedoms, we may decline or limit our response.
Right to Rectification
We will correct inaccurate Personal Data upon request. You may also request that incomplete Personal Data be completed, taking into account the purpose for which it is processed.
Right to Erasure
You may request erasure of your Personal Data where: (a) the Personal Data is no longer necessary for the purpose for which it was collected or processed; (b) you withdraw consent and no other legal basis for processing exists; (c) you object to processing based on legitimate interests pursued by us or a third party; (e) the Personal Data has been unlawfully processed; or (f) erasure is required to comply with a legal obligation.
This right does not apply where processing is necessary: (a) to comply with a legal obligation under European Union or Member State law; or (b) to establish, exercise, or defend legal rights.
Right to Restriction of Processing
If you have concerns about the accuracy of your Personal Data, you may request that we restrict its processing.
Where processing is restricted, Personal Data may only be retained with your consent, or for the establishment, exercise, or defense of legal rights, for the protection of another natural person's rights, or where there is a significant public interest within the European Union or a Member State.
Right to Data Portability
Where processing is carried out by automated means and is based on your consent or a contract to which you are a party, you have the right to receive the Personal Data you have provided to us in a structured, commonly used format.
You may request that your Personal Data be transferred directly to another controller where technically feasible. Exercising this right does not affect your right to erasure, and it does not infringe on the rights or freedoms of others.
Right to Object
You have the right to object at any time to the processing of Personal Data concerning you that is based on legitimate interests pursued by us or a third party, including profiling based solely on those legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights, interests, and freedoms, or where processing is necessary for the establishment, exercise, or defense of legal rights.
With respect to direct marketing, you have the right to object at any time to the processing of your Personal Data for that purpose.
Right to Withdraw Consent
You may withdraw your consent to our processing of your Personal Data at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.
You have the right to lodge a complaint with a supervisory authority established by a Member State to protect the fundamental rights of individuals in connection with the processing of Personal Data within the European Union.
European Union and Member State law may limit the rights described in this section.
We will respond to requests made under this section within one month of receipt. Where necessary, and depending on the complexity or volume of requests, this period may be extended by up to two months. We will notify you of any extension within one month of receiving your request, along with the reasons for the delay.
Unless otherwise provided under this section, information provided in response to your rights requests will be supplied free of charge. Where a request is manifestly unfounded or excessive, particularly where requests are repetitive, we may charge a reasonable fee to cover administrative costs or decline to act on the request.
Where we have reasonable doubt about the identity of the person submitting a request, we may ask for additional information to confirm identity before proceeding.