Privacy Policy

1. Who is responsible and what this policy covers

The operator identified below is responsible for the personal information it processes when you use this website, contact it, or interact with its referral and campaign-measurement activities. “We”, “us” and “our” refer to that operator.

This policy covers the website and the operator’s own referral records. It does not claim to describe every data practice of the Trading.one app developer, Apple, Google or a trading platform. Each organisation is responsible for the processing it controls. A named advertiser is not automatically the app developer, broker or privacy controller.

Before providing information in the app or opening a trading account, review the identity and privacy notice of the organisation receiving it. Information entered into a third-party registration form is subject to that provider’s notice as well as any applicable notice explaining the app’s involvement.

2. Information involved

Website connection information

Your browser sends technical information needed to request a page, such as an IP address, browser or device information, the requested address and request time. Hosting and security systems may record access or error logs, including referral information when the browser supplies it. The hosting provider and actual log settings must be recorded in the provider register below.

These website pages contain no account, payment or trading-registration form. Do not send passwords, recovery phrases, full payment-card details or identity documents through a general support request.

Information you provide when contacting us

If you contact us, we receive the contact details, message and attachments you choose to send. Provide only what is needed to answer the question or resolve the request. We may keep a record of the request, our response and any proportionate verification needed to protect your information.

Referral and registration measurement

The Android button contains campaign parameters and opens an AppsFlyer OneLink address. This can involve technical information about the click, device and network. The Android app also uses AppsFlyer for attribution. Data available for measurement depends on the integration, device permissions and privacy choices.

When a registration is completed through the app’s third-party registration flow, a confirmation is returned through a postback. Referral measurement can involve a campaign or click identifier, event status and time. The operator must confirm the actual fields and recipients in the register below; a registration confirmation should not be described as anonymous merely because it omits a name.

The iOS button on this website links directly to the App Store. This does not establish which SDKs or measurement services are installed in the iOS app.

3. Why information is used

• Delivering and protecting the website: serving pages, diagnosing errors, detecting abuse and investigating security incidents.
• Responding to you: answering questions, handling privacy requests and resolving complaints.
• Measuring referrals: linking eligible campaign interactions to reported registrations, assessing campaign performance and identifying duplicate or invalid events.
• Meeting legal obligations: responding to valid legal requests and retaining records where the law requires it.

Where consent is required for a particular use, collection or disclosure, we ask for it before that processing takes place. Visiting this page is not blanket consent to optional tracking or marketing. Before using information for a new, incompatible purpose, we explain the change and obtain any consent required by law.

Any use of registration events for advertising optimisation must be disclosed with the receiving advertising platform in the provider register. A postback received by the operator does not, by itself, mean the same data is sent to Google Ads.

4. Who receives information

Information is shared only to the extent needed for a disclosed purpose and permitted by applicable law. Relevant categories are hosting and security providers, attribution or campaign-measurement providers, personnel handling support, and the trading platform involved in a registration. Public authorities may receive information in response to a lawful request.

App stores handle store visits, downloads and store-account information under their own arrangements. A third-party trading platform decides its own account eligibility, verification, trading and retention requirements. Requests concerning information held by that platform may need to be made directly to it.

Provider and data-flow register

No sale of personal information, unrelated lead distribution or new marketing recipient is authorised merely by this policy. Any such activity would need an accurate prior disclosure and the legal basis or consent required for it.

5. Cookies and device choices

The current website pages do not embed advertising pixels or an analytics SDK, and do not themselves create cookies or use browser storage. Infrastructure added by a host and activity after you leave this website are separate. The Cookie Policy explains these boundaries and the required hosting check.

You can use browser controls to block or remove cookies and device settings to manage advertising identifiers and app permissions. These actions do not automatically delete server-side records. Installing an app, permitting tracking, receiving marketing and submitting a trading registration are separate choices.

6. Retention and deletion

We retain information only for as long as it is needed for the disclosed purpose or an applicable legal obligation. The retention period depends on the type of record, whether an issue remains unresolved and any legal requirement to preserve it. The following criteria apply:

• Website logs: retain for the period needed for operational security and troubleshooting, then rotate or remove them unless a specific incident requires preservation.
• Referral records: retain for the necessary attribution, reconciliation and dispute period, then delete or de-identify them unless a legal obligation applies.
• Support and rights requests: retain while resolving the matter and for any necessary follow-up, accountability or legal period.

Once a record is no longer needed, we delete it or remove information that identifies a person, subject to applicable retention duties. If deletion is restricted by a legal obligation or an unresolved claim, we limit further use to the reason for keeping the record.

Uninstalling an app does not erase records already held by a website operator, attribution provider or trading platform. A deletion request is considered separately from uninstalling; we explain any lawful retention exception that affects our response.

7. International processing and safeguards

Information may be processed in countries different from your country of residence. Actual destinations depend on hosting, attribution and support arrangements and must be identified in the provider register. We do not assume that every provider uses the same country or that all transfers have identical protections.

We apply the safeguards required by applicable law before making an overseas disclosure. These can include provider assessments, contractual restrictions and controls over who can access the information. Foreign legal requirements can still affect information held abroad.

We limit access to authorised people and providers who need the information for the stated purposes and use safeguards appropriate to the information and risks. No website or communications method can be guaranteed completely secure. If a security incident affects personal information, we assess it and make the notifications required by applicable law.

8. Access, correction, choices and complaints

Depending on applicable law, you may request access to information held about you, correction, deletion, or withdrawal of consent for processing based on consent. Other rights, such as restriction, objection or receiving a copy in a portable format, apply where the relevant law provides them.

Use the privacy contact in section 1. Describe your request and provide a way to reply. We may ask for proportionate information to verify your identity or locate the relevant record, limited to what is necessary. Do not send identity documents unless a secure and justified verification method has been agreed.

We handle requests within applicable legal time limits. If we cannot fulfil a request in full, we explain the reason, any relevant exception and available complaint options. Withdrawing consent does not undo earlier lawful processing, and some necessary processing may continue under another applicable ground.

For a complaint, explain the issue and outcome you seek. We acknowledge the complaint, investigate the relevant records, provide a reasoned response and explain further recourse. You may also contact the privacy regulator with jurisdiction over your matter, including the Office of the Privacy Commissioner of Canada or the Office of the Australian Information Commissioner where applicable.

9. Children and financial registration

This website’s promotion of trading-related services is intended for adults. A trading platform’s own age, residence and verification requirements apply before an account can be opened. An app-store age rating is not permission to enter a financial contract.

If you believe a child has supplied personal information inappropriately through these activities, contact the privacy contact so the matter can be investigated and any necessary restriction or deletion arranged.

10. Changes and contact

The date at the top identifies this version. We explain material changes before new processing begins and obtain fresh consent where required. Continued browsing alone is not consent to an undisclosed new use of information.

For privacy questions, data requests or complaints, use the contact in section 1. For information held independently by an app developer or trading platform, also use the contact in that provider’s own notice.