Notice of EU Privacy Policy

IS Prime Limited, IS Prime Hong Kong Limited and IS Risk Analytics Inc. ("IS Prime" or "us" or "we") is an FCA regulated matched principle broker that provides trading facilities in over-the counter spot foreign exchange, precious metals and index swaps ("Services") to Professional Clients and Eligible Counterparties ("Clients" or "you" or "your"). IS Prime is committed to protecting your privacy and maintaining the confidentiality and security of your personal information. Any personal information processed by IS Prime is controlled by us and IS Prime is the data controller of your personal information. Where your details are provided to us as a result of us providing Services to you, then IS Prime, acting as a data controller, may itself or through a third party acting on our instruction, process your personal information or that of your directors, officers, employees and/or beneficial owners.

This policy (the "EU Privacy Policy") explains the manner in which IS Prime collects, utilizes and maintains non-public personal information ("personal information") about Clients based in the European Union ("EU") or the European Economic Area ("EEA"), as required under the General Data Protection Regulation (EU) 2016/679 ("GDPR").

Collection of Client personal information

IS Prime collects personal information about Clients, such as Clients’ names, contact details and financial information, from the following sources:

• account and on-boarding forms, and other information provided by the Client in writing, in person, by telephone, electronically or by any other means. This information includes but is not limited to name, address, contact information, nationality, employment information, and financial and investment qualifications;
• transactions, including account balances and other interactions with IS Prime (for example, discussions with our employees); and
• verification services and consumer reporting agencies, including (but not limited to) a Client’s creditworthiness or credit history.

Why we use Clients’ personal information

Your personal data may be processed by IS Prime:

• to facilitate the opening of your account with us and the management and administration of your account an on-going basis;
• in order to carry out anti-money laundering ("AML") checks and related actions which we consider appropriate to meet any legal obligations imposed us relating to, or the processing in the public interest or to pursue IS Prime’s legitimate interests in relation to, the prevention of fraud, money laundering, terrorist financing, bribery, corruption, tax evasion and to prevent the provision of financial and other services to persons who may be subject to economic or trade sanctions, on an on-going basis, in accordance with IS Prime’s AML procedures;
• to comply with its legal obligations and, in particular, to report tax-related information to tax authorities;
• to monitor and record calls and electronic communications (i) for processing and verification of instructions, (ii) for investigation and fraud prevention purposes, (iii) for crime detection, prevention, investigation and prosecution, (iv) to enable IS Prime to enforce or defend any legal and administrative proceedings, regulatory investigations or enforcement actions, or (v) where the processing is in the public interest;
• to disclose information to other third parties such as service providers of IS Prime, auditors, regulatory authorities and technology providers in order to comply with any legal obligation imposed on IS Prime or in order to pursue the legitimate interests of IS Prime;
• to monitor and record calls for quality, business analysis, training and related purposes in order to pursue the legitimate interests of IS Prime to improve its service delivery;
• to retain AML and other records of individuals to assist with the subsequent screening of them by IS Prime;
• to pursue IS Prime’s legitimate interests, including:
  • managing the Services;
  • managing our business needs;
  • complying with applicable laws;
  • where processing is in the public interest.

Disclosure of personal information

IS Prime may share personal information about Clients or potential Clients with affiliates and non-affiliated third parties, as permitted by law (for example, we may share personal information with service providers, and other third party service providers engaged by IS Prime in order to process the data for the above mentioned purposes). Such service providers are contractually restricted from using Client information in any manner other than as mentioned above.

IS Prime may share personal information, without a Client or potential Client’s consent, with affiliated and non-affiliated parties in the following situations, among others:

1. To respond to any legal and administrative proceedings, regulatory investigations or enforcement actions;
2. In connection with a proposed or actual sale, merger, or transfer of all or a portion of its business;
3. To protect or defend against fraud, unauthorized transactions (such as money laundering), lawsuits, claims or other liabilities;
4. To service providers in connection with the administration and operations of the account, which may include brokers, attorneys, accountants, auditors, administrators or other professionals;
5. To assist IS Prime in offering IS Prime affiliated products and services to its Clients; and
6. To process or complete transactions requested by a Client.

Recipients of Data and International Transfer of Data

IS Prime may disclose your personal information as follows:

• to its service providers, and other third party service providers engaged by us in order to process the data;
• to competent authorities (including tax authorities), courts and regulatory bodies as required by law or requested or to affiliates for internal investigations and reporting; and

The disclosure of personal information to the third parties set out above may involve the transfer of data to the USA and other jurisdictions outside the European Economic Area (EEA) in accordance with the requirements of the General Data Protection Regulation. Such countries may not have the same data protection laws as your jurisdiction. As your data controller, we will ensure that where your personal data is processed in such countries, there is an adequate level of protection or we have signed agreements incorporating Standard Contract Clauses or Binding Corporate Rules as appropriate under the GDPR guidelines.

Collecting personal information Legally

IS Prime is able to legally collect and use your personal information because collecting and using your personal information is necessary for Prime to (a) enable the account to function, and/or (b) carry out its legitimate interests in carrying out any requests or orders made by a Client and complying with applicable law.

Retention of personal information

IS Prime will retain your personal information for as long as required for us to perform the Services or perform investigations in relation to the Services and in order to enable us to comply with our legal obligations and exercise our legal rights.

Your Rights

You have the right to:

1. be informed about the personal information IS Prime collects from you and uses, which this EU Privacy Policy seeks to do;
2. obtain confirmation from IS Prime that your personal information is being collected and used by IS Prime and to access the personal information held by IS Prime;
3. have your personal information corrected if it is inaccurate or incomplete at any time;
4. erasure, or the right to be forgotten, which means you can request deletion or removal of any personal information IS Prime holds about you at any time, subject to IS Prime’s legal obligations;
5. block or suppress IS Prime collecting and using your personal information, which means we can continue to store such personal information but cannot further collect or use it in any way;
6. obtain and reuse any personal information IS Prime holds about you for your own purposes across different services, which allows you to move, copy or transfer your personal information easily from IS Prime to another place notified by you to us in a safe and secure way without hindrance to the usability of your personal information; and
7. object to IS Prime collecting or using your personal information where this is based on:
   • a legitimate interest or the performance of a task in the public interest; or
   • direct marketing.

To make any requests as listed above, please contact the IS Prime at dataprivacy@isprimefx.com.

IS Prime will confirm any requests relating to your rights above within one month of receipt of your request, or within two months of receipt of your request where the request is more complex.

Withdrawal of Your Consent

You can tell IS Prime to stop collecting and using your personal information at any time by emailing IS Prime at dataprivacy@isprimefx.com.

Where IS Prime requires your personal information to comply with AML or other legal requirements, failure to provide this information may mean that you will be unable to be accepted as a Client or continue as a Client.

Former Clients

This EU Privacy Policy applies to former Clients in the EU and the EEA.

Protection of personal information

IS Prime maintains appropriate technical and organizational measures to ensure a level of security appropriate to potential risks, including physical, electronic and procedural safeguards that comply with the GDPR to protect customer information, including:

1. the pseudonymization and encryption of your personal information where appropriate;
2. ensuring ongoing confidentiality, integrity, availability and resilience of processing systems and services;
3. ensuring IS Prime can restore access to personal information in a timely manner if a physical or technical incident occurs; and
4. regular testing, assessment and evaluation of the effectiveness of its technical and organizational measures to ensure your personal information is secure.

IS Prime restricts access to the personal and account information of Clients to those employees who need to know that information in the course of their job responsibilities.

Further Information

This EU Privacy Policy replaces all previous disclosures we may have provided you about our information practices in the EU. IS Prime reserves the right to change this Privacy Policy at any time. The examples contained within this EU Privacy Policy are illustrations and are not intended to be exclusive. This Privacy Policy complies with the GDPR regarding privacy. You may have additional rights under other foreign or domestic laws that may apply to you. If you have any questions about this EU Privacy Policy, please e-mail dataprivacy@isprimefx.com.

Making a Complaint

If you would like to make a complaint about the way IS Prime has collected or used your personal information, please contact us at dataprivacy@isprimefx.com.

You have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence or place of work or in the place of the alleged infringement if you consider that the processing of personal data relating to you carried out by IS Prime or its service providers infringes the GDPR.