PRIVACY POLICY STATEMENT

This Document on Privacy Policy Statement and Regulatory Protections is effective from February 2021 and shall remain effective until
a more recent version is released. Safecap reserves the right to amend or supplement this Document at any time. This Document does
not replace our Investment Services Agreement (Terms and Conditions of Trading) which we ask that you read carefully before youenter into any trading. The prevailing version of this Document is always available on our website www.opcmarkets.com.

CONTENTS
1.

INTRODUCTION

32.

COLLECTION OF PERSONAL DATA

43.

HOW DO WE USE YOUR PERSONAL DATA?

54.

HOW LONG DO YOU RETAIN THE PERSONAL DATA?

65.

WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

6

5.1.

Within the Group

6

5.2.

Non-Affiliates Third Parties

7

6.

YOUR RIGHTS UNDER GDPR

87.

USE OF "COOKIES"

8

Page 2

Note: The English version of this Policy is the governing version and shall prevail whenever there is any discrepancy between the
English version and the versions in any other language.
1.

INTRODUCTION

The protection of privacy and the safeguarding of our Clients’ personal and financial information is of great importance tous. If you have any questions about this Privacy Policy or the processing of your Personal Information, please contact us at
Privacy@opcmarkets.com or send a letter to our offices in Cyprus at the following address: 148 Strovolou Ave., Strovolos, 2048
Nicosia, Cyprus.
Safecap Investments Limited is a company incorporated under the laws of Cyprus, the registered office of which is at 148
Strovolou Ave., Strovolos, 2048 Nicosia, Cyprus (“Safecap” or “us”) and is an investment services firm regulated in the conductof its activities by the Cyprus Securities and Exchange Commission (“CySEC”) under license number 092/08 and the Financial
Sector Conduct Authority of South Africa under license 43906, and its activities include the receipt, transmission and executionof client orders in financial instruments, including through the use of electronic trading platforms.
This purpose of this Policy is to explain to you:
•
•
•
•
•

what Personal Data of yours we collect;
how we use your Personal Data;
how, with whom and when your Personal Data is shared;
your rights; andother useful privacy and security related matters.

References in this Policy to “Personal Data” are references to “Personal Data” as defined in Regulation (EU) 2016/679 of theEuropean Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of
Personal Data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)(hereinafter referred to as “GDPR”).
References in this document to “Associate" are references to an undertaking, company or other body corporate being a memberof our Group, a representative whom we or another undertaking of our Group appoint, or any other person with whom we havea contractual, agency or other relationship that might reasonably be expected to give rise to a community of interest between
us and them.
References in this document to “Group” are references to Safecap and any entity controlled by or controlling Safecap andentities under common ownership and control with Safecap where “control” means direct or indirect control, of at least 50% of
the voting rights or capital of an undertaking;
When collecting, processing and storing Personal Data provided by you, we are subject to the provisions of the GDPR and therevenant Personal Data protection laws and regulations of the Republic of Cyprus.
We, our Associates, any persons deriving rights from us or our Associates, any members of our Group, agents or sub-contractors
which we engage or work through for the purpose of collecting, storing and processing Personal Data and any third parties
acting on our or their behalf may collect, process use and store Personal Data provided by you for the purposes of, or related to,carrying out the transactions and other services which we provide to you, operational support and development of our or theirbusinesses, providing us or them with professional or other services, in enforcing our or their contractual or other rights, and forthe purposes of enabling compliance with the contractual, legal and regulatory provisions anywhere in the world to which weor our Associates and the aforesaid third parties are subject. By opening an account with Safecap, you hereby consent to suchcollection, processing, storage and use of Personal Data by us, our Associates or the aforesaid third parties in accordance withthe provisions of this Policy, and agree that processing and storage of Personal Data provided to us by you may be carried out
in or from any jurisdiction within or outside of the European Union including in or to countries or territories which do not offer thesame level of protection of Personal Data as is enjoyed within the European Union.
You further represent and undertake that where you are a non-physical person providing to us Personal Data of any individual
or where you are an individual providing us with Personal Data of any individual other than yourself, by opening an accountwith us you thereby undertake and represent that such person, whose Personal Data is collected, stored and processed inaccordance with the provisions contained herewith, has been informed of and has given their consent to such collection, storage
and processing of their Personal Data in accordance with the provisions contained herein and that they have been informed of
their rights in relation to their Personal Data which is held and processed in accordance with the provisions contained herein.

Page 3

2.

COLLECTION OF PERSONAL DATAWHAT PERSONAL DATA DO WE COLLECT?
Information you provide us when you apply for a trading account with Safecap:
This is the Personal Data you provide us when completing our account opening application form at our website www.opcmarkets.
com (the “Website”), including but not limited to your name, address, date of birth, email address, phone number(s), yourprofessional background and income source etc. in order for us to facilitate the evaluation of your application and complete
the relevant know-your-customer, anti-money laundering and appropriateness assessments that we are required to under thelaws and regulations applicable to us. We also use this information for the purposes of communicating with you. We may collectdetails of your e-mail at the moment when you fill them in on the Website’s landing page to create an account but before you
fully complete the registration process.
We may also collect information from you if you require technical assistance or customer support.
As a part of our verification procedure which we perform in accordance with the requirements of the applicable laws andregulations, we also collect information necessary to verify your identity, such as an identification card, passport or driver’s
license. This information can also be obtained or verified by matching it with background information we receive about you frompublic records or from other entities not affiliated with Safecap.
Additional information we may collect:
We may (but not necessary shall) also collect the following information:(i)name, contact information and message if you contact us or participate in any survey, contest or promotion;(ii)

details such as traffic information, location data and other IT communication data (including IP address and browsertype) collected when you access and use our electronic trading platforms (the “Platforms”);(iii)

information about devices that you use when accessing the Platforms including unique device identified;(iv)

pages (including the Website and OPCMarkets.com application and all of their inner pages/Landing pages/) visited andcontent viewed, links and buttons clicked, URLs visited before and after you visit our Website (the “Web Data”). For more
information about cookies and how to manage them please see our Cookie Policy;(v)

Information about the anticipated and actual volume and value of your transactions with us, payment methods
information provided in order to enable the construction of your economic profile;(vi)

your telephone, Skype or Live Chat conversations with Safecap’s customer support specialists;(vii)

your responses to our marketing campaigns (e.g. open/click on our promotional or marketing emails whether sent byourselves or any third-party service providers); and(viii)

your social media profile details (name, profile photo and other information you make available to us, if any) when you
connect with or contact us through a social media account; and(ix)

information from third party databases to comply with our legal and regulatory obligations. Information necessary toverify your identity, such as an identification card, passport or driver’s license. This also includes background information
we receive about you from public records or from other entities not affiliated with Safecap.

Safecap collects the necessary information required to open, transact and safeguard your assets and your privacy and toprovide you with the services you require. To this end, Safecap gathers information from you and may, in certain circumstances,
gather information from relevant banks and/or credit agencies, and/or other sources (such compliance verification databases
and similar service providers) which help us profile your requirements and preferences and provide better services to you.
For the purposes of GDPR, Safecap acts as data controller in respect of the Personal Data that we collect from you.

Page 4

3.

HOW DO WE USE YOUR PERSONAL DATA?

For further information on how we use your personal data, please contact Privacy@opcmarkets.com or send a letter to ouroffices in Cyprus at the following address: 148 Strovolou Ave., Strovolos, 2048 Nicosia, Cyprus.
Safecap processes your Personal Data for the following purposes:(i)

Account setup, verification and management. We use personal information such as your name, ID/passport details,
email address, phone number, and information about your device to open and administer your trading account with
Safecap, provide technical and customer support and training, verify your identity, process payment information andsend you important information about your account with us and our service information. This information is required forthe purposes of Safecap performing its obligations under the terms of the investment services agreement between you
and Safecap (the “Agreement”), and also for the purposes of complying with the laws and regulations applicable to us.
To verify your identity, age and accuracy of your registration details provided, we may disclose such information tothird parties e.g. financial institutions and third party reference agencies and data verification service providers. This isrequired for the purpose of our complying with our legal obligations.
We may also use such personal information to enforce the terms of the Agreement and/or in the event this becomes
necessary for the purposes of any litigation, action or claim that you or us may have against each other in connection
with the Agreement or our services.

(ii)

Personalisation. We may use your personal information, including but not limited to you professional backgrounddetails and your account trading history to determine, deliver and/or suggest tailored solutions to you to personalize
your experience with our services in line with your background, prior exposure to financial markets and your generalexperience in trading. This type of processing is necessary for the purposes of our legitimate interests in developing,delivering or presenting relevant personalized services and content to our customers.

(iii)

Marketing. Subject to any preferences you have expressed (where applicable), we may use your personal information,
including but not limited to your name, e-mail, address, phone number, location and Web Data, to deliver marketingand event communications to you across various platforms, such as social networks, email, telephone, text messaging,direct mail, online, push notification or otherwise. We will do this either (i) until you withdraw your consent (or it ceases
to be valid) or (ii) during the period of your relationship with us and, unless specifically instructed otherwise by you, for areasonable period of time after the relationship has ended in order to inform you about products, services, promotions
and special offers which we think may be of interest to you.
We may engage our Associates and other third party marketing and advertising service providers for the purposes ofproviding marketing solutions to us or running marketing/re-marketing activities and advertising campaigns on ourbehalf. We may provide your Personal Data to such service providers on a limited basis for the purposes of enablingthem to perform their aforesaid services.
If we or our Associates send you a marketing email or other marketing communication, it will include instructions on
how to opt out of receiving these marketing communications in the future. You can also manage your information andupdate your marketing preferences in the settings of your account on our Website. We shall require up to 72 hours toprocess any changes you make to your marketing preferences. We note that even if you opt out of receiving marketing
communications, we may still send you important information related to your account(s) with us and our services to you.
We or our Associates may, from time to time, send you marketing materials which may be of particular interest to you
based upon your behavior i.e. your trading activity and history, and your background. These marketing messages will
provide you with information about the products, services, active promotions or offers (as applicable) available to you
by any company within the Group and information about products and services provided by our selected partners andthird parties.
We use a combination of information collected such as advertising cookies, your email address/phone number and youronsite activity to show you targeted and relevant advertisement on a selection of whitelisted websites and social media.
This information can also be used to measure and analyze the effectiveness and reach of these ads, to help us improveand refine our marketing strategy in accordance with our legitimate interests in promoting our products and services toyou.
Except where we use your Personal Data for marketing purposes on the basis of your prior express and informed writtenconsent and subject to any opt out preferences you notify to us in respect of marketing communications, we process
Personal Data for marketing purposes only as necessary on the lawful basis and for the purpose of our legitimate
interests in promoting our products and services to you.

Page 5

(iv)Risk Management. In order to provide you our services and comply with our regulatory obligations we process your
Personal Data as needed to evaluate and manage risks to our business. The types of Personal Data that we may process
for these purposes includes, but it is not limited to, your trading history and patterns (which may required to identify andprevent abusive trading and other unlawful trading practices), your name, ID, passport and residence details.

(v)

Diagnostics, research and development. We may use your personal information for internal research and development
purposes, to help diagnose system problems, to administer our websites, to improve and test the features and functionsof our services to you, to develop new content, products and services. To carry out testing and analysis. This processing
is necessary for the purpose of our legitimate interests.

(vi)

Legal and regulatory obligations. We may be required to use and retain personal information for legal and compliancereasons, such as the prevention, detection, or investigation of a crime; or fraud. We may also use personal information
to meet our internal and external audit requirements, information security purposes, and as we otherwise believe tobe necessary or appropriate: (a) under applicable law, which may include laws outside your country of residence; (b)to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government
authorities, which may include such authorities outside your country of residence; and (c) to enforce the terms of theAgreement, or for the purposes of defending any claim you may have against us in connection with your trading with us.

(vii)

Profiling. In accordance with our legitimate interests detailed below or, as the case may be, in order to comply with ourlegal obligations, we may carry out profiling and analysis based upon your location data, address, age, professional
background, experience, trading activity and behaviors for the following purposes:
(a)
(b)
(c)
(d)
(e)

(viii)

4.

Customer segmentation to offer you products and services which are appropriate for you, and to develop themore relevant marketing;We run with lookalikes campaigns in Facebook. A lookalike campaign is a way to reach out to new potential
customers who are likely to be interested in our business because they have interests similar to our existingcustomers
To perform our target market assessments in accordance with the regulatory requirements applicable to us;
Risk and trading analysis; andLicensing and legal obligations i.e., Anti Money Laundering, Age Verification, prevention of fraud.

Other purposes. We may be required to use and retain your personal information for loss prevention or to protect ourrights, privacy, safety, or property, or those of other persons in accordance with our legitimate interests.
HOW LONG DO YOU RETAIN THE PERSONAL DATA?

Once your Agreement with us terminates, we shall keep your Personal Data provided to us, including but not limited to yourname, address, email, phone number, your trading and transaction history, deposits and withdrawals history, for at least 5 (five)
years, as is required under Directive 2014/65/EU of the European Parliament and of the Council of 15 May 2014 on markets infinancial instruments and amending Directive 2002/92/EC and Directive 2011/61/EU (“MiFID II”). Where we keep and process
your personal data for marketing purposes based on your consent, we shall retain it until your consent is withdrawn or ceases
to be valid.
However, depending on your country of residence and/or citizenship, there may be different statutes of limitation in force. A“statute of limitations” is a statute prescribing a period of limitation for the bringing of actions or claims of certain kinds, whichmeans that, depending on the jurisdiction, you have the right to bring a claim against Safecap in connection with your tradingwith Safecap only during a certain period of time (the “Limitation Time”). We have a legitimate interest in retaining your personal
information (such as your ID, address, transactional and trading history with us and records of your communications with us) inorder to enable us to defend ourselves against any such claim that you may have. Accordingly, such personal information shallbe retained by us after the date of expiration or termination of the Agreement during the Limitation Time.
5.

WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

Your personal information may be transferred or disclosed to any company within the Group or, subject to appropriate
agreements and arrangements to ensure data protection, to third parties, for the processing of that personal information basedon our instructions and in compliance with this policy and any other appropriate confidentially and security measures.
5.1. Within the Group
Safecap may share information to the Associates within its Group and their respective legal, accounting, tax and financial
advisors in the event such information is reasonably required by such Associates for the following purposes:•
Account set up, verification and management;•
Marketing and event;

Page 6

••

Risk management; andLegal and regulatory obligations.

Where we share your personal data within the Group, we may share it, and you consent to us sharing it, with the following
Associates:(1) Magnasale Trading Limited, a company incorporated in Cyprus, our liquidity provider and hedging counterparty, for the
purposes of hedging of our trading exposure to you;
(2) TradeFX CY Limited, a company incorporated in Cyprus, a provider of dealing services to us;(3) Lane Square Enterprises Limited, a company incorporated in the Isle of Man, a provider of IT technology services to us(4) Trade Tech T.A.S. Ltd, a company incorporated in Israel, a provider of IT development and IT maintenance services to us; and(5) KSTT Services Ltd, a company incorporated in Ukraine, a provider of IT development and IT security services to us.
Each of the above Associates is under 100% control of the Group.
5.2. Non-Affiliates Third Parties
Safecap may, from time to time, retain third parties to process your information to provide us with services globally, including
for customer support, payments processing, verification information technology, payments, sales, marketing, data analysis,
research and surveys. As part of our agreements with our partners, we may be required to share your information for the
purposes of such partners being able to provide the aforesaid services to us. We may disclose information as necessary to credit
reporting or collection agencies as reasonably required in order to provide the services to you.
Where you have been introduced to us by a third party business introducer, such business introducer may have access to yourpersonal information, and we may share your personal information with such business introducers for the legitimate purpose ofcomplying with your obligations under the relevant business introducer agreements between us and such business introducers.
As at the date of this policy, we may share data of introduced clients with the following licensed entities:(1) Trading-house GmbH, a company incorporated in Germany and regulated by the Federal Financial Supervisory Authority(BaFin) with reference number 134461.
(2) London & Eastern LLP, a company incorporated in the United Kingdom and regulated by the Financial Conduct Authority(FCA), reference number 534484,(3) TMS Capital Limited, a company incorporated in the United Kingdom and regulated by the Financial Conduct Authority(FCA), reference number 195581.
Personal information to which read-only access may be given includes information such as name, residency details, contact
details (such as email and phone number) and trading activity. If you do not wish for your data to be shared with the third party
business introducer, you can withdraw your consent by notifying us via Live Chat or email.
We will share with third parties your personal information when we believe it is required to so for legal and regulatory reasons,
including but not limited to:(i)

To comply with our legal obligations and respond to requests from government agencies, including law enforcement
and other public authorities, which may include such authorities outside your country of residence. Without limitation
to the generality of the foregoing, Safecap, as a regulated Cyprus Investment Firm, is required to comply withcertain obligations under the Intergovernmental Agreement between Cyprus and the United States and has taken all
reasonable steps to be considered in compliance with The Foreign Account Tax Compliance Act (FATCA);(ii)

In the event of a merger, sale, restructure, acquisition, joint venture, assignment, transfer, or other disposition of all or
any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings); and(iii)

To protect our rights, customers, systems, and Platforms.

The Client acknowledges and accepts that Safecap is required to disclose information in relation to any US reportable persons to
the relevant authorities, in accordance with the reporting requirements of FATCA. The Client may contact Safecap for additional
information or clarifications prior to the signing of this Agreement.
Countries outside the European Economic Area (“EEA”) do not always have strong data protection laws. Where we transfer
your personal information from the EEA to other countries in which applicable laws do not offer the same level of data privacy
protection as the EEA states y, we take measures to provide an appropriate level of data privacy protection. For example, we use
approved model contractual clauses, other measures designed to ensure that the recipients of your personal information protect
it. We take steps to ensure that the information we collect is processed according to this privacy policy and the requirements of
the applicable.

Page 7

6.

YOUR RIGHTS UNDER GDPR

Under the GDPR, you, as a data subject have certain rights which are detailed below. Some of these only apply under specificcircumstances and are qualified in several respects by exemptions in data protection legislation. We will advise you in our
response to your request if we are relying on any such exemptions.
Access to Personal Data: You have a right to request a copy of the personal information that we hold about you. Should you
wish to make such a request, please contact our Customer Support Department on our Contact Us page or via Live Chator by sending a letter to our offices in Cyprus at the following address: 148 Strovolou Ave., Strovolos, 2048 Nicosia, Cyprus.

(i)

You should include adequate information to identify yourself and such other relevant information that will reasonably
assist us in fulfilling your request. Your request will be dealt with as soon as possible.
(ii)

Correction of Personal Data: You can request us to rectify and correct any Personal Data that we are processing about
you which is incorrect.

(iii)

Right to withdraw consent: Where we have relied upon your consent to process your Personal Data, you have theright to withdraw that consent. To opt out of email marketing, you can use the unsubscribe link found in the marketing
communication you receive from us. To unsubscribe of SMS/push marketing, you can send us a message to the number
provided in the SMS/push marketing communications that you receive from us. You can also contact us at the following
address: unsubscribe@opcmarkets.com or by sending a letter to our offices in Cyprus at the following address: 148
Strovolou Ave., Strovolos, 2048 Nicosia, Cyprus.

(iv)

Right of erasure: You can request us to erase your Personal Data where there is no compelling reason to continue
processing. This right only applies in certain circumstances, it is not a guaranteed or absolute right (for example, we may
retain your data as described in Section 4 above).

(v)

Right to data portability: This right allows you to obtain your Personal Data that you have provided to us with yourconsent or which was necessary for us to provide you with our products and services in a format which enables you totransfer that Personal Data to another organisation. You may have the right to have your Personal Data transferred by
us directly to the other organisation, if this is technically feasible.

(vi)

Right to restrict processing of Personal Data: You have the right in certain circumstances to request that we suspend
our processing of your Personal Data. Where we suspend our processing of your Personal Data we will still be permitted
to store your Personal Data, but any other processing of this information will require your consent, subject to certain
exemptions.

(vii)

Right to object to processing of Personal Data: You have the right to object to our use of your Personal Data which isprocessed on the basis of our legitimate interests. However, we may continue to process your Personal Data, despite
your objection, where there are compelling legitimate grounds to do so or we need to process your Personal Data inconnection with any legal claims.

(viii)

Rights relating to automated decision making and profiling: You have the right not to be subject to a decision which
is based solely on automated processing (without human involvement) where that decision produces a legal effector otherwise significantly affects you. This right means you can request that we involve one of our employees orrepresentatives in the decision-making process. We are satisfied that we do not make automated decisions of this nature.

7.

USE OF "COOKIES"

Our Website, and all its sub digital assets, mobile app and the landing page use cookies to distinguish you from other users of
our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve
our site. By continuing to browse the site, you are agreeing to our use of cookies.
For more information about cookies and how to manage them please see our Cookie Policy
PRIVACY POLICY UPDATESFrom time to time, Safecap may update this Privacy Policy. In the event Safecap materially changes this Privacy Policy including
how we collect, process or use your Personal Data, the revised Privacy Policy will be posted on the website keeping you informed.
Any dispute over our Privacy Policy is subject to this Privacy Policy and the Agreement.
AGREEMENTI have read, understood and agree with the terms of this Privacy Policy, and I confirm that I have full power and authority to bebound by the terms of this Privacy Policy.
For any queries or further information in relation to this Privacy Policy please Contact Us.

Page 8