Privacy policy

1Who is responsible for your data

1.1COMPANY LEGAL NAME, STREET / BUILDING / UNIT, Abu Dhabi, United Arab Emirates, is the controller of your personal data. Privacy enquiries: PRIVACY EMAIL.

1.2This Policy is drafted under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and other applicable UAE law.

2What we collect

2.1Identity and contact data: your full name, email address and phone number, provided when you register.

2.2Broker access data: the account number and trading password of each ThinkMarkets trading account you ask us to operate. You supply these so that our trading software can log in and place and manage trades on your account.

2.3Trading data: balance, equity, open positions, closed trades, cycle results and level, synchronised from your accounts to our servers on a continuous basis.

2.4Billing data: invoices, receipts, statements and payment records. Card and bank details are entered directly with our payment provider and are not stored by us.

2.5Technical data: login session, device push-notification token (mobile app), and standard server logs such as IP address and time of access.

2.6We do not collect data from children. The Service is available only to persons aged 21 and over.

3Why we use it

3.1To operate the Service: to log in to your accounts, run the trading software, track cycles and levels, and display your dashboard.

3.2To bill you: to calculate and issue invoices, receipts and statements and to record payments.

3.3To notify you: account, trading and billing notices by email, WhatsApp and mobile push. You may switch WhatsApp and push notifications off in your dashboard; email notices required for the contract cannot be switched off.

3.4To keep the Service secure and to prevent abuse, including retaining the email address of any registration we have refused.

3.5To meet our legal obligations, including tax and accounting record-keeping.

3.6We do not use your data for advertising, we do not sell it, and we do not share it with anyone for marketing purposes.

4Legal basis

4.1We process your data because it is necessary to perform our contract with you (clauses 3.1 to 3.3), to comply with law (3.5), or for our legitimate interest in keeping the Service secure (3.4). Where consent is required by law we will ask for it separately.

5Who we share it with

5.1Service providers who process data on our instructions: our database and authentication provider, our website host, Meta (WhatsApp Business) for message delivery, Apple and Google for mobile push, and our payment provider for invoice payment. Each is bound by contract to protect your data.

5.2Your broker, ThinkMarkets: our trading software connects to your account using the credentials you supplied. We are also a ThinkMarkets partner: where you open your account through the partner link on our website, ThinkMarkets tells us that the account was opened under our link and the partner commission it has paid us. We do not receive your identity documents or funding details from the broker. ThinkMarkets' handling of your data is governed by your agreement with it.

5.3Authorities: where required by UAE law, court order or a lawful request from a regulator.

5.4A successor: if GHIYATH QUANT is transferred to a successor entity, your data may transfer with it on notice to you.

6Where it is stored and international transfers

6.1Your account and trading data are stored with our database provider in DATA HOSTING REGION. Our trading software runs on servers under our control. Some providers listed in clause 5.1 operate outside the UAE; where data leaves the UAE we rely on the provider's contractual safeguards as permitted by UAE law.

7How long we keep it

7.1Account, identity and trading data: for as long as you use the Service and for twelve (12) months after termination, unless a longer period is required by law.

7.2Broker access credentials: deleted from our records when the Service on that account is terminated, or earlier if you change the password.

7.3Invoices, receipts and payment records: five (5) years from the end of the tax period concerned, as required by UAE tax law.

7.4Refused-registration email addresses: retained for security purposes until removed by us.

8How we protect it

8.1Access to your data is restricted to authorised GHIYATH QUANT personnel and to the providers in clause 5.1. Data is encrypted in transit. Passwords for the Service are stored only in hashed form. Broker access credentials are not stored in our database or on our website; they are held separately by GHIYATH QUANT under access control, entered into the trading platform only to operate your accounts, and used for no other purpose.

8.2No system is completely secure. You must keep your own login details confidential and tell us immediately if you suspect any compromise.

9Cookies

9.1The website uses only the session cookie necessary to keep you logged in. We do not use advertising or third-party analytics cookies.

10Your rights

10.1Subject to UAE law, you may ask us to: access the personal data we hold about you; correct it; delete it (except data we must keep under clause 7); restrict or object to its processing; or provide it to you in a portable form. Send requests to PRIVACY EMAIL. We respond within the period required by law.

10.2You may withdraw a consent you have given at any time; this does not affect processing carried out before withdrawal.

10.3You have the right to complain to the UAE Data Office if you believe we have not handled your data lawfully.

11Changes to this Policy

11.1We may update this Policy. Material changes will be notified through the dashboard or to your registered email at least thirty (30) days before they take effect.

12Language

12.1This Policy is published in English and Arabic. In the event of any inconsistency, the English text prevails.