25millions

Privacy Policy

Last updated: 2026-10-06

1. Information we collect

  • Account data: name, email, phone number if you provide it, country.
  • Identity verification: identity documents, address and a selfie, when verification is required.
  • Financial activity: deposits, withdrawals, orders, positions and balances.
  • Technical data: IP address, browser type and sign-in times.

2. How we use it

  • To provide the trading service you asked for.
  • To meet legal obligations such as identity checks and anti-money-laundering rules.
  • To detect fraud, abuse and unauthorised access.
  • To send messages the service needs: email verification, password reset and security alerts.

3. Sharing

We do not sell personal data. We share it only with:

  • payment and wallet providers, to settle your transactions;
  • identity verification providers, when verification is required;
  • authorities, when the law requires it.

4. Retention

We keep account and transaction data for as long as your account is open and then for the period financial records must be kept by law, usually 5 to 7 years.

5. Your rights

  • See and correct your data.
  • Ask for deletion, within legal retention obligations.
  • Receive a copy of your trades and balances.
  • Withdraw consent for anything that is not needed to run your account.

These requests are handled by the support team: write from the email address registered on your account. There is no self-service export or account deletion yet.

6. Security

Passwords are stored as bcrypt hashes and sign-in tokens as SHA-256 hashes; sign-in attempts are rate-limited; two-factor authentication is available to every account and required for administrators; and every administrative action is written to an audit log that cannot be edited.

7. Cookies and local storage

Your session and preferences (language, theme) are kept in your browser's local storage, not in cookies. We do not use third-party tracking or advertising scripts.

8. Contact

For privacy questions, or to use any of the rights above, write to the support team from the email address registered on your account.

Support email: support@fava.org.uk