Privacy Policy

1. Who we are

FXLeagues is operated by [Company legal name], a company registered in [England & Wales] under company number [number], with its registered office at [registered address].

For the purposes of data protection law, we are the "data controller" responsible for the personal data described in this policy.

We are registered with the UK Information Commissioner's Office (ICO) under registration number [ICO number]. If you have any questions about this policy or how we handle your data, contact us at privacy@fxl.one.

2. The personal data we collect

Depending on how you use FXLeagues, we may collect:

• Account data — your name, email address, username, password and date of birth.
• Identity & verification (KYC) data — where you enter paid competitions or claim prizes, identity documents, proof of address and similar information used to verify you and meet our legal obligations.
• Competition & performance data — the leagues you enter, your trading activity within a competition, results, rankings, drawdown and related statistics.
• Payment data — information needed to process entry fees and prize payouts. Card and bank details are handled by our third-party payment provider; we do not store full payment card numbers.
• Communications — messages you send us and our support correspondence with you.
• Technical & usage data — IP address, device and browser type, operating system, and information about how you use the site, collected via analytics and similar technologies.
• Marketing preferences — your choices about receiving marketing from us.

3. How we collect your data

• Directly from you — when you create an account, enter a competition, complete verification, contact us or complete a form.
• Automatically — as you use the site, through analytics and similar technologies (see our Cookie Policy).
• From third parties — such as our identity-verification provider, payment provider and the trading platform used to run competitions.

4. How we use your data, and our legal bases

We use your personal data for the following purposes and legal bases under the UK GDPR:

• To create and manage your account and run the competitions you enter — to perform our contract with you.
• To verify your identity, prevent fraud and money laundering, and meet regulatory and record-keeping obligations — to comply with our legal obligations.
• To process entry fees and pay prizes — to perform our contract and comply with legal obligations.
• To operate, secure, maintain and improve the site and understand how it is used — for our legitimate interests in running a safe, effective platform.
• To respond to your enquiries and provide support — to perform our contract and for our legitimate interests.
• To send you marketing about competitions and updates — for our legitimate interests, or with your consent where required. You can opt out at any time.

5. Who we share your data with

We share personal data only where necessary, with:

• Service providers who help us run the platform, including our trading platform, payment provider, identity-verification (KYC) provider, hosting and infrastructure (Vercel), content management (Sanity), analytics (Vercel Web Analytics and Speed Insights), and email/support tools.
• Regulators, law enforcement or other authorities where we are required to disclose information by law or to protect our rights.
• Professional advisers such as lawyers, auditors and accountants.
• A buyer or successor if we sell or reorganise our business.

We do not sell your personal data.

6. International transfers

Some of our service providers may process your data outside the UK or European Economic Area. Where they do, we take steps to ensure your data is protected by an appropriate safeguard, such as UK adequacy regulations or standard contractual clauses.

7. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out in this policy.

• Account data is retained while your account is active and for a reasonable period afterwards.
• Identity, payment and competition records may be kept longer where we are required to retain them to meet legal, tax, anti-money-laundering or regulatory obligations (typically up to [X] years).

8. Your rights

Under UK data protection law you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data in certain circumstances.
• Restriction — ask us to limit how we use your data.
• Portability — receive certain data in a portable format.
• Object — object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent — where we rely on your consent, withdraw it at any time.

To exercise any of these rights, contact privacy@fxl.one. You also have the right to complain to the ICO (ico.org.uk), though we ask that you contact us first so we can try to put things right.

9. Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children

FXLeagues is not intended for anyone under 18, and paid competitions are open only to those aged 18 or over. We do not knowingly collect data from children.

11. Cookies

We use cookies and similar technologies on our site. Please see our Cookie Policy for details.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here and, where changes are significant, take reasonable steps to notify you. Please check back periodically.

13. Contact us

For any privacy questions or to exercise your rights, contact privacy@fxl.one or write to us at [registered address].