Privacy Policy

Protecting your personal data and assets is our highest priority. We are fully committed to safeguarding them.

Forja Finlux collects and retains data essential to your trading activities. The methods used to collect and store this data are outlined in the Privacy Policy below.

Our policy is governed by the following principles:

• To ensure full transparency about our processes for collecting and storing your personal data:

Our goal is to ensure you understand how we collect and process your data so you can make informed decisions. We maintain clear guidelines and processes for handling data on this website. This policy outlines the specific methods we use so you have clear, concrete information about how your data is used. You are in control.

We will always share information promptly whenever we determine you should be informed. Transparency is essential to us.

Our experienced team is always available to answer any questions you may have about our processes, including our obligations under España law. For assistance, you can reach us at info@forja-finlux.com

• We do not use personal data for any purposes other than those described in our Privacy Policy.

We may process personal data for purposes such as ensuring the proper operation of Forja Finlux services and connecting trader-members with third-party trading platforms. We may also process data as needed to maintain and improve website features and services, protect our rights, and comply with regulatory or other legal obligations. Finally, where necessary, we use this data to provide administrative and other business functions related to the Services delivered to you, the client.

To deliver better services tailored to your preferences and needs, Forja Finlux uses personal data.

• To use essential tools effectively to protect your personal data and safeguard your rights in this regard:

You may contact us at any time to access all of your personal data. We can also update or delete it as needed. We additionally support requests to transfer that data to you or to a designated third party. We provide these services to help you exercise your rights to privacy and control.

• Safeguard your personal data:

Our security systems meet the highest standards, employing bank‑grade safeguards. While no system can offer a 100% guarantee, we are committed to continually enhancing our protections and strengthening the measures already in place.

We maintain a detailed, comprehensive privacy policy and industry-leading security systems.

1. The Scope?

This policy outlines our procedures for collecting, processing, and sharing any and all data related to natural persons.

Our policy applies to all natural persons who are identifiable or already identified. This includes any natural person who can be, or has been, identified in connection with data entrusted to us or that we can access and/or combine.

Data processing, as defined in the Privacy Policy, specifically refers to the storage, management, and organization of personal data.

We do not collect, or attempt to collect, any information about individuals under the age of 18. Nor do we permit individuals under the age of 18 to use our platform for any purpose. If we discover any account or information relating to someone under the age of 18, it will be deleted immediately.

2. What personal data do we retain?

When you register with us, we collect the personal data necessary to enable you to use our services. Where needed, we may also request personal data to verify account ownership, for example. To maintain and improve the highest quality of our services, we collect and analyse data about your use of our platform’s services, as well as those of our third-party partners.

3. You are not required at any time to provide the company with your personal data.

Although you are not obligated to provide us with your data, choosing not to do so may result in limitations on the services we can provide. It may also restrict your ability to access and use our platform.

4. What personal data do we collect? When you visit our website, we may collect the following personal information:

We do not collect information that directly identifies you. However, we do collect details such as your specific account activity, the IP address used, and the date and time of access. For maintenance, security, and support, we retain system crash reports, browser information, and the type of device used to access your account. We also collect information about the language associated with your account.

Regarding personal data collection, we collect and retain only the information you consent to share with us when you connect, through us, with a third-party trading platform.

Personal data you have provided to third-party platforms may include the following: full name, address, telephone number, and email address.

5. Why does the company need my personal data, and is it lawful for them to process it?

The collection, storage, and processing of your personal information by the company are solely for the purposes set out in the Policy. All such uses and processing are in accordance with applicable laws in España.

The company will not collect, process, or transmit your data except in compliance with applicable laws in España. The legal bases for doing so are as follows:

• You have consented to the company storing and processing your personal data. By submitting your information to the company, you authorize us to transfer it to the appropriate third-party trading platform. You have also consented to the processing of your personal data for one or more purposes.
• To improve its services, establish or defend legal claims, and pursue legitimate interests, among other purposes, the company may need to store and process your personal data.
• To meet legal obligations, data processing is necessary.

If you would like more information about the data processing the company is required to perform, please contact us by email.

Below is a list of the specific purposes for which we may process your personal data, along with the applicable legal bases.

6. Disclosure of Personal Data to Third Parties

To facilitate the storage and processing of IP addresses, the carrying out of user surveys and analysis, and other related services, the company may share anonymised personal data with third-party service providers.

At your request and with your consent, we may share certain personal data you provide with third-party services. In such cases, the processing of your data will be governed by those companies’ privacy policies. This may include multiple digital trading platforms.

To better serve our clients and enhance our overall services, the company may share personal information with its affiliates and trusted partner companies.

Where required by law, or to protect our company's rights and assets and those of our third-party partners, we may disclose data to competent legal or regulatory authorities.

In the event of a critical business transaction, such as the sale of the company or the pursuit of investment or financing, relevant data may be shared in a lawful and appropriate manner. This also applies in the case of any merger, restructuring, consolidation, or bankruptcy, in accordance with applicable law.

7. Use of Cookies and Third-Party Services

For site analytics and in collaboration with advertising partners, we may use cookies and similar technologies, in line with applicable laws and industry standards.

Cookies—small pieces of code stored on your device when you visit a website—are used to collect information about your browsing behavior and preferences. Their purpose is to personalize and enhance your user experience. They allow us to remember your settings and preferences and to tailor our services accordingly. These cookies are also used for site analytics and to compile statistics for strategic planning.

Broadly speaking, the site uses two types of cookies. Session cookies are stored in your browser only for the duration of your session and are deleted when you close the browser. The others are persistent cookies, which remain in your browser even after your session ends. These help the site recognize you as a returning visitor and make it easier for you to use the site.

Types of cookies:

Cookies may be used as necessary, in accordance with their intended purposes:

Cookies are blocked or deleted

To delete or block cookies, you must adjust your browser’s settings. Follow the links below for step-by-step guidance on doing this in the most popular browsers.

• firefox
• Microsoft Edge
• Google Chrome
• safari

If you block cookies, certain operations and site features may not function as intended.

ONLINE TRACKING NOTICE

Your personal data will be retained for as long as necessary to perform the operations described elsewhere in this policy. It may be kept longer in accordance with local laws and regulations and our internal policies.

At your request and discretion, your personal data will be shared with third-party trading platforms for a period of 12 months. Once those 12 months expire, and with your consent, it will be shared for a further 12 months.

Our operations include the routine review of all personal data to determine whether it is still required.

9. Transfers of personal data to third countries or international organizations

When necessary to provide our services and/or for security reasons, personal data may be transferred to third countries (countries other than your own) and to international organisations under strict security protocols. We implement data security measures at the highest possible level to protect your information and ensure you have access to legal rights and remedies in all cases.

Throughout the EEA (European Economic Area), all residents are protected by data protection laws and safeguards.

• All data transfers take place under the EU’s legal jurisdiction and competence, in line with the data protection standards set out in Article 45(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”)
• All data transfers between public entities or authorities are carried out in accordance with Article 46(2). It is a legally binding and enforceable agreement.
• The European Commission’s Standard Contractual Clauses, pursuant to Article 46(2)(c) of the GDPR, set the conditions for data transfers, which are conducted in accordance with them. The Clauses are available at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

For more information about the specific security measures the company implements to protect your personal data during transfers to third countries, please send your request to info@wealthwaydigital.uk

10. Protection of Personal Data

Personal data is safeguarded using top-tier technical and organizational measures, in line with industry-leading standards. These controls are intended to prevent the destruction of data from unlawful or accidental events, as well as any loss or alteration of that information.

Although we apply the highest standards and best-practice procedures for data protection, as required by law, it is not possible to guarantee in all circumstances that your personal data will always be error-free. For this reason, we cannot be held liable if personal data is disclosed or suffers incidental, intangible, or consequential damage. This includes situations beyond our control, such as disclosures resulting from transmission errors, unauthorized third-party access, or any similar cause.

If we receive legally binding requests from regulators or legal authorities, we may be required to disclose your personal data to them. Once data is disclosed under legal compulsion, we cannot control how those authorities handle, store, or protect it.

Anything sent over the internet, including personal information, carries a risk of interception and is not completely secure. The Company cannot guarantee the security of any data transmitted online.

11. Links to third-party websites

On this website, you may encounter links to third-party applications and websites. These parties are not affiliated with, nor controlled by, the company, and our privacy policy does not apply to them. They maintain their own procedures and priorities for collecting and processing personal data, and we are not responsible for their activities. Use at your own discretion.

Always review the privacy policy of any company or service when visiting their website, before sharing any personal data. Make sure their data collection, use, and processing policies align with your preferences and priorities. Any information you choose to share should be provided directly to the service provider.

12. Policy Amendments

We reserve the right to update or modify our policy at any time. We will announce any changes on the website and through other appropriate channels. The updated privacy policy will be posted on the website and will take effect immediately upon publication, unless otherwise stated.

13. Your Personal Data Rights

You retain full control and final authority over the use of all personal data, including the right to verify its accuracy, correct errors, and/or choose to delete it or limit the scope and nature of any processing by us.

On this page, EEA residents will find information relevant to them:

Your personal data is protected under the rights described herein. By sending an email to the address below, you may exercise those rights immediately.

Accessing Your Rights

If the personal data you have provided to us is accurate, you may access it at any time. Any of your personal data we process is accessible to you and therefore verifiable.

You may request access to your personal data at any time for verification, and it will be provided to you in electronic format. If you request additional copies of the data we are processing, beyond the first one, we may charge a reasonable fee.

Legal rights and those under our privacy policy may not be exercised in a way that infringes on the rights of others. The company may deny or restrict access to personal data where doing so would compromise the rights and freedoms of others.

Right to Rectify Errors

Any errors in your personal data, whether due to omission or inaccurate details, may be corrected by you or by the Company to ensure proper processing.

Erasure Rights

You have the right to request the deletion of your personal data under the following circumstances: 1) if your data has been processed without your consent or outside legal grounds; 2) upon your request where the Company has no legal obligation to retain it; 3) if you no longer consent to any processing by us, even if lawful and based on our or a third-party provider’s legitimate interests; and 4) if we are legally required to delete your data.

The right to erasure may be overridden by legal obligations under EU law or any Member State law. Likewise, this applies where data is required for the establishment, exercise or defence of legal claims.

Right to Restrict Data Processing

You have the right to request a restriction on the processing of your personal data in situations where you believe it contains inaccuracies.

Upon your request to restrict the use of your personal data, it will be deleted except in the following cases: 1) where European Union or Member State law prevents this. 2) With your consent, when required to establish, exercise, or defend legal claims. 3) To protect the rights of another natural person.

Data Portability Rights

You have the right to access and review any personal data you have provided if you have consented, in any form, to its collection and where processing is carried out by automated means.

You have the right to request the transfer of any or all of your personal data to another company or organisation, where technically feasible. This does not affect your right to erasure or your other data rights. This right cannot be exercised if doing so would infringe the rights or freedoms of another natural person.

Right to object to data processing

Notwithstanding the Company’s right to pursue its legitimate interests, or those of a third-party service provider, you have the right to object to the processing and request that it cease. This right does not apply where there is a compelling legal need or obligation to continue the processing, for example, to establish, exercise, or defend legal claims. In such cases, we may continue processing your personal data.

You may, at any time, request that your personal data not be processed for any direct marketing purposes.

Right to Refuse or Withdraw Consent

Where feasible, you may withdraw your consent to our processing of your personal data at any time, with immediate effect. This does not apply retroactively to any processing carried out before your withdrawal of consent.

If you are dissatisfied for any reason, you have the right to lodge a complaint with any legal, regulatory, or other supervisory authority.

If you believe your rights and freedoms have been violated in relation to the processing of your personal data, European Union Member States have designated regulatory and supervisory authorities to handle such matters. You may file a complaint with these authorities at your discretion.

Section 13 outlines circumstances in which your personal data rights may be limited under European Union law or the laws of its Member States.

Once we receive your request concerning your personal data and its processing, we will provide access to the information you requested, as described in Section 13 of this policy. We may extend this timeframe by up to two months, depending on the volume of requests and the nature of your request. If an extension is required, we will notify you within one month of receiving your request.

We will provide the requested information electronically at no charge, unless doing so conflicts with applicable law or the provisions of Section 13. We reserve the right to charge a reasonable fee or refuse a request if it is considered spurious, excessive, or repetitive.

We reserve the right to request additional proof of identity if there is reasonable doubt about the identity of the person submitting the personal data request, for data protection and security purposes.