Privacy Policy

1. Introduction & Identity of Data Controller

This Privacy Policy ('Policy') governs how Hextech Digital Technologies LLC, operating the Trade checx platform and brand ('Trade checx', 'we', 'us', or 'our'), collects, processes, stores, transfers, and protects personal data of users, visitors, and clients ('you' or 'User') across all jurisdictions in which we operate.

Hextech Digital Technologies LLC is registered at AL Goze First, LEADER BUILDING, Office 102, Dubai, UAE. We act as the data controller for all personal information processed through the Trade checx platform.

By accessing or using Trade checx, connecting your MetaTrader 4 (MT4) or MetaTrader 5 (MT5) trading accounts, or subscribing to any of our services, you acknowledge that you have read, understood, and agree to this Policy. If you do not agree with any part of this Policy, you must discontinue use of our services immediately.

2. Scope & Jurisdictional Applicability

This Policy applies globally to all Users of Trade checx regardless of their country of residence. We have designed our data practices to meet or exceed the requirements of the following key regulatory frameworks:

• UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ('UAE PDPL')
• European Union General Data Protection Regulation (EU GDPR 2016/679) for EU/EEA residents
• UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 for UK residents
• Personal Data Protection Act (PDPA) for residents of Singapore, Thailand, and applicable APAC nations
• California Consumer Privacy Act (CCPA) / CPRA for California residents
• Saudi Arabia Personal Data Protection Law (PDPL) for KSA residents
• India Digital Personal Data Protection Act 2023 (DPDPA) for Indian residents
• Bahrain Personal Data Protection Law (PDPL) and Kuwait Data Protection Framework for GCC residents

Where local laws provide stronger protections than this Policy, we will apply the higher standard. This Policy does not override any mandatory local consumer or data protection rights you may hold.

3. Data We Collect

3.1 Identity & Account Data

• Full legal name, email address, phone number, country of residence
• Government-issued identity documents (e.g., passport, national ID) submitted for KYC verification purposes
• Proof of address documents where required
• Date of birth and nationality

3.2 Trading Account & Financial Data

• MT4/MT5 account numbers, broker server details, and account login credentials (encrypted)
• Trading history, open positions, equity, balance, and drawdown data retrieved via API
• Risk parameters configured by you (e.g., stop-loss limits, daily loss limits, profit targets)
• Subscription plan and payment records (we do not store full card details; payment processors handle this)

3.3 Usage & Behavioural Analytics

• Log data: IP addresses, browser type, device identifiers, operating system
• Feature interaction data: which tools, settings, and dashboard sections you access
• Session duration, click patterns, and platform navigation behaviour
• Crash reports and error logs

3.4 Communications Data

• Support tickets, live chat logs, and email correspondence with our team
• Survey responses and feedback you voluntarily submit

We do not collect or process sensitive personal data (e.g., racial or ethnic origin, religious beliefs, health data) and do not knowingly collect data from persons under 18 years of age.

4. Legal Basis for Processing (GDPR/UK GDPR)

For Users in the EU/EEA and UK, we rely on the following legal bases under Article 6 GDPR:

• Contract Performance (Art. 6(1)(b)): Processing necessary to deliver our subscription services, including connecting to your MT4/MT5 accounts and executing risk management automation.
• Legal Obligation (Art. 6(1)(c)): KYC/identity verification required under applicable financial regulations and anti-money laundering obligations.
• Legitimate Interests (Art. 6(1)(f)): Analytics, platform security, fraud prevention, and service improvement, balanced against your privacy rights.
• Consent (Art. 6(1)(a)): For any marketing communications, which you may withdraw at any time.

5. How We Use Your Data

We process your personal data solely for the following legitimate purposes:

• To create, manage, and authenticate your Trade checx account
• To connect, monitor, and execute automated risk management actions on your linked MT4/MT5 trading accounts in accordance with parameters you have set
• To generate and display your personal trade journal, statistics, and analytics dashboards
• To verify your identity pursuant to our KYC obligations
• To process subscription payments and manage billing records
• To provide technical support and respond to your queries
• To detect, investigate, and prevent fraudulent, unauthorised, or illegal activity
• To improve, test, and optimise platform features and security
• To comply with applicable laws, regulations, legal proceedings, or governmental requests
• To send transactional communications (account alerts, system notifications, subscription renewals)

We will not sell, rent, or lease your personal data to third parties for their own marketing purposes.

6. MT4/MT5 Credentials — Special Handling Notice

• All MT4/MT5 login credentials provided by you are encrypted using AES-256 encryption at rest and TLS 1.2/1.3 in transit
• Credentials are stored in isolated, access-controlled infrastructure with strict role-based access controls
• No human employee of Hextech Digital Technologies LLC has routine access to your decrypted credentials
• Credentials are used exclusively to perform the automated risk management actions you have configured within the platform
• You may revoke platform access to your trading accounts at any time by disconnecting them within your Trade checx dashboard

IMPORTANT: Trade checx does NOT give financial advice. Automated actions (such as trade squaring-off, account lockdowns) are executed strictly based on risk parameters that you define. You remain fully responsible for your trading decisions and outcomes.

7. Data Sharing & Third-Party Disclosures

• Service Providers: We engage vetted third-party processors (e.g., cloud hosting providers, payment processors, email delivery services, analytics tools) who process data strictly on our behalf under contractual data processing agreements.
• Legal Compliance: We may disclose data to regulatory authorities, law enforcement agencies, or courts when required by applicable law, subpoena, or legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, and you will be notified in advance.
• Fraud Prevention: We may share data with relevant authorities or industry partners solely for the purpose of fraud detection and prevention.

Where data is shared with processors outside the UAE or your country of residence, we ensure appropriate transfer safeguards are in place, including Standard Contractual Clauses (SCCs) for EU/UK transfers.

8. Data Retention

• Active account data: Retained for the duration of your subscription plus 7 years (for financial record-keeping compliance)
• KYC documents: Retained for a minimum of 5 years from account closure, as required under UAE AML regulations
• Trading and risk management logs: Retained for 5 years from the date of generation
• Support communications: Retained for 3 years from the date of resolution
• Analytics and log data: Retained for 24 months on a rolling basis

Upon expiry of applicable retention periods, data is securely deleted or anonymised.

9. Your Data Subject Rights

• Right of Access
• Right to Rectification
• Right to Erasure ('Right to be Forgotten')
• Right to Restriction
• Right to Data Portability
• Right to Object
• Right to Withdraw Consent
• Right to Lodge a Complaint

To exercise any of these rights, contact us at: privacy@tradechecx.com. We will respond within 30 days (or as required by local law). We may request identity verification before processing your request.

10. Cookies & Tracking Technologies

Trade checx uses cookies and similar technologies to operate the platform, remember your preferences, and analyse usage. You may control cookie preferences through your browser settings or our cookie consent banner. Essential cookies required for platform functionality cannot be disabled.

11. Security Measures

• AES-256 encryption for data at rest; TLS 1.2/1.3 for data in transit
• Multi-factor authentication (MFA) for platform access
• Regular penetration testing and vulnerability assessments
• Incident response procedures with mandatory breach notification protocols
• Role-based access controls limiting employee data access to what is necessary

No method of electronic transmission or storage is 100% secure. In the event of a data breach affecting your rights, we will notify you and relevant authorities as required by applicable law.

12. Children's Privacy

Trade checx is not directed to or intended for use by persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, contact us immediately at privacy@tradechecx.com and we will delete such data promptly.

13. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, or legal obligations. Material changes will be notified via email to registered Users and/or prominent notice on the platform at least 14 days prior to taking effect. Continued use of Trade checx after the effective date constitutes acceptance of the updated Policy.

14. Contact & Data Protection Officer

Company: Hextech Digital Technologies LLC
Brand: Trade checx
Registered Address: AL Goze First, LEADER BUILDING, Office 102, Dubai, UAE
Privacy Email: privacy@tradechecx.com
General Contact: support@tradechecx.com