Privacy Policy

Introduction

Guro Markets UK Ltd ("Guro Markets", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website, trading platform, and related services (the "Platform"), in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using the Platform, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our services.

Data We Collect

We collect the following categories of personal data:

1. Identity Data: Full name, date of birth, nationality, government-issued identification documents;
2. Contact Data: Email address, phone number, residential address;
3. Financial Data: Bank account details, payment card information, source of funds documentation, transaction history;
4. Technical Data: IP address, browser type, device identifiers, login timestamps, geolocation data;
5. Usage Data: Trading activity, platform interactions, feature usage, support ticket history;
6. Verification Data: KYC documents, biometric verification data (where applicable), proof of address.

How We Use Your Data

We use your personal data to:

1. Open, verify, and maintain your trading account;
2. Process deposits, withdrawals, and trading transactions;
3. Comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) legal obligations;
4. Detect and prevent fraud, money laundering, and other financial crime;
5. Provide customer support and respond to enquiries;
6. Send account notifications, security alerts, and (with consent) marketing communications;
7. Improve our Platform, develop new features, and conduct internal analytics;
8. Meet regulatory reporting obligations to the FCA and other applicable authorities.

Legal Basis for Processing

We process your personal data under the following UK GDPR legal bases: performance of a contract (to provide trading services), legal obligation (AML/KYC and regulatory reporting), legitimate interests (fraud prevention, platform security, and service improvement), and consent (for marketing communications, which you may withdraw at any time).

Data Sharing & Third Parties

We may share your data with regulated third parties strictly for the purposes of operating the Platform, including: identity verification providers, payment processors and banking partners, liquidity providers, cloud infrastructure and data hosting providers, and regulatory authorities where legally required.

We do not sell your personal data to third parties for their own marketing purposes. All third-party processors are contractually bound to protect your data to a standard consistent with UK GDPR.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy, including satisfying legal, accounting, or regulatory reporting requirements. Financial transaction records and KYC documentation are typically retained for a minimum of five years following account closure, in accordance with UK AML regulations.

Data Security

We implement appropriate technical and organisational measures to protect your personal data, including 256-bit SSL encryption in transit, encryption of sensitive data at rest, role-based access controls, mandatory two-factor authentication (2FA), and regular security audits. Despite these measures, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights

Under UK GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data (subject to legal retention obligations); restrict or object to certain processing; request data portability; and withdraw consent for marketing communications at any time. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.

Cookies & Tracking

We use cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and improve our services. Essential cookies are required for the Platform to function correctly. You can manage non-essential cookie preferences through your browser settings.

International Transfers

Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or transfers to jurisdictions recognised as providing adequate data protection, in accordance with UK GDPR requirements.

Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete such information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be communicated via email or in-platform notification. The "Last updated" date at the top of this page indicates when this policy was last revised.

Contact & Data Protection Officer

For any questions about this Privacy Policy or to exercise your data protection rights, please contact our Data Protection Officer.