Privacy Policy

01Who we are

This privacy policy explains how A2Broker FX Ltd, trading as A2B ("A2B", "we", "us", "our"), collects, uses and protects personal data when you visit a2bfx.io (the "Site"), contact us, or receive services from us.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, A2Broker FX Ltd is the data controller for the personal data described in this policy.

We have not appointed a statutory Data Protection Officer, as we are not required to. Privacy questions are handled by our privacy team at the address above.

02Scope of this policy

This policy covers personal data we handle as a controller: visitors to the Site, people who contact us, prospective and current clients, suppliers, partners and job applicants.

It does not cover personal data we process on behalf of a client as a processor — for example, data inside a client's own CRM, advertising account, analytics platform or customer database that we access to deliver services. That processing is governed by our contract and data processing agreement with that client, and the client's own privacy notice applies to the individuals concerned.

The Site links to third-party websites and platforms we do not control. This policy does not apply to them.

03What we collect

Information you give us

• Enquiry details submitted through the contact form or by email: your name, company name, work email address, the nature of your enquiry, and anything else you choose to include in your message.
• Client and supplier records: contact details for the people we deal with, correspondence, contract details, and billing information.
• Marketing preferences: whether you have subscribed to or opted out of our updates.
• Recruitment information, if you apply to work with us: CV, cover letter, work history and right-to-work information.

Information collected automatically

• Technical and usage data: IP address, browser type and version, operating system, device type, screen size, referring page, pages viewed, time on page and approximate location derived from IP address.
• Server logs kept by our hosting provider for security, diagnostics and abuse prevention.
• Cookies and similar technologies, where you have consented to non-essential ones. See our Cookies Policy.

Information from other sources

• Publicly available business information, such as company websites, Companies House and professional networks, used to research prospective clients.
• Referrals and introductions from mutual contacts or partners.
• Analytics, advertising and email platforms that report on how our campaigns perform.

What we do not collect

We do not intentionally collect special category data (such as health, race, religion, political opinions, trade union membership, genetic or biometric data, or data about sexual orientation), and we ask that you do not send it to us. We do not collect criminal offence data. Our Site is not directed at children and we do not knowingly collect data from anyone under 18.

04How and why we use it

Under the UK GDPR we must have a lawful basis for every use of your personal data. Ours are set out below.

Where we rely on legitimate interests, we have considered whether that interest is overridden by your rights and freedoms. You can ask us for details of that assessment, and you have the right to object — see section 9.

Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing carried out before you withdrew it.

05Who we share it with

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

We share personal data with the following categories of recipient, under contracts that require them to protect it and to use it only on our instructions. You can ask us at any time for the identity of the specific providers we use:

We may also disclose personal data where we are required to by law, by a regulator or by a court, or where disclosure is necessary to protect our rights, property or safety, or those of others. If our business is sold or reorganised, data may be transferred to the acquirer, who will remain bound by this policy or an equivalent one.

No third-party fonts or embeds. Typefaces used on the Site are served from our own domain rather than from Google Fonts or any other font network, so loading a page does not disclose your IP address to a third-party font provider. The Site loads no third-party advertising, tracking or social media scripts.

06International transfers

Some of our suppliers are based outside the United Kingdom, including in the United States and the European Economic Area. Where personal data is transferred outside the UK, we make sure one of the following applies:

• the country is covered by UK adequacy regulations; or
• the transfer is covered by the UK International Data Transfer Agreement (IDTA), or by the EU Standard Contractual Clauses together with the UK Addendum; or
• another lawful transfer mechanism or exception applies.

You can ask us for a copy of the safeguards we rely on by emailing privacy@a2bfx.io.

07How long we keep it

We keep personal data only for as long as we need it for the purpose we collected it for, and to meet legal, accounting or reporting obligations.

At the end of a retention period we delete the data or irreversibly anonymise it so it can no longer be linked to you.

08How we protect it

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS), access controls and least-privilege permissions, multi-factor authentication on business systems, supplier due diligence, and staff confidentiality obligations and training.

No transmission over the internet is completely secure, so we cannot guarantee absolute security. If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours where required, and we will tell you directly if the risk to you is high.

09Your rights

Under UK data protection law you have the following rights, free of charge, in most circumstances:

• Access — ask for a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — ask us to delete data where there is no good reason for us to keep it.
• Restriction — ask us to suspend processing while a concern is resolved.
• Portability — receive data you gave us in a structured, machine-readable format, or have it sent to another controller, where processing is based on consent or contract and carried out by automated means.
• Objection — object to processing based on legitimate interests. You have an absolute right to object to direct marketing, and we will stop immediately.
• Withdraw consent — at any time, where we rely on consent.
• Rights relating to automated decision-making — see section 10.

To exercise any of these rights, email privacy@a2bfx.io. We may ask you to verify your identity. We will respond within one month; if your request is complex we may extend this by up to two further months and will tell you why.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK supervisory authority:

If you are in the EEA, you may instead complain to the supervisory authority in your country of residence, work or the place of the alleged infringement.

10Automated decision-making and AI

We do not make decisions that produce legal effects concerning you, or similarly significantly affect you, based solely on automated processing.

We do use software, including artificial intelligence tools, to help us draft, translate, analyse and produce work. Where we do so, output is reviewed by a person before it is used, and we do not input personal data into third-party AI tools unless that tool is contracted as a processor and the use is covered by our agreement with the relevant client.

Where we build audience segments or scoring models for a client, we do so as that client's processor on their instructions, and the client is responsible for informing the individuals concerned.

11Marketing

We may send you updates about our services by email where you have asked to receive them, or where you are an existing client or business contact and the message relates to services similar to those you have already received or discussed.

Every marketing email includes an unsubscribe link. You can also email privacy@a2bfx.io at any time and we will remove you. We keep a minimal suppression record so that we do not contact you again by mistake.

12Third-party links

The Site may link to third-party websites, plug-ins and applications. Clicking those links or enabling those connections may allow third parties to collect or share data about you. We do not control them and are not responsible for their privacy practices. We encourage you to read the privacy notice of every site you visit.

13Changes to this policy

We may update this policy from time to time. The version and "last updated" date at the top of this page will always tell you which version is current. If we make a material change, we will take reasonable steps to bring it to your attention, for example by a notice on the Site or by email where appropriate.

14Contact us

For any question about this policy or about how we handle personal data:

• Email: privacy@a2bfx.io
• General enquiries: hello@a2bfx.io
• Post: A2Broker FX Ltd, Seymour Chambers, 92 London Road, Liverpool L3 5NW, United Kingdom