1. Data Controller
The data controller for client data is OFinancial LLC, with registered address in Mauritius.
2. Information We Collect
Identity & contact data: full name, date of birth, nationality, residential address, email, phone number, government-issued ID details.
Financial data: source of funds, employment status, deposits, withdrawals, trade history, payment instruments.
Technical data: IP address, device type, browser, operating system, time-zone setting, cookies and similar technologies.
Communications data: messages with our support team, marketing preferences.
3. How We Use Your Data
To open and maintain your trading account, execute orders and process deposits/withdrawals.
To comply with our legal and regulatory obligations including KYC, AML, tax reporting and fraud prevention.
To provide customer support and respond to your queries.
To improve our products, prevent abuse and detect suspicious activity.
To send service-related notifications and, where you have consented, marketing communications.
4. Sharing Your Data
We share personal data with: (a) our regulators (FSC Mauritius and others as applicable); (b) liquidity and payment providers strictly to execute your transactions; (c) identity verification providers for KYC checks; (d) law enforcement when legally required.
We do not sell your personal data.
5. International Transfers
Your data may be transferred outside the EEA/Mauritius to service providers. Where this happens, we use appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
6. Data Retention
We retain client records for at least 7 years after account closure to comply with AML and tax-record obligations. Marketing data is retained for as long as you choose to receive communications from us.
7. Your Rights
You have the right to: access the personal data we hold; rectify inaccurate data; request deletion (subject to our legal retention obligations); restrict or object to processing; data portability; withdraw consent at any time.
Requests should be sent to privacy@ofinancial.markets.
8. Security
We use industry-standard technical and organisational measures including TLS encryption, access controls, regular penetration testing and PCI DSS compliance to protect your data.
9. Cookies
We use cookies and similar technologies. See our Cookie Policy for details on how to manage your preferences.
10. Complaints
You have the right to lodge a complaint with the Mauritius Data Protection Office.