This Privacy Policy explains how the AureonMarkets operating entity collects, uses, stores, discloses and otherwise processes personal data in connection with this website, client onboarding and the services it provides. The company aims to collect only information that is relevant to a defined and lawful purpose and to protect it using appropriate technical and organisational measures.
Data controller and contact
The data controller is the AureonMarkets operating entity, identified in the applicable client agreement and company regulatory disclosure. Privacy requests may be submitted using the privacy contact published in the company’s official contact details or supplied in your onboarding documents.
Personal data collected
Depending on the service, the company may process identity and contact details; country of residence; account and authentication information; client classification and eligibility records; verification and beneficial ownership information; source-of-funds information; payment, transaction and trading records; device, log and security information; service preferences; and communications, enquiries or complaints. Sensitive or special-category information is collected only where a lawful condition applies and it is necessary.
Purposes and lawful grounds
Personal data may be processed to respond to enquiries; establish and administer client relationships; verify identity and eligibility; provide and secure services; process instructions and transactions; maintain operational, financial and regulatory records; prevent fraud, financial crime and misuse; meet legal obligations; resolve complaints; and protect legal rights. Depending on the purpose, the applicable ground may be performance of a contract, compliance with a legal obligation, consent, protection of vital interests or another ground permitted by the Seychelles Data Protection Act, 2023.
Disclosure and processors
Data may be disclosed to regulated financial institutions, brokers, trading venues, custodians, payment providers, identity-verification providers, hosting and cybersecurity providers, professional advisers, auditors, regulators, law-enforcement bodies and other service providers where disclosure is necessary, lawful and appropriately safeguarded. Providers acting on the company’s behalf are expected to process information under suitable confidentiality and security arrangements.
International transfers
Personal data may be processed or stored outside Seychelles where service providers or counterparties operate in other jurisdictions. Any transfer must comply with applicable data protection requirements and be supported by the safeguards or conditions required by law. Information about material transfer arrangements may be requested through the privacy contact.
Retention and security
Personal data is retained only for as long as required for the purpose for which it was collected, the client relationship, applicable limitation periods and legal or regulatory recordkeeping obligations. The company applies access controls and other technical and organisational safeguards proportionate to the risks. No electronic system or transmission method can be guaranteed to be completely secure.
Your rights
Subject to applicable law and any relevant exceptions, you may request access to your personal data, correction of inaccurate information, erasure, restriction or cessation of certain processing, objection to processing, and data portability. Where processing is based on consent, you may withdraw consent without affecting the lawfulness of processing before withdrawal. The company may need to verify your identity before responding.
Automated processing and profiling
The company may use automated tools to support identity checks, fraud prevention, eligibility, account security or service operations. Where a decision is made solely by automated processing and has a legal or similarly significant effect, the company will apply the safeguards required by applicable law and provide information or a route to request human review where required.
Children and data breaches
The services are intended for adults. The company does not knowingly onboard persons under 18 for trading services. Personal data relating to a child may be processed only where the conditions and parental or legal guardian consent requirements under applicable law are satisfied. Suspected personal data breaches are assessed and notified to the competent authority and affected individuals where and to the extent required by law.
Updates and complaints
This Policy may be updated to reflect changes in services, systems or legal requirements. The version published on this website applies from its stated update date. You may raise a privacy concern using the official privacy contact or complain to the Seychelles Information Commission where applicable.
For clarification about these terms or their application to a particular service, use the official AureonMarkets contact channel. The executed client agreement and any service-specific schedule contain the terms applicable to your account.
Contact AureonMarkets →