Privacy Policy

GlobalTradeFX (serving users worldwide)
Contact for exercising your data rights: support@theglobaltradefx.com

• MT5 account number and broker server name
• Investor Password — stored encrypted, used solely to read your account data
• Account and trading data: balance, equity, order history, profit and loss
• Profile details you provide: display name, country, avatar
• IP address and browser information when accessing the admin panel (security log)

About the Investor Password: it is a read-only credential. It cannot place trades, transfer or withdraw funds. We never ask for and never accept your Master Password.

Cookies & local storage: we use strictly necessary cookies to keep you signed in (httpOnly session cookies that page scripts cannot read) and store some preferences in your browser, such as your chosen language and display style. We do not use advertising or cross-site tracking cookies.

• Authenticating you against MT5 to sign in
• Reading your account and trading history to compute scores and rankings
• Displaying your performance on the public leaderboard (see section 5)
• Maintaining system security and investigating abnormal activity

We process your personal data on the following legal bases:

• Consent — for collecting your account/trading data and displaying your performance on the public leaderboard; given at sign-in and withdrawable at any time
• Legitimate interests — for maintaining system security, preventing abuse, and keeping admin-panel access logs
• Legal obligation — where the law requires us to retain or disclose data

For users in GDPR (or equivalent) jurisdictions, these bases correspond to those set out in the applicable law.

The leaderboard is a public page, visible to anyone on the internet without signing in. Publicly displayed data includes: MT5 account number, display name, country, avatar, score, profit and loss, win rate, number of trades and maximum drawdown.

This disclosure relies on your consent, given when you sign in. You may withdraw consent at any time by deleting your account from the profile page, which removes your data from the leaderboard immediately.

We do not sell, rent, or share your data with third parties for marketing.

The service is available worldwide. Our systems, servers and the machines that connect to MetaTrader 5 to read data are located in Thailand. When you use the service from another country, your data is transferred to, processed and stored in Thailand, where data-protection laws may differ from those of your country of residence.

Minimum age: the service is not intended for minors. You must be at least 18 years old, or the age of majority in your country (whichever is higher), to use it.

If you believe our processing is unlawful, you have the right to lodge a complaint with a supervisory authority — for example Thailand's PDPC, or the data-protection authority in your country of residence.

• Account and trading data: kept while your account exists in the system
• Admin panel security logs: kept 90 days, then deleted automatically
• When you delete your account, account data, trading history and the encrypted credential are deleted immediately

As a data subject you have the following rights:

• Right to be informed — this notice
• Right to withdraw consent — at any time
• Right of access — request a copy of your data
• Right to rectification — edit your profile directly
• Right to erasure — delete your account directly
• Right to restrict processing
• Right to object
• Right to data portability
• Right to lodge a complaint with a supervisory authority (see section 6)

Exercise these rights via the contact in section 1, or directly on your profile page for rectification and erasure.

• Investor Passwords are stored with AES-256-GCM encryption and never returned by the API
• All connections use HTTPS
• Admin access is restricted to authorised personnel and every action is logged
• Data is backed up regularly

Despite our efforts, no system is completely secure. In the event of a high-risk data breach we will notify you and the relevant authority as required by law.

If we make material changes, the next time you use the website we will display a request for your renewed consent for you to confirm — you do not need to log out and back in. If you do not consent, you will not be able to continue using your account.