Privacy Policy

1.Controller and contact

Next Scale Funded Trading Technologies Ltd., company number [company number to be confirmed], is the controller of the personal data described in this notice.

Privacy contact: privacy@nextscalefunded.com. You can also submit an access, correction or deletion request from the Data & privacy section of your account, which gives you a tracked reference.

We are registered with the Information Commissioner's Office (ICO) as required. If registration details are still pending they are shown in square brackets elsewhere on this site.

2.Data we collect

Account data: name or display name, email address, country of residence, phone number where given, password (stored only as a hash) and your marketing and leaderboard preferences.

Verification (KYC) data: full name, date of birth, address, identity document images and a selfie where required to release a reward, plus the outcome of sanctions and PEP screening.

Order and billing data: what you bought, price, discount, currency, country of residence declared at checkout, the policy versions and consents you accepted, and the payment reference returned by our payment provider. We never receive or store full card numbers.

Trading and platform data: simulated orders, positions, results, rule evaluations, compliance flags, certificates, badges and support messages.

Technical data: IP address, device and browser information, timestamps, and security and anti-fraud logs.

Referral data: the affiliate code you arrived with, where one applies.

3.Why we use it and our lawful basis

To create and operate your account, run evaluations, apply the rules engine and process rewards — necessary for performance of our contract with you.

To verify identity, screen against sanctions lists, detect fraud, market abuse and money laundering, and keep required records — legal obligation, and our legitimate interest in protecting the service and other customers.

To provide support, handle complaints and defend legal claims — legitimate interest in running the service properly.

To send service messages about your account, purchases and rewards — performance of our contract. These are not marketing and cannot be switched off while your account is open.

To send marketing emails and measure campaigns — your consent, which you can withdraw at any time from your account or from the unsubscribe link in any marketing message.

To measure site usage with optional analytics and referral cookies — your consent, given through the cookie banner.

Special-category data is not deliberately collected. Identity documents may reveal nationality or a biometric image; these are handled only to meet identity-verification and financial-crime obligations and are not used for any other purpose.

4.Automated decisions

Whether an evaluation passes or breaches is determined automatically by the rules engine from the published parameters recorded against your account. Compliance detections are automated flags, but a person reviews any flag before an account is closed or a reward is withheld.

You can ask for a human review of any automated outcome by contacting support or raising a complaint.

5.Who we share data with

Service providers acting as processors under written contract: cloud hosting and database infrastructure, authentication, email delivery, market-data providers, identity-verification providers, our payment provider, and error and analytics tooling.

Banks, payment institutions or crypto payment processors to the extent needed to pay a reward you have requested.

Regulators, law enforcement, auditors and professional advisers where we are required or permitted by law to disclose.

A buyer or successor if the business is sold or reorganised, subject to the same protections.

We do not sell personal data and we do not share it with third parties for their own marketing.

6.International transfers

Some providers process data outside the UK. Where they do, we rely on UK adequacy regulations or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate technical and organisational safeguards.

7.How long we keep it

Account, order and trading records: for the life of the account and then 6 years, to meet tax, accounting and limitation-period requirements.

Identity-verification records and financial-crime screening results: 5 years from the end of the customer relationship, in line with the Money Laundering Regulations 2017.

Support tickets and complaints: 6 years from closure.

Marketing consent records: for as long as consent is relied on, and 2 years after withdrawal to evidence the withdrawal.

Technical and security logs: normally 12 months, longer where an investigation is open.

8.Security

Data is encrypted in transit and at rest, access is restricted by role, verification documents are held in private storage that is not publicly reachable, and database access is enforced by row-level security so one customer cannot read another's records.

No system is perfectly secure. If a breach is likely to result in a risk to your rights we will notify the ICO within 72 hours and tell you where the law requires it.

9.Your rights

You have the right to access your data, to have inaccurate data corrected, to erasure, to restrict or object to processing, to data portability, to withdraw consent at any time, and not to be subject to a solely automated decision with legal or similarly significant effect.

Erasure is not absolute: where the Money Laundering Regulations or tax law require us to keep a record, we will keep the minimum required and delete the rest.

We respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you are unhappy with how we handled a request you can complain to the Information Commissioner's Office at ico.org.uk, or contact us first at privacy@nextscalefunded.com so we can put it right.

10.Children

The service is not offered to anyone under 18. If we learn that an account belongs to a minor we close it and delete the data we are not required to keep.

11.Cookies

Cookies and similar technologies are covered in the separate Cookie Policy, including how to change or withdraw your consent.