This page describes NxtTrader’s intended data-protection approach. It complements the Privacy Policy and should be read with any service-specific notices or contractual data-processing terms that apply to a particular engagement.
1. Data-protection principles
We aim to handle personal information lawfully, fairly and transparently; collect it for clear purposes; limit collection to what is reasonably necessary; keep it accurate where practical; retain it only as needed; and protect it through appropriate safeguards.
2. Roles and responsibilities
Depending on the activity, NxtTrader may determine why and how information is processed, or may process information on behalf of a client under agreed instructions. The applicable role should be documented for each engagement where relevant. Clients remain responsible for ensuring they have an appropriate basis to provide information they submit to us.
3. Collection and purpose limitation
We seek to collect only information relevant to a stated business purpose, such as responding to a request, managing a relationship, providing a service, supporting research or maintaining security. Information should not be repurposed in a way that is incompatible with the original purpose without an appropriate basis.
4. Access controls and confidentiality
Access to personal information should be limited to authorised personnel and service providers who need it for legitimate work. Appropriate confidentiality obligations, access permissions and staff guidance should be used to reduce unauthorised access or disclosure.
5. Security safeguards
Safeguards may include access controls, authentication, secure configuration, backups, monitoring, staff awareness and vendor review, proportionate to the nature and risk of the information. Security measures are reviewed as appropriate, but no system can guarantee absolute security.
6. Service providers and transfers
Where vendors or other parties support our operations, information should be shared only where necessary and subject to suitable contractual and security protections. If information is transferred across jurisdictions, applicable legal requirements and safeguards should be considered.
7. Retention and secure disposal
We seek to retain information only for the time needed for the relevant purpose, contractual duties, recordkeeping or legal requirements. When information is no longer required, it should be deleted, anonymised or securely disposed of where feasible and lawful.
8. Individual requests
Requests concerning access, correction, deletion, objection, portability or consent withdrawal can be submitted through our contact channel. We will assess requests under applicable law, verify identity where needed and explain if a request cannot be fully completed because of a legal or legitimate retention requirement.
9. Data incidents
If we become aware of a suspected personal-data incident, we aim to assess and contain it, investigate the cause, take reasonable corrective action and provide notifications to affected parties or authorities when required by applicable law.
10. Client and research data
For client projects, market research or business introductions, the purpose, permitted use, confidentiality, access, retention and sharing of supplied data should be defined in the relevant engagement terms. Users should not submit information they are not authorised to disclose.
11. Policy review
We may update this page as our systems, services or legal requirements evolve. Project-specific agreements and applicable law take precedence where they impose more specific requirements.
Important: This page is a website policy draft and is not legal advice. Please confirm it reflects NxtTrader’s actual practices and have it reviewed for applicable legal requirements before publication.
Questions about this policy?
Contact the NxtTrader team and tell us which policy or data-handling question you need help with.
CONTACT NXTTRADER