We are committed to protecting and respecting your privacy. This Policy applies to all personal data we collect from you when you visit our website, open a trading account, use our platforms, or contact us. Please read it carefully. By using our services you acknowledge that you have read and understood this Policy.
We may update this Policy from time to time. Material changes will be communicated to you by email or by a prominent notice on our website. Continued use of our services after any change constitutes acceptance of the revised Policy.
| Purpose | Legal Basis |
|---|---|
| Opening and administering your trading account | Contractual necessity |
| Verifying your identity (KYC) and screening against AML/CTF and sanctions lists | Legal obligation |
| Executing trades, processing deposits and withdrawals | Contractual necessity |
| Sending account notifications, margin alerts, and trade confirmations | Contractual necessity |
| Providing customer support | Contractual necessity |
| Regulatory reporting to applicable financial authorities | Legal obligation |
| Responding to court orders, law enforcement requests, or regulatory inquiries | Legal obligation |
| Fraud detection, prevention, and IT security | Legitimate interests |
| Internal analytics and service improvement | Legitimate interests |
| Debt recovery | Legitimate interests |
| Sending marketing communications (newsletters, promotions, webinars) | Consent (opt-in) |
| Interest-based advertising and retargeting | Consent (opt-in) |
You may withdraw your consent to marketing communications at any time by clicking the unsubscribe link in any email we send or by contacting us at privacy@cgmfx.io. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew it.
We do not sell your personal data to any third party. We may share your data with:
All third-party service providers who process personal data on our behalf are contractually required to maintain confidentiality and to process data only in accordance with our instructions and applicable data protection law.
CGM is registered in Saint Lucia and operates from Tbilisi, Georgia. Your personal data may therefore be transferred to and processed in Saint Lucia, Georgia, or in other countries where our service providers operate. Some of these countries may not have data protection laws equivalent to those in your home country.
Where we transfer personal data internationally, we take steps to ensure that appropriate safeguards are in place — such as contractual protections, data processing agreements, or reliance on the recipient country's adequacy frameworks — so that your data receives a level of protection consistent with this Policy.
| Data Category | Retention Period |
|---|---|
| KYC / AML documentation and identity records | 7 years after account closure (regulatory minimum) |
| Financial and transaction records | 7 years after the transaction date |
| Active account data | For the duration of the client relationship |
| Marketing consent records | Duration of consent + 3 years |
| Technical / analytics data (logs, IP records) | Up to 14 months |
| Fraud or abuse-related records | At least 1 year from last incident |
| Customer support communications | 3 years after resolution |
Data is retained for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Retention periods for KYC/AML and financial records are driven by anti-money laundering regulations and cannot be shortened upon request.
Subject to applicable law, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@cgmfx.io. We may need to verify your identity before processing your request. We will respond within 30 days; complex requests may take up to 60 days, and we will notify you accordingly.
Our website uses cookies and similar tracking technologies to improve your experience and analyse site usage. The categories we use are:
You can control cookies through your browser settings or our cookie consent banner. Disabling certain cookies may affect the functionality of our website. For more information on opting out of Google Analytics, visit tools.google.com/dlpage/gaoptout.
We implement technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:
While we take all reasonable steps to protect your data, no transmission over the internet or electronic storage system is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and any applicable supervisory authority as required by law.
Our services are not directed at persons under the age of 18. We do not knowingly collect personal data from anyone under 18. If you become aware that a minor has provided us with personal data without parental consent, please contact us immediately at privacy@cgmfx.io and we will delete such data promptly.
Our website may contain links to third-party websites, platforms, or services. This Privacy Policy does not apply to those external sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by posting a notice on our website and, where appropriate, sending you an email. The date of the most recent revision is shown at the top of this page.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please contact us:
We will aim to respond to all privacy-related enquiries within 30 calendar days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority in your country of residence.