Privacy Policy

This Privacy Policy explains how FXCRM Turnkey Systems Ltd ("FXCRM", "we", "us") collects, uses, shares, and protects personal information when you visit fxcrm.net, request a demo, sign up for a trial, use our licensed CRM software, or interact with any FXCRM-hosted portal, mobile application, or API. It applies to all users worldwide and supplements our GDPR Policy for EU/EEA and UK data subjects.

Information you provide directly:

• Account registration data — name, work email, phone, company, job title
• Billing information — invoicing address, VAT/tax IDs, payment method metadata
• Support and sales correspondence — tickets, chat transcripts, call recordings
• KYC/AML data submitted through our onboarding flows (for regulated customers)

Information collected automatically:

• Device and connection data — IP address, browser, OS, device fingerprint
• Usage analytics — pages viewed, features used, session duration, error logs
• Cookies, pixels, local storage, and similar tracking technologies

Information from third parties:

• Identity verification vendors (KYC/liveness providers)
• Sanctions, PEP, and adverse media screening databases
• Enrichment providers, business registries, and partner referral platforms

• Provide, operate, maintain, and improve our products and services
• Onboard customers, verify identity, and perform AML/KYC obligations
• Process payments, invoicing, subscriptions, and settlement
• Deliver support, security alerts, service announcements, and account notifications
• Detect and prevent fraud, abuse, and unauthorised access
• Send marketing communications where permitted, always with an easy opt-out
• Comply with legal, regulatory, tax, and audit obligations
• Conduct product research and aggregate benchmarking (using de-identified data)

We use the following categories of cookies:

• Strictly necessary — session, security, load-balancing (cannot be disabled)
• Functional — remember preferences such as language and layout
• Analytics — measure and improve product performance
• Marketing — attribute campaigns and personalise outreach (consent-based)

You can manage your preferences at any time via the cookie banner or your browser settings. Rejecting non-essential cookies will not affect access to core product functionality.

We only share personal data with:

• Vetted sub-processors bound by data-processing agreements
• Payment processors, KYC providers, and communication vendors necessary to deliver the service
• Regulators, law enforcement, and courts when compelled by valid legal process
• Professional advisers (auditors, lawyers, insurers) under strict confidentiality
• A successor entity in the event of a corporate reorganisation, merger, or acquisition

We do not sell personal information, and we do not share personal data with third-party advertisers for their own independent marketing.

FXCRM applies enterprise-grade safeguards including AES-256 encryption at rest, TLS 1.3 in transit, hardware-backed key management, principle-of-least-privilege access controls, multi-factor authentication for staff, continuous vulnerability scanning, third-party penetration testing, and 24/7 monitoring by a dedicated security operations function. No system is fully impenetrable, but we work continuously to protect your data at the highest reasonable standard.

We retain personal data only for as long as necessary for the purposes described in this policy, or for longer where required by law. Financial and AML records are retained for a minimum of five (5) years after the end of the customer relationship. Marketing data is retained until you opt out or after 24 months of inactivity.

You may request access, correction, deletion, portability, or restriction of your personal data, and object to certain processing activities, by emailing privacy@fxcrm.net. Residents of the EU/EEA and UK have additional rights described in our GDPR Policy. Residents of California, Virginia, Colorado, and other US states with applicable privacy laws have equivalent rights, including the right to opt out of the sale or sharing of personal information — which FXCRM does not conduct.

FXCRM services are not directed to, and we do not knowingly collect personal information from, individuals under 18 years of age. If we become aware that we have collected personal data from a minor, we will delete it promptly.

Personal data may be processed in countries outside your country of residence. Where required, we implement appropriate safeguards, including the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, together with technical and organisational measures to ensure your data remains protected to an equivalent standard.

We may update this Privacy Policy from time to time. Material changes will be announced via the FXCRM dashboard and by email to registered customers at least 30 days before they take effect. The "Last updated" date at the top of this page always reflects the most recent revision.

Questions, requests, or complaints regarding this Privacy Policy can be sent to privacy@fxcrm.net, or by post to: FXCRM Turnkey Systems Ltd, Privacy Office, London, United Kingdom.