Privacy Policy
This policy explains what we collect when you use Royal Bullion Capital, why we hold it, who we share
it with, and what you can ask us to do with it. We collect what we need to run a
financial service, to meet the legal obligations that come with holding client
money, and to keep your account secure — and not more.
What we collect
- Identity and contact details — name, date of birth, nationality,
address, email and phone number. - Verification records — the identity and address documents you
upload, and the results of the checks we run on them. - Financial information — your funding and withdrawal methods,
transaction history, account balances, and where required, evidence of source of funds. - Trading activity — orders, positions, and the prices and times at
which they were filled. - Technical data — IP address, device and browser information, and
login times. This is used for security and fraud prevention. - Communications — support tickets and correspondence with us,
including messages you send to our support assistant.
Why we hold it
- To provide the service — opening your account, executing your
orders, processing payments, and answering your questions. - To meet legal obligations — identity verification, anti-money
laundering checks, record-keeping and reporting duties. - To protect the platform and you — detecting fraud, unauthorised
access and abuse. - To improve the service — understanding how the platform is used
and where it fails people.
Who we share it with
We do not sell your personal information. We share it only where it is necessary:
- Payment providers and banks, to move money to and from your account.
- Identity verification providers, to confirm the documents you supply.
- Technology providers who host or support the platform, under
obligations of confidentiality. - Authorities and regulators, where we are legally required to disclose.
Where a provider is located outside your country, we take steps to ensure your
information remains protected to the standard described here.
How long we keep it
We retain account, verification and transaction records for as long as your account is
open and afterwards for the period our legal and regulatory obligations require. Records we
must keep for compliance cannot be deleted on request while that obligation lasts. Data we
are not required to keep is removed when it is no longer needed.
How we protect it
- Credentials are stored hashed, never in a readable form.
- Sensitive keys and secrets are encrypted at rest.
- Access to client records is restricted by role, and money movements above a
published threshold require a second member of staff to approve them. - Administrative and financial actions are recorded in an audit trail that cannot be edited
after the fact. - Data is backed up regularly so it can be recovered.
No system is perfectly secure. If a breach occurs that is likely to affect you, we will
tell you and describe what happened.
Your rights
- Ask for a copy of the personal information we hold about you.
- Ask us to correct information that is wrong or out of date.
- Ask us to delete information we are not legally required to keep.
- Object to, or ask us to restrict, certain uses of your information.
- Withdraw consent to marketing at any time, without affecting your account.
To exercise any of these, contact support. We may need to verify your identity first —
that is a protection for you, not an obstacle.
Cookies
We use cookies and similar technologies to keep you signed in, remember your preferences
such as language and theme, and understand how the platform is used. Cookies that are
strictly necessary for the platform to work cannot be switched off; you can control the rest
in your browser.
Marketing
We will only send marketing where you have agreed to receive it, and every message
includes a way to stop. Service messages about your account, your trades, and your money are
not marketing and will continue.
Changes
If we change this policy in a way that materially affects you, we will give notice through
the platform or by email before the change takes effect.
Contact
Questions, requests or complaints about privacy can be raised through the
contact page or the support desk inside your account.