Privacy Policy

Introduction & Scope

ACH Global Markets Ltd ("ACH", "we", "us", or "our") respects your privacy and is dedicated to safeguarding your personal data. This Privacy Policy explains how we collect, use, disclose, and protect information that applies to our website, trading platforms, mobile applications, and related services (collectively, the "Services").

Information We Collect

We collect several categories of personal data to provide Services, comply with legal obligations, and protect our business. The table below summarizes our data practices:

Sources of Information

• Directly from you: Registration forms, support requests, account updates.
• Automatically via cookies: Analytics and essential site functionality.
• Third parties: Identity verification providers, payment processors, sanctions screening tools, AIS data partners.

How We Use Your Information

We process your personal data for legitimate business and legal purposes, including:

• Service Provision: Account management, trade execution, money transfers, vessel tracking, and customer support.
• Legal Compliance: AML/KYC, sanctions screening, regulatory reporting, and fraud prevention.
• Risk Management: Monitor for market abuse, unauthorized access, and financial crime.
• Marketing (with consent): Newsletters, platform updates, and research insights (opt-out anytime).
• System Improvement: Analytics, debugging, and enhancing user experience.

Cookies & Tracking Technologies

ACH uses essential, performance, functional, and optional advertising cookies. Essential cookies are required for platform security and operation. You can manage non-essential preferences via our cookie banner or browser settings. Disabling cookies may affect platform functionality.

Data Sharing & Disclosure

We do not sell your personal data. We may share information with:

• Service Providers: Identity verification, cloud hosting, payment gateways, vessel data providers (under strict confidentiality).
• Regulatory/Legal Bodies: FCA, law enforcement, tax authorities as required by law.
• Corporate Affiliates: Within ACH group for operational and compliance purposes.
• Business Transfers: In case of merger, acquisition, or sale of assets.

International Data Transfers

As a global platform, your data may be transferred to and processed in countries outside your residence (including the UK, EU, Singapore). We implement Standard Contractual Clauses and equivalent safeguards to ensure adequate protection.

Data Security

We employ military-grade encryption (TLS 1.3, AES-256), multi-factor authentication, regular penetration tests, and strict internal access controls. While no system is 100% secure, we continuously improve our security posture.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined, typically 7 years after account closure to comply with financial regulations. KYC records are kept for minimum 5-10 years. After retention expires, data is securely deleted or anonymized.

Your Privacy Rights

Depending on your jurisdiction, you may have rights to access, rectify, erase, restrict, port, or object to processing of your data. To exercise these rights, contact dpo@ach-financial.com. We will respond within 30 days. You also have the right to lodge a complaint with the ICO (UK) or your local supervisory authority.

Children's Privacy

Our Services are strictly for individuals aged 18 and above. We do not knowingly collect data from minors. If you believe we have inadvertently collected child data, please contact us immediately.

Changes to This Privacy Policy

We may update this policy periodically. Material changes will be communicated via email or platform notice. The "Last Updated" date indicates the latest revision. Continued use of our Services constitutes acceptance of the revised policy.