Privacy Policy

zemblancoo Ltd ("zemblancoo", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our trading platform. Please read this policy carefully. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy.

This policy is effective as of January 1, 2026 and applies to all users of our services, including prospective clients, current clients, and former clients.

We collect information that you provide directly to us, information collected automatically when you use our services, and information from third-party sources.

• Personal Information: When you register an account, we collect your full name, email address, phone number, date of birth, country of residence, and government-issued identification documents required for KYC/AML compliance.
• Account Information: Trading history, account balance, transaction records, deposit and withdrawal details, and platform usage data.
• Technical Information: IP address, browser type, operating system, device identifiers, and access times collected automatically when you interact with our platform.
• Communication Data: Records of correspondence when you contact our support team, including chat transcripts, emails, and phone call records.

We use the information we collect for the following purposes:

• To open, operate, and manage your trading account and provide our services.
• To verify your identity and comply with anti-money laundering (AML) and know-your-customer (KYC) regulatory requirements.
• To process deposits, withdrawals, and execute trades on your behalf.
• To communicate with you about your account, including important updates, margin calls, and regulatory notices.
• To improve our platform, develop new features, and enhance user experience through analytics and research.
• To detect, prevent, and address fraud, unauthorized access, and other illegal activities.
• To comply with legal obligations and respond to lawful requests from public authorities.

We do not sell your personal data. We may share your information with:

• Regulatory Authorities: CySEC, FCA, ASIC, and other regulators as required by law.
• Liquidity Providers: Tier-1 banks and financial institutions that execute your trades and provide market liquidity.
• Payment Processors: Third-party payment service providers for processing deposits and withdrawals.
• Verification Partners: Identity verification services used to complete KYC checks.
• Service Providers: Companies that help us operate our platform, including hosting, analytics, and customer support tools.

We implement industry-standard security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• AES-256 encryption for data at rest, including all sensitive personal and financial information.
• Two-factor authentication (2FA) available for all accounts to prevent unauthorized access.
• Regular security audits and penetration testing by independent third-party firms.
• Segregation of client funds in Tier-1 banks, completely separate from company operational accounts.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to regulatory retention requirements.
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format.
• Right to Object: Object to processing of your personal data for direct marketing purposes.

To exercise any of these rights, please contact our Data Protection Officer at privacy@zemblancoo.com. We will respond to your request within 30 days.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Transaction records and KYC documentation are retained for a minimum of 5 years after account closure as required by regulatory obligations. Account data is retained for the duration of your relationship with us and for a reasonable period thereafter to handle any potential disputes.

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to protect your data during international transfers in compliance with applicable data protection laws.