Privacy Policy

We are committed to being transparent about how we collect and process your personal information.

We want you to have the information you need to make informed choices about how your Personal Data is used and processed. To support this, we use a range of methods to keep you informed about how your Personal Data is handled.
Where specific information is relevant to you, we will provide it at the appropriate time.
If you have any questions or require clarification on any legally imposed limitations, we're happy to help. You can reach us by email at: info@meritflowen.com

Your personal data will only be used for the purposes set out in this Policy.

We process your personal data for a range of purposes: to provide the website and connect you with third-party trading platforms (the 'Services'); to improve the site; to protect our rights and interests; to support the maintenance and delivery of the Services; to meet regulatory and legal obligations; and to carry out administrative and business activities required to facilitate your use of the Services.
We also process your personal data to better understand your preferences and needs.

To exercise your rights in relation to your Personal Data:

To exercise your rights, contact us at any time. You can request access to your personal data, ask us to modify or delete it, restrict its use for specific or general purposes, or have it transferred to you or a third party. We will accommodate your request.

Protect Your Personal Data:

While we cannot guarantee the absolute security of your personal data, we are committed to employing a range of methods and techniques to keep it protected.
Our Privacy and Security Policy is complete.

1. The Scope?

This Policy describes the types of personal data the Company collects about natural persons, how it processes that data, how it is shared with third parties, and how it is secured.
This Policy applies to information relating to an identified or identifiable natural person. A person is considered identifiable if they can be identified directly or through a combination of additional information the Company holds or can reasonably access.
"Processing" refers to any operation involving the use or collection of personal data, including its organisation, structuring, and storage.
Our services are intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18, nor do we knowingly permit such persons to use our services. If we become aware that personal data has been collected from a person under 18, we will delete it promptly.

2. What Personal Data Do We Hold About You?

When you access our services, channels, or website, we collect personal data. Depending on the circumstances, we may request this directly from you, gather it by analysing how our services and channels are used, or receive it from third-party partners.

You are not required to provide personal information to the company. However, withholding certain personal data may prevent us from delivering our services or granting you access to the website.

You are not required to provide us with personal data. However, withholding it may prevent us from delivering our Services or granting you access to the website.

4. What Personal Data Do We Collect? When you visit our website, we collect the following personal data:

This includes information such as your online activity log, traffic data (including IP address, date of access, and time of access), language settings, software crash logs, browser type, and device information. This data is not personal data and cannot be used to identify you.
Personal Data we receive from you: any personal data you voluntarily provide when connecting to a third-party online trading platform through us.
Personal data you provide directly to third-party platforms to facilitate trading: this includes your full name, address, phone number, and email address.

5. Legal Basis and Reasons for Processing Personal Data

6. Transfer of Personal Data to Third Parties We may share your personal data with third parties in the following circumstances: Service Providers: We engage third-party companies and individuals to perform services on our behalf, such as payment processing, data analysis, email delivery, hosting, customer support, and marketing. These parties access your personal data only to perform those services and are obligated not to disclose or use it for any other purpose. Business Transfers: If we are involved in a merger, acquisition, or sale of all or part of our assets, your personal data may be transferred as part of that transaction. We will notify you before your personal data becomes subject to a different privacy policy. Legal Requirements: We may disclose your personal data where required to do so by law or in response to valid requests from public authorities. Protection of Rights: We may disclose your personal data where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Service, or as evidence in litigation. With Your Consent: We may share your personal data with third parties when you have given us your explicit consent to do so. Where personal data is transferred to third parties, we take reasonable steps to ensure those parties provide adequate protections consistent with this Privacy Policy.

We may share your Personal Data with third-party service providers who support our operations, including hosting and storage providers and user experience analytics services. Upon your request, we will share specific Personal Data with third-party trading platforms you designate. Your Personal Data shared in these instances will be governed by those platforms' own privacy policies. Your Personal Data may be shared with more than one trading platform. We may share Personal Data with affiliated entities or business partners where this supports the development and improvement of our products and services. We may disclose Personal Data to regulatory, local, or other official authorities where necessary to protect the rights or assets of third parties. We may also share your Personal Data with prospective investors, acquirers, or lenders to the Company or any group entity in connection with a transaction, including the transfer or sale of assets, or as part of any merger, restructuring, consolidation, or bankruptcy involving the Company or any group entity.

7. Cookies and Third-Party Services We use cookies and third-party services on our website. Some of these services may collect personal data about you. Below, we explain which third-party services we use, what data they collect, and why. Third-party services we integrate may place cookies on your device to enable their functionality. These providers operate under their own privacy policies and are independently responsible for how they handle your data. We encourage you to review their policies before using our website. By continuing to use our website, you consent to the use of cookies and third-party services as described in this section. You may withdraw or adjust your consent at any time through your browser settings or our cookie management tool. Where a third-party service processes your personal data, we have ensured, to the extent required, that appropriate data processing agreements are in place. However, once data is transmitted to a third party, their privacy practices apply. If you disable certain cookies, some features of our website may not function correctly. We are not responsible for the functionality or data practices of third-party providers.

We may engage third-party service providers, such as advertising networks and analytics companies, to support our website. These providers may also use cookies or similar technologies. Cookies are small text files placed on your device when you visit the website. They are used to collect information about your browsing habits and preferences in order to improve your experience, remember your settings, and tailor the products and services presented to you. Cookies are also used for statistical and analytics purposes. We use two types of cookies. Session cookies are temporary and are deleted from your device once you close your browser. Persistent cookies remain on your device after your browser is closed and allow the website to recognise you as a returning user, making it easier to access the website on subsequent visits.

Types of Cookies:

We may use them according to their purpose.

ONLINE TRACKING NOTICE
This service does not currently support do-not-track signals.
8. Retention of Your Personal Data

We retain your personal data for as long as necessary to fulfil the purposes described in this Policy, or for longer periods where permitted by applicable law, regulation, or order.
Your information will be shared with third-party trading platforms for 12 months. With your consent, this sharing will continue for a further 12 months.
We review the personal data we hold on a regular basis to confirm it is no longer required.

9. Transfers of Personal Data to a Third Country or International Organisation

10. Security of Personal Data We are committed to protecting your personal data and take all reasonable technical and organisational measures to safeguard it against unauthorised access, loss, disclosure, alteration, or destruction. While we implement appropriate security controls, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we continually review and update our security practices to address emerging risks. Access to your personal data is restricted to authorised personnel and trusted third parties who require it to perform their responsibilities. All such parties are bound by confidentiality obligations. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately using the contact details provided in this policy.

We have implemented appropriate organisational and technical measures to protect personal data, including against accidental or unlawful destruction, loss, or alteration. We cannot guarantee that the security of your personal data will be maintained without error, nor can we accept liability for any intangible, incidental, or consequential damages arising from the use or disclosure of personal data. This includes, but is not limited to, personal data disclosed due to transmission errors, unauthorised third-party access, or other causes beyond our control.
Where legal or other obligations beyond our control require it, we may be required to disclose personal data to third parties, such as public authorities. We cannot control the level of security applied to your personal data by such third parties.
Personal data cannot be transmitted over the internet with complete security. We cannot guarantee the security of personal data you transmit to us via the internet.

11. Hyperlinks to Third-Party Websites

Our website contains links to third-party websites and applications. These sites and apps are not under the Company's supervision, and we are not responsible for how they collect or process personal data. This Policy does not apply to any actions taken through such sites or apps.
Before accessing or using any third-party website or application, we recommend reviewing their privacy policy. We also advise caution when providing any personal data to them.

12. Modifications to this Policy We may update this Policy from time to time. Any changes will be posted on this page, and where appropriate, communicated to you directly. Continued use of our services following any modification constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of any updates.

Before visiting any third-party website or app, read its privacy policy carefully. Only provide your personal data to third parties once you have reviewed and are comfortable with how it will be used.

13. Your rights with respect to your personal information You have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details provided in this policy. Right of access: You may request a copy of the personal data we hold about you and details of how we use it. Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may ask us to correct or complete it. Right to erasure: You may ask us to delete your personal data where there is no longer a legitimate reason for us to hold it. Note that we may be unable to fulfil this request if we are required to retain your data to comply with a legal obligation. Right to restrict processing: You may ask us to suspend processing of your personal data in certain circumstances — for example, if you contest its accuracy or object to us processing it. Right to data portability: Where processing is based on your consent or the performance of a contract, you may request that we provide your personal data to you in a structured, commonly used, machine-readable format, or ask us to transfer it directly to a third party. Right to object: Where processing is based on legitimate interests, you may object at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary to establish, exercise, or defend legal claims. Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. Right to lodge a complaint: You have the right to lodge a complaint with the relevant supervisory authority if you believe our processing of your personal data does not comply with applicable data protection law.

You have the right to request that we verify the accuracy of Personal Data held about you, correct any inaccuracies, and delete any Personal Data we are not required to retain. You may also restrict the types of processing applied to your Personal Data.
If you are a resident of the EEA, please refer to this page:
These rights apply to the Personal Data you provide to us. To exercise any of these rights, please submit your request in writing to the email address below.
Access rights
The Company can verify that Personal Data concerning you is being processed. If it is, you may access that Personal Data.
The Company will provide an electronic copy of the Personal Data currently being processed and may charge a reasonable fee for additional copies. Data will be provided electronically upon request.
The right to access Personal Data must not conflict with the rights and freedoms of others. If a request would be detrimental to another person's rights or freedoms, the Company may refuse or limit its response.
Right to rectification
You have the right to have inaccurate Personal Data corrected. You may also request that incomplete Personal Data be completed, taking into account the purpose for which it is processed.
Right to Erasure
This right applies where: (a) Personal Data are no longer necessary for the purpose for which they were collected or processed; (b) you withdraw consent and there is no other legal basis for processing; (c) you object to processing based on legitimate interests pursued by us or a third party; (e) Personal Data are processed unlawfully; or (f) Personal Data must be erased to comply with a legal obligation.
This right does not apply where processing is necessary: (a) to comply with a legal obligation under European Union or Member State law; or (b) to establish, exercise, or defend legal claims.
Processing restrictions
If you have concerns about the accuracy of your Personal Data, you may ask the Company to restrict its processing.
Where processing is restricted, Personal Data may only be stored unless you give consent, or where necessary to establish, exercise, or defend legal claims, to protect the rights of another person, or for reasons of substantial public interest within the European Union or a Member State.
Right to data portability
Where processing is carried out by automated means and is based on your consent or a contract to which you are party, you have the right to receive the Personal Data you have provided to the Company in a structured format.
You may request that your Personal Data be transferred directly to another controller where technically feasible. Exercising your right to data portability does not affect your right to erasure, and it does not adversely affect the rights or freedoms of others.
Right to object
You have the right to object at any time to the processing of Personal Data concerning you that is based on legitimate interests pursued by the Company or a third party, including profiling based on those interests. Where we cannot demonstrate compelling legitimate grounds for the processing that override your rights, interests, or freedoms, or where processing is not necessary for the establishment, exercise, or defence of legal claims, we will cease processing.
Regarding direct marketing, you have the right to object at any time to the processing of Personal Data concerning you for that purpose.
Right to withdraw consent
You may withdraw your consent to our processing of your Personal Data at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to that withdrawal.
You have the right to lodge a complaint with the relevant supervisory authority.
You may lodge a complaint with a supervisory authority established by a Member State to protect individuals' fundamental rights in relation to the processing of Personal Data within the European Union.
European Union and Member State law may limit the rights described in this section 13 as they apply to Personal Data concerning you.
We will respond to requests submitted under the rights set out in section 13 within one month of receipt. Where necessary, given the complexity or volume of requests, this period may be extended by up to two months. We will notify you of any such extension, and the reasons for it, within one month of receiving your request.
Unless otherwise provided under section 13, information provided in response to a valid request will be supplied free of charge. Where a request is manifestly unfounded or excessive, in particular where requests are repetitive, we may charge a reasonable fee to cover administrative costs, or decline to act.
Where we have reasonable doubts about the identity of the person making a request, we may ask for additional information to verify identity.