Document / PRV-19

Privacy Policy

This policy explains what personal data Matrix Edge collects, why we collect it, the bases we rely on, how long we keep it, who receives it, and the rights you hold over it. It is written in full, as a working document, not as a summary. Where a topic is covered in more depth elsewhere, such as identity verification, this page links to it rather than repeating it.

1. Definitions

Personal data means information relating to an identified or identifiable person, such as your name, email address, phone number, or a document image. Processing means any operation performed on that data, including collection, storage, consultation and deletion. The controller decides why and how data is processed; a processor handles data on the controller's instructions. You, the reader, are the data subject; Matrix Edge, operated under the trading name on our About page, is the controller for the data described here.

2. Personal data we collect

For registration we collect your first name, last name, email address and phone number. For account operation we add authentication details, device and session information, and your communication preferences. For identity verification under our AML / KYC procedures we collect the identity and address documents described there. For payments we process the details necessary to route deposits and withdrawals through the selected provider. For support we keep the content of the requests you send us. We do not collect special-category data beyond what verification lawfully requires.

3. Usage data

When you use the site, standard technical information is recorded: pages requested, approximate location derived from IP address at country level, browser type, device category, and timestamps. This usage data keeps the service secure, helps diagnose faults, and shows which pages need work. It is retained in aggregate form for service improvement and in raw form only for the operational window described in section 8.

4. Cookies

The platform uses a small number of cookies: strictly necessary ones that keep you signed in and maintain security tokens, functional ones that remember interface preferences, and, where enabled by the SEO team, an analytics cookie covered in section 14. Marketing cookies are set only with your consent where consent mechanisms apply. You can clear or block cookies in your browser at any time; doing so affects sign-in persistence but not your right to use the service.

5. Operator and processors

Matrix Edge is the operator, and controller, of the data described in this policy. Certain processing is performed by contracted processors: identity verification providers that check documents, hosting and IT providers that run the encrypted storage, email delivery services, and payment providers acting in their own capacity for the transactions you instruct. Every processor operates under written instructions and contractual confidentiality, and each receives only the data its function requires.

6. Collection and use of information

We use your data to: create and operate your account; verify your identity as required; execute and record deposits, trading activity and withdrawals; send service communications and, with consent, marketing; secure the platform and investigate incidents; meet legal obligations including record-keeping and reporting; and improve the service. Each purpose maps to the categories in section 2 and to a legal basis in section 7. We do not use your data for automated decision-making with legal effect, and we do not build advertising profiles from your trading behaviour.

7. Legal bases for processing

Processing rests on: performance of a contract, for the data needed to provide the account and services you request; compliance with legal obligations, for verification, record-keeping and reporting under applicable AML and tax requirements; legitimate interests, for security monitoring, fraud prevention and service improvement, balanced against your expectations and rights; and consent, for marketing communications and any optional cookies that are not strictly necessary. Where processing rests on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

8. Storage periods

Registration and account data are kept for the life of the account and for up to five years after closure, where the applicable requirements of the Trinidad and Tobago framework call for such retention of client records. Verification records follow the retention period described in section 12 of our AML / KYC policy. Support correspondence is kept for two years after the last message. Usage data in raw form is kept for twelve months, after which only aggregates remain. Payment records follow the provider's own statutory schedule. When a retention period ends, data is deleted or anonymised.

9. Transfer of data

Your data is stored on infrastructure within jurisdictions approved for our processing, and where a transfer crosses borders it is protected by contractual clauses and the safeguards required by applicable data protection law. Identity verification providers and payment processors may operate international infrastructure; those transfers are covered by the same instructions-and-confidentiality framework described in section 5. We do not transfer data to parties with no role in providing the service.

10. Disclosure of data

Data is disclosed only to: processors performing the functions above; affiliated companies involved in providing the service; regulators, courts and other competent authorities where disclosure is required by law; and professional advisers under confidentiality. We do not sell personal data, and we do not disclose it for third-party advertising. In an acquisition or restructuring, records would transfer with the service under the protections of this policy, with notice to you where the law requires it.

11. Security of data

Technical and organisational measures protect your data: encryption in transit and for stored records, salted hashing of passwords, role-limited access to client files with logged review, session controls, and the incident procedures described on the Security page. No system is perfectly secure, so the measures are layered and monitored, and any breach affecting your data is notified to you and to the competent authority as the applicable law requires.

12. Your rights as a data subject

You have the right to access the personal data we hold about you; to have inaccurate data corrected; to have data erased where no longer necessary for the purposes or retention periods it was collected under; to restrict processing while a dispute over accuracy is resolved; to object to processing based on legitimate interests, including profiling within it; to receive your data in a portable format; and to withdraw consent for consent-based processing at any time. Requests go to [email protected] and are answered within the statutory period. Verification of your identity before disclosure protects you, and rights affecting legal-record retention, such as verification files within their required window, are limited to what the law allows.

13. Service providers

The main provider categories, and what each sees: identity verification providers see the document images and data needed to verify them; hosting providers see encrypted stores and system logs; email delivery services see addresses and message metadata for messages they carry; analytics and chart-feed providers see the technical parameters described in sections 3 and 14. Each is bound by contract to process only on our instructions and to notify us of any breach affecting your data.

14. Analytics

The site carries a standard analytics slot, Google Analytics, which remains inert until the site operator configures an identifier. When active, it records page views, referral sources and device categories to improve the site. Analytics data is used in aggregate, is not combined with your trading data, and you may block it via browser settings or the consent mechanism where presented. Internal platform analytics, dashboards and monitoring, are separate and serve operation and security rather than marketing.

15. Advertising and retargeting

We do not run retargeting pixels on the platform dashboard or on account pages. If marketing campaigns elsewhere use retargeting through advertising networks, those networks set their own cookies on the advertised pages, not here, and the consent choices available there are governed by their notices. Within our own communications, marketing emails follow the consent and unsubscribe rules in section 3 of the Terms of Use.

16. Links to third-party sites

Our pages link to external resources such as payment providers and public institutions. Once you follow a link, your data is handled under that destination's own policy, which we encourage you to read. This policy covers the Matrix Edge site and services only, and linking does not make us responsible for external practices.

17. Children's privacy

The service is offered only to users aged eighteen and over, and we do not knowingly collect data from children. Registration includes a confirmation of age, and if we learn that an account was opened by a minor, it is closed and the associated data is deleted beyond what retention law requires for the closure record itself.

18. Changes to this policy

This policy may be updated to reflect changes in the service or in applicable law. The current version is always published on this page with its revision effective from publication, and material changes affecting how your data is used are additionally notified to registered users by email. Continuing to use the service after publication constitutes acceptance of the updated policy.

19. Contact us

Privacy questions, data subject requests, and complaints about data handling go to [email protected], for the attention of the Client Support and Compliance team. Postal correspondence is accepted at Level 8, Alexandra Court, 62 Charlotte Street, Port of Spain, Trinidad and Tobago. If a data protection matter cannot be resolved with us, you retain the right to complain to the supervisory authority competent for Trinidad and Tobago.