1. Who We Are
Africa Legacy FX is the trading name of Africa Legacy FX Ltd (“the Company,” “we,” “us,” or “our”). We operate a regulated forex brokerage and investment platform serving clients across Africa and internationally. As a data controller, we are responsible for the personal data you provide to us when you use our website, open a trading account, or interact with our services.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, how long we retain it, and the rights you have in relation to your data. If you have any questions, please contact us at privacy@africalegacyfx.com.
2. Data We Collect
We collect the following categories of personal data:
- Identity Data: full name, date of birth, nationality, government-issued identification documents (passport, national ID, driver's licence).
- Contact Data: email address, telephone number, postal address, country of residence.
- Financial Data: bank account details, payment card information, source of funds declarations, financial statements, employment and income information collected as part of our Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance obligations.
- Trading Data: account history, trade records, positions, deposits, withdrawals, leverage settings, and related transactional records.
- Technical Data: IP address, browser type and version, device identifiers, operating system, time zone, pages visited, session duration, and other data collected via cookies and similar technologies.
- Communications Data: records of correspondence between you and Africa Legacy FX, including emails, live chat transcripts, and support tickets.
- Marketing Preferences: your preferences for receiving marketing communications from us and third parties.
3. How We Collect Your Data
We collect personal data through the following means:
- Directly from you when you register an account, complete our KYC process, make a deposit or withdrawal, contact our support team, or subscribe to our newsletter.
- Automatically through our website and trading platform via cookies, web beacons, and analytics tools when you browse our site or use our platform.
- From third parties such as identity verification providers, credit reference agencies, sanctions screening services, payment processors, and regulatory bodies as permitted by law.
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Performance of a Contract: To provide you with trading services, process transactions, manage your account, and fulfil our contractual obligations to you.
- Legal Obligation: To comply with applicable laws including AML, counter-terrorism financing (CTF), KYC regulations, tax reporting obligations, and regulatory requirements imposed by financial supervisory authorities.
- Legitimate Interests: To improve our services, detect and prevent fraud, ensure platform security, conduct marketing analytics, and manage business operations where these interests are not overridden by your rights.
- Consent: For sending direct marketing communications and placing non-essential cookies on your device, where required by law. You may withdraw consent at any time.
5. How We Use Your Data
Your personal data is used for the following purposes:
- Verifying your identity and assessing your suitability as a client in accordance with regulatory requirements.
- Opening, maintaining, and administering your trading account.
- Processing deposits, withdrawals, and other financial transactions.
- Providing customer support, responding to enquiries, and resolving disputes.
- Complying with AML, CTF, KYC, sanctions screening, and other regulatory obligations.
- Sending you important account notifications, service updates, and security alerts.
- Sending marketing communications about our products and services (where you have consented or we have a legitimate interest to do so).
- Improving our website, platform, and services through analytics and user research.
- Detecting, investigating, and preventing fraudulent transactions, unauthorised access, and other illegal activities.
- Complying with court orders, regulatory investigations, and other legal processes.
6. Data Sharing and Disclosure
We do not sell your personal data to third parties. We may share your data with:
- Regulatory Authorities: Financial services regulators, tax authorities, law enforcement agencies, and other public bodies as required by law.
- Service Providers: KYC/AML verification providers, payment processors, banking partners, IT and platform service providers, cloud hosting providers, and customer support tools — all bound by contractual data protection obligations.
- Liquidity Providers and Prime Brokers: To execute and hedge your trades in the normal course of business.
- Professional Advisers: Lawyers, auditors, insurers, and accountants under duties of confidentiality.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the relevant parties subject to equivalent privacy protections.
7. International Data Transfers
Some of our service providers and business partners are located outside your home country. Where we transfer your data internationally, we ensure that appropriate safeguards are in place — such as standard contractual clauses, adequacy decisions, or other approved transfer mechanisms — to ensure your data receives an equivalent level of protection as required under applicable law.
8. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, or reporting requirements. For clients who open a trading account, we are typically required to retain records for a minimum of five (5) to seven (7) years after the termination of the client relationship, in accordance with applicable financial regulation. Marketing data is retained until you opt out or withdraw consent. We will securely delete or anonymise your data once it is no longer required.
9. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right of Access: To request a copy of the personal data we hold about you.
- Right to Rectification: To request correction of inaccurate or incomplete data.
- Right to Erasure: To request deletion of your data in certain circumstances.
- Right to Restriction: To request that we limit processing of your data in certain circumstances.
- Right to Data Portability: To receive your data in a structured, machine-readable format.
- Right to Object: To object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time.
To exercise any of these rights, please contact privacy@africalegacyfx.com. We will respond within the timeframe required by applicable law, typically 30 days. We may need to verify your identity before processing your request.
10. Cookies
We use cookies and similar tracking technologies to improve your experience on our website and platform. For full details of the cookies we use, their purpose, and how to manage your cookie preferences, please see our Cookie Policy.
11. Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include encryption, firewalls, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by direct communication. Your continued use of our services after any changes constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact our Data Protection Officer at privacy@africalegacyfx.com. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.