Privacy Policy

How we collect, use, share and protect your personal data

Version 1.0 · Effective from 30 September 2026 · Forms part of the Client Agreement

Ranvol Ltd. · International Business Company · Registration No. 2026-00670 · Ground Floor, The Sotheby Building, Rodney Village, Rodney Bay, Gros-Islet, Saint Lucia · www.ranvol.com

In short
Who is responsible	Ranvol Ltd. is the controller of your personal data.
What we collect	Identity, contact, verification, financial, trading, device and usage data.
Why	To open and run your Account, to meet anti-money laundering, sanctions and tax obligations, to protect you and us from fraud, and, with your consent, for marketing.
Who receives it	Our technology, verification, payment and liquidity providers, the partner who introduced you (if any), and authorities where the law requires. We do not sell your data.
How long	At least seven years after our relationship ends, because anti-money laundering law requires it.
Your rights	Access, correction, deletion where the law allows, objection, restriction, portability and withdrawal of consent. Write to compliance@ranvol.com.

1. About this Policy

1.1 This Privacy Policy explains how Ranvol Ltd. ("Ranvol", "we", "us") processes personal data of visitors to www.ranvol.com, applicants, clients, and representatives of corporate clients and partners, when they use our website, client area and Trading Platform (together, the "Services"). Other applications operated under the Ranvol name may have their own privacy notices, which apply to them.

1.2 Ranvol Ltd., an International Business Company incorporated in Saint Lucia (Registration No. 2026-00670), with its registered office at Ground Floor, The Sotheby Building, Rodney Village, Rodney Bay, Gros-Islet, Saint Lucia, is the controller of your personal data. Questions and requests: compliance@ranvol.com.

1.3 We process personal data in accordance with the data protection laws that apply to us. Whatever country you live in, we give every client the rights described in section 8.

2. Data we collect

Category	Examples	Source
Identity	Full name, date and place of birth, citizenships, photo, identity document details and images, liveness-check images	You; our verification provider
Contact	Residential address, email, phone number	You
Verification and compliance	Proof of address, results of identity, sanctions, PEP and adverse-media screening, risk rating, source-of-funds and source-of-wealth documents	You; verification and screening providers; public sources
Financial and tax	Occupation, employer, income and funds information, tax residence and taxpayer identification number, bank, card (masked) and wallet details	You; payment providers
Account and trading	Account numbers, balances, deposits and withdrawals, orders, positions, trading history, communications with us	Generated by your use of the Services
Technical	IP address, device and browser data, geolocation derived from IP, login times, cookie identifiers	Your device; see our Cookie Policy
Marketing	Your marketing preferences, the partner or campaign that referred you	You; partners

2.1 We do not intentionally collect data about persons under 18. Identity documents may show information such as nationality; we use it only for the purposes in section 3.

2.2 If you give us personal data about another person, for example a director or beneficial owner of a corporate client, you must make sure they are aware of this Policy.

3. Why we use your data

Purpose	Legal basis
Assessing your application, opening and operating your Account, executing your orders, processing deposits and withdrawals, providing support	Performance of our contract with you
Identity verification, anti-money laundering and counter-terrorist financing checks, sanctions screening, record keeping, reporting to the Financial Intelligence Authority, tax reporting (including under the Common Reporting Standard)	Legal obligation
Preventing fraud and abusive trading, securing the Services, managing our risk, enforcing our agreements, defending legal claims	Our legitimate interests
Improving the Services and analysing how they are used	Our legitimate interests; consent where required for cookies
Sending marketing about our products and promotions	Your consent, which you can withdraw at any time

3.1 If you do not provide the data we need for verification or to meet our legal obligations, we cannot open or continue your Account.

4. Automated decisions

4.1 Identity checks, document checks and sanctions screening are performed partly by automated systems, and we assign each client a risk rating using set criteria. An application may be declined or referred for review as a result. If an automated check affects you, you may ask for it to be reviewed by a member of our compliance team at compliance@ranvol.com.

5. Who we share your data with

We share personal data only as necessary for the purposes in section 3, with:

• Trading platform and technology providers — the licensor and host of our Trading Platform, client area and back office, including Match-Trade Technologies, acting on our instructions.
• Identity verification and screening providers — to verify documents, perform liveness checks and screen against sanctions, PEP and adverse-media lists.
• Payment providers and banks — to process deposits and withdrawals, including our cryptocurrency payment provider and blockchain analytics providers.
• Liquidity providers — where needed to hedge transactions, resolve trade disputes or answer their anti-money laundering enquiries.
• Market-data and analytics providers — only the data needed to deliver features you choose to use.
• Introducing brokers and affiliates — the partner who referred you receives information needed to calculate their remuneration, such as your account status and trading volume.
• Professional advisers and service providers — lawyers, auditors, accountants, corporate service providers, email and hosting providers, under confidentiality obligations.
• Authorities — the Financial Intelligence Authority and tax authority of Saint Lucia, law-enforcement authorities, courts and other public bodies where the law requires or permits.
• A successor — a buyer of, or successor to, our business, subject to this Policy.

5.1 Providers acting on our behalf may use your data only for the services they provide to us. We do not sell your personal data.

6. International transfers

6.1 We and our providers operate in several countries, and your data may be stored or processed outside the country where you live, including in countries whose data protection laws are less protective than yours. When we transfer data, we use contractual commitments from the recipient to protect it.

7. How long we keep your data

7.1 We keep identification, verification, account and transaction records for at least seven years after our relationship ends or the transaction is completed, whichever is later, because anti-money laundering law requires it. We may keep data longer where needed for a legal claim, investigation or request of an authority. Data of applicants who do not become clients is kept for the same period where checks were performed, and otherwise deleted within 12 months. Marketing data is kept until you withdraw consent.

8. Your rights

You have the right to:

• be informed about how we use your data (this Policy);
• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data deleted, unless we are required to keep it, for example under anti-money laundering law;
• object to processing based on our legitimate interests, and to direct marketing at any time;
• ask us to restrict processing while a complaint about your data is resolved;
• receive data you have provided to us in a commonly used electronic format;
• withdraw consent at any time, without affecting processing already carried out;
• ask for human review of an automated decision (section 4).

8.1 Send requests to compliance@ranvol.com from your registered email address. We may ask you to confirm your identity. We respond within 30 days, free of charge, unless a request is clearly unfounded or excessive. Some rights are limited by law: in particular, we cannot delete records we must keep, and we cannot tell you about information relating to a report to the authorities.

8.2 If you are not satisfied with our response, you may complain under our Complaints Procedure and, where one applies to you, to the data protection authority of the country where you live.

9. Security

9.1 We protect personal data with technical and organisational measures appropriate to the risk, including encrypted connections, access controls limited to staff who need the data, and contractual security obligations for our providers. No system is completely secure. Protect your login credentials and tell us immediately at support@ranvol.com if you suspect unauthorised access. If a breach is likely to put you at high risk, we will tell you without undue delay.

10. Marketing

10.1 We send marketing only with your consent. You can withdraw it at any time through the unsubscribe link in any marketing email, in your client area, or by writing to support@ranvol.com. We will still send you service messages about your Account.

11. Changes to this Policy

11.1 We may update this Policy. We publish the current version on our website with its effective date and tell you by email or in the client area about material changes.

12. Contact

12.1 Ranvol Ltd., Ground Floor, The Sotheby Building, Rodney Village, Rodney Bay, Gros-Islet, Saint Lucia. Email: compliance@ranvol.com.

Ranvol Ltd. · compliance@ranvol.com · support@ranvol.com · legal@ranvol.com · www.ranvol.com