Privacy Policy

Last updated: 29 September 2026

1. Introduction

Eight-Cap ("Eight-Cap", "we", "us" or "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains what information we collect when you visit our website, open an account or use our trading services, why we collect it, how we use and protect it, and the rights you have in relation to it.

By accessing our website or using our services you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use our services.

2. Information we collect

We collect only the information we need to provide our services, meet our legal obligations and improve your experience. This may include:

Identity data: full name, date of birth, nationality, government-issued identification numbers and copies of identity documents.
Contact data: residential address, email address and telephone number.
Financial data: employment status, income, source of funds and wealth, bank or card details and transaction history.
Suitability data: trading experience, knowledge of financial products and investment objectives, collected through our appropriateness assessment.
Technical data: IP address, device identifiers, browser type, operating system, login times and platform activity.
Communications: records of emails, chat messages and recorded telephone calls with our team.

3. How we collect information

We collect personal data directly from you when you complete our registration forms, upload verification documents, fund your account or contact us. We also collect data automatically through cookies and similar technologies when you use our website and platforms, and we may receive information from third parties such as identity verification services, credit reference agencies, payment processors and public sanctions databases.

4. How we use your information

We process your personal data for the following purposes:

To open, verify and administer your trading account.
To comply with anti-money-laundering, counter-terrorist-financing, sanctions and other regulatory requirements.
To assess whether our products are appropriate for you.
To process deposits, withdrawals and trading activity.
To provide customer support and respond to your enquiries.
To detect, prevent and investigate fraud, abuse and security incidents.
To send you service notices and, where you have consented, marketing communications.
To analyse and improve our website, platforms and services.

5. Legal bases for processing

We rely on one or more of the following legal bases: performance of a contract with you; compliance with legal and regulatory obligations; our legitimate interests in operating a secure and efficient business, provided those interests are not overridden by your rights; and your consent, which you may withdraw at any time where it is the basis we rely on.

We do not sell your personal data. We may share it, on a need-to-know basis and under appropriate confidentiality obligations, with:

Affiliated companies within our group that help us deliver our services.
Service providers such as identity verification, payment, hosting, IT, analytics and communications vendors.
Liquidity providers, banks and custodians involved in executing and settling your transactions.
Auditors, legal advisers and other professional consultants.
Regulators, law enforcement agencies, courts and government authorities where we are required or permitted by law to do so.

7. International transfers

Because we operate internationally, your data may be transferred to and processed in countries other than your own. Where this happens we put appropriate safeguards in place, such as contractual clauses approved by relevant authorities, to ensure your information receives an adequate level of protection.

8. Data security

We use technical and organisational measures designed to protect your personal data against unauthorised access, loss, misuse or alteration. These include encryption in transit and at rest, access controls based on role, network monitoring, staff training and regular security reviews. No method of transmission over the internet is completely secure, so while we work hard to protect your data we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential.

9. Data retention

We keep personal data only for as long as necessary for the purposes described in this Policy. Regulatory requirements usually oblige us to retain client records, including identification and transaction records, for at least five years after the end of our business relationship, and sometimes longer. When data is no longer needed, we delete or anonymise it securely.

10. Cookies

Our website uses cookies and similar technologies to operate essential functions, remember your preferences, understand how visitors use our pages and measure the effectiveness of our communications. You can manage non-essential cookies through your browser settings or our cookie banner. Disabling some cookies may affect how the website works.

11. Your rights

Subject to applicable law, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data where we have no legal reason to keep it.
Restrict or object to certain processing, including direct marketing.
Receive your data in a portable format.
Withdraw consent where processing is based on consent.
Lodge a complaint with a data protection authority.

To exercise any of these rights, email us at support@eight-cap.io. We may need to verify your identity before responding.

12. Marketing communications

Where you have agreed to receive marketing, we may send you information about our products, market commentary and events. You can opt out at any time using the unsubscribe link in any email or by contacting us. Opting out will not affect service or regulatory communications about your account.

13. Children

Our services are intended only for individuals aged 18 or over (or the age of majority in their jurisdiction, if higher). We do not knowingly collect personal data from minors.

14. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. The updated version will be posted on this page with a revised date. Where changes are significant, we will notify you by email or through your client area.

15. Contact us

If you have questions about this Policy or how we handle your data, contact our data protection team at support@eight-cap.io.