We hold what's needed to run your account and to meet our legal duties as a financial services firm: the details you gave us at sign-up, the result of your identity check, and your payment and trading records. Here is how that data is looked after, who can see it, how long we keep it, and what you can ask us to do with it.
What we hold
- Your account details: name, date of birth, address, country of residence, phone number and email address, as entered at sign-up and confirmed by the identity check.
- Your identity check: the result of the check and the details it confirmed. Your ID photos and selfie go to the verification provider, not to us (see below).
- Your payment details: the bank account or wallet you withdraw to, and the record of every deposit and withdrawal.
- Your trading record: every trade, with its prices and result, and the devices you've chosen to remember for sign-in.
How it's protected
Your data travels over encrypted connections and is held on systems with strict access controls. Only the small number of staff who need it for compliance or support can see it, and the records of closed accounts are restricted further still. We never sell your data or pass it to advertisers. It's shared only with the providers that need it to run the service, such as identity verification and payment processing, and where the law requires it.
Your ID documents
The identity check runs inside the secure tool of Sumsub, a specialist identity-verification company used by banks, payment firms and trading platforms around the world. Your ID photos and selfie are taken live on your phone and travel from your phone to Sumsub over an encrypted connection, never through email or chat. Sumsub holds the main independent security certifications for handling personal data, ISO 27001 and SOC 2 Type 2, encrypts data both in transit and at rest, and follows GDPR, the European data-protection standard. What comes back to us is the result of the check, together with the details needed to run your account.
The identity check inside the client area is the only place we ever ask for identity documents. If anyone contacts you by email, chat, LINE or phone asking for photos of your ID or a selfie, it isn't us. Don't reply, and let us know.
How long we keep it
We keep customer records for seven years, as anti-money-laundering rules require, and delete them after that. When you close your account, your records stay securely held with restricted access until that period has passed.
What you can ask us
- What we hold about you. Ask us through the chat and we'll tell you.
- To correct something. Your contact details can be changed in the client area. Your name, date of birth and address are tied to your identity check, so a change there means running the check again. See How to change your personal details.
- To delete your data. Once the seven-year retention period has passed, you can ask us to delete your records. Before then, we're required to keep them, but they stay restricted as described above.
Our full privacy policy is at my.zentrader.com/privacy.
Related: Why do you need to verify my identity? · How to verify your identity · How to change your personal details · How to close your account