Privacy Policy

Your personal data and assets are our highest priority. We are fully committed to safeguarding them.

Astralux Finway collects and retains data essential to your trading activities. Our methods for collecting and storing this information are described in the Privacy Policy below.

We uphold our policy through these key principles:

• To provide complete transparency about our processes for collecting and storing your personal data:

Our goal is to ensure you understand how we collect and process your data so you can make informed decisions. We maintain clear guidelines and processes for handling data on this website. Our policy outlines the specific methods we use, giving you clear, concrete information on how your data is used. You are in the driver's seat.

We will provide timely updates whenever we determine you should be informed. Transparency is fundamental to how we operate.

Our experienced team is always available to answer any questions you may have about our processes, including our obligations under {country} law. You can contact us at: info@astraluxfinway.com

• We do not use personal data for any purposes beyond those set out in our Privacy Policy.

We may process personal data for the following purposes, including ensuring the proper operation of Astralux Finway services and connecting trader‑members with third‑party trading platforms. It may also be used to maintain and enhance website features and services, protect our rights, and meet regulatory or other legal obligations. Finally, where necessary, we use this data to support administrative and other business functions related to the Services provided to you, the client.

To provide better services that meet your preferences and needs, Astralux Finway may collect and use personal data.

• To enable the use of essential tools and measures to protect your personal data and safeguard your rights in this respect:

You may contact us at any time to access all personal data we hold about you. We can update or delete it upon request. We also support requests to transfer your data to you or to an authorised third party. These services help you exercise your rights to privacy and control.

• Safeguard your personal data:

Our security systems meet the highest standards, with bank‑grade safeguards. While a 100% guarantee is not possible, we are committed to continually upgrading our systems to the highest possible level and reinforcing the measures we have in place.

We maintain a detailed and comprehensive privacy policy and industry-leading security systems.

1. The Scope?

This policy sets out our procedures for the collection, processing, and sharing of personal data relating to natural persons.

Our policy applies to all natural persons who are identifiable or already identified. This includes any individual who can be, or has been, identified in connection with data entrusted to us or data we can access and/or combine.

As defined in the Privacy Policy, data processing refers specifically to the storage, management, and organisation of personal data.

We do not collect, or intend to collect, any information about individuals under the age of 18. We also do not allow anyone under the age of 18 to use our platform for any purpose. If we discover any user or any data relating to a person under the age of 18, we will delete that information immediately.

2. Which personal data do we retain?

When you register with us, we collect the personal data necessary to enable your use of our services. When necessary, we may also request additional personal data to verify account ownership, for example. To improve and maintain the highest quality of our services, we collect and analyse data about your use of our platform and those of our third-party partners.

3. You are under no obligation to provide the Company with your personal data.

While you are under no obligation to provide your data, choosing not to share it may result in limitations on the services we can offer. It may also result in restrictions on your use of our platform.

4. What personal data do we collect? When you visit our website, we may collect the following personal data:

We do not collect data that can be used to personally identify you. We do collect information such as your account activity, users’ IP addresses, and the date and time of access. For maintenance, security, and support services, we retain system crash reports, browser information, and the type of device used to access your account. We also record your account’s language preference.

Regarding personal data collection, we only collect and retain information you consent to provide when you connect, through us, to a third-party trading platform.

The personal data you provide to third-party platforms may include: your full name, address, telephone number, and email address.

5. Why does the company need my personal data, and is it lawful for them to collect it?

The collection, storage, and processing of your personal information by the Company are undertaken solely for the purposes set out in this Policy. All such use and processing are in compliance with applicable laws in {country}.

The company will only handle, process, or transmit your data in compliance with applicable laws in {country}. The legal bases for doing so are:

• You agree to permit the company to store and process your personal data. When you submit your data to the company, you authorise us to transfer that data to the relevant third-party trading platform. You have provided your consent for the processing of your personal data for one or more purposes.
• To improve services, pursue legitimate interests, and establish or defend legal claims, among other purposes, the company may need to store and process your personal data.
• Data processing is necessary to meet legal obligations.

If you would like to obtain further information about the data processing the company is required to perform, please contact us via email.

Below, you will find a list of the specific purposes for which we may process your personal data, along with the legal basis for each.

6. Disclosure of Personal Data to Third Parties

For purposes of storing and processing IP addresses, conducting user surveys and analyses, and providing other related services as necessary, the company may share anonymised personal data with third-party service providers.

At your request, we will share certain personal data you provide with third-party services. In such cases, the use of your data will be governed by the privacy policies of those providers. This may include multiple digital trading platforms.

To better serve our clients and enhance overall service quality, the company may share personal data with its affiliates and partner organisations.

Where required by law, or to protect the company’s rights and assets and those of our third-party partners, we may disclose data to relevant legal or regulatory authorities.

In the event of a significant business transaction—such as the sale of the company, pursuit of investment, or obtaining a loan—relevant data may be shared in a lawful and appropriate manner. This also applies to any company merger, restructuring, consolidation, or bankruptcy, in accordance with applicable law.

7. Use of Cookies and Third-Party Services

For site analytics, and in collaboration with advertising firms, we may, from time to time, use cookies and similar technologies across our services, in accordance with applicable laws and standard industry practices.

Cookies—small data files stored on your device when you visit a website—are used to collect information about your browsing behaviour, preferences, and more. Their purpose is to personalise and enhance your user experience. They allow us to remember your settings and preferences, and to tailor our service offerings accordingly. These cookies are also used for site analytics and for compiling statistics to support strategic planning.

Broadly, there are two types of cookies used on this site. Session cookies are stored only for the duration of your visit and are removed when you close your browser. The others are persistent cookies, which remain in your browser even after a session ends. These help the site recognise you as a returning visitor and make your experience smoother.

Types of cookies:

Cookies may be used as necessary, in line with their intended purposes:

Cookies are blocked or have been deleted

To delete or block cookies, use your browser settings. Follow the links below for step-by-step instructions for the most popular browsers.

• firefox
• Microsoft Edge
• Google Chrome
• safari

Blocking cookies will limit some functions and prevent parts of the site from working as expected.

ONLINE TRACKING NOTICE

Your personal data will be retained for as long as necessary to perform the operations described in this policy. It may be kept longer if required by applicable laws and regulations, or by our company policies.

At your request and discretion, we will share your personal data with third-party trading platforms for a period of 12 months. Upon the expiry of that 12-month period, and with your consent, we will share your data for an additional 12 months.

As part of our operations, we regularly review all personal data to determine whether it is still required.

9. Transfers of personal data to overseas jurisdictions or international organisations

When necessary to deliver our services and/or for security reasons, personal data may be transferred to third countries (countries other than your own) and international organisations using robust security measures. We apply industry-leading data protection standards to safeguard your information and ensure you retain access to legal remedies and rights in all circumstances.

Across the EEA (European Economic Area), all residents are protected by data privacy laws and safeguards.

• All data transfers are conducted under EU legal jurisdiction and competence, in accordance with the data protection standards set out in Article 45(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”)
• All data transfers between public entities or authorities are conducted in accordance with Article 46(2). This is a legally binding and enforceable agreement.
• The European Commission’s Standard Contractual Clauses (SCCs), adopted pursuant to Article 46(2)(c) of the GDPR, set the conditions for data transfers, and such transfers are carried out in accordance with them. The Clauses are available at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

For more information on the security measures the company implements to protect your personal data during third-country transfers, please email your request to info@wealthwaydigital.uk

10. Protection of Personal Data

Personal data is protected with the highest level of technical and organisational measures, following gold-standard procedures. These procedures provide robust safeguards to prevent unlawful or accidental destruction, as well as the loss or alteration of that data.

While we apply the highest level of care and follow gold‑standard data protection procedures as required by law, it is not possible to guarantee in all circumstances that your personal data will remain entirely error‑free. Accordingly, we cannot be held liable where personal data is disclosed, or for any incidental, intangible, or consequential loss or damage. This includes situations beyond our control, such as transmission errors, unauthorised third‑party access, or other similar causes.

If we receive a legally enforceable request from regulators or law enforcement agencies, we may be required to disclose your personal data to those authorities. Once disclosed pursuant to legal obligations, we cannot control how those authorities handle, store, or protect your data.

Anything transmitted over the internet, including personal information, carries a risk of interception and is not completely secure. The Company cannot guarantee the security of any data transmitted online.

11. Hyperlinks to third-party websites

On this website, you may encounter links to third-party applications and websites. Please note that these parties are not affiliated with, nor controlled by, our company, and our privacy policy does not apply to them. They have their own policies and practices for collecting and processing personal data, and we are not responsible for their activities. Use these links at your own discretion.

Always carefully review the privacy policy of any company or service on their website before providing any personal data. Ensure their data collection, use, and processing practices align with your preferences and priorities. Any personal data you choose to share should be provided directly to the service provider.

12. Policy Amendments

We reserve the right to update or amend this policy at any time. We will notify you of any changes through our website and other appropriate channels. The updated Privacy Policy will be posted on the website and will take effect immediately upon posting, unless stated otherwise.

13. Your rights to personal data

You have full control and the final say over how your personal data is used, including verifying its accuracy, correcting errors, and choosing to delete it or restrict the scope and nature of any processing by us.

On this page, EEA residents will find information relevant to them:

Your personal data is protected by the rights described herein. By sending an email to the address below, you may exercise those rights immediately.

Accessing Your Rights

If the personal data you have provided to us is accurate, you may access it at any time. Any of your personal data we process is accessible to us and therefore verifiable.

You may request your personal data for verification at any time, and we will provide it to you in electronic format. If you request additional copies of the data we process, beyond the initial copy, a reasonable fee may be charged.

Rights granted under applicable law and our Privacy Policy must not infringe the rights of others in any way. The company may refuse or limit access to personal data if providing access would infringe upon the rights and freedoms of others.

Right to Rectify Errors

Any inaccuracies in your personal data, whether due to omissions or incorrect details, may be corrected by you or by the Company to ensure it can be processed properly.

Erasure Rights

You have the right to request deletion of your personal data under the following circumstances: 1) If your personal data has been processed without your consent or beyond lawful limits. 2) If you request its removal and the Company has no legal requirement to retain it. 3) If you withdraw consent or object to any processing by us, even if lawful and within our legitimate interests or those of a third-party provider. 4) If we are required by law to delete your data.

The right to deletion is overridden and superseded by legal obligations under EU or any member state’s law. Similarly, this applies where data is required for the establishment, exercise, or defence of legal claims.

Right to Restrict Data Processing

You have the right to request that the processing of your personal data be restricted if you believe it is inaccurate.

Upon your request to restrict the use of your personal data, it will be deleted except in the following circumstances: 1) where EU or Member State law prevents deletion; 2) with your consent, where necessary to establish, exercise, or defend legal claims; 3) to protect the rights of another natural person.

Data Portability Rights

You have the right to access and review any personal data you have provided, if you have consented in any form to its collection and its processing is carried out by automated systems.

You have the right to request the transfer of some or all of your personal data to another company or organisation, where technically feasible. This does not affect your right to have your data deleted. This right cannot be exercised if doing so would infringe the rights or freedoms of another individual.

Right to object to data processing

Notwithstanding the Company’s right to pursue its legitimate interests, or those of a third-party service provider, you have the right to object to processing and request that it cease. This does not apply where there is a compelling legal basis to continue processing, including for the establishment, exercise, or defence of legal claims. In such cases, we may continue processing your personal data.

You may, at any time, request that your personal data not be processed for any direct marketing purposes.

Your Right to Withdraw or Decline Consent

You may withdraw your consent to our processing of your personal data at any time and, where feasible, with immediate effect. This will not affect any processing carried out before your consent was withdrawn.

If you are dissatisfied for any reason, you have the right to lodge a complaint with any legal, regulatory, or other supervisory authority.

If you believe your rights and freedoms have been violated in connection with the processing of your personal data, EU Member States have designated regulatory and supervisory authorities to address such matters. You may lodge a complaint with these authorities at your discretion.

Section 13 outlines circumstances where your personal data rights may be limited under European Union law or the laws of its Member States.

Once we receive your request concerning your personal data and its processing, we will provide you with access to the requested information, as outlined in Section 13 of this policy. We may extend this response period by up to two months, depending on the volume of requests and the nature of your request. If an extension is required, we will notify you of the new deadline within one month of receiving your request.

Requested information will be provided to you electronically at no charge, unless doing so would contravene the law or the provisions of Section 13. We reserve the right to charge a reasonable fee, or to decline a request, if it is considered spurious, excessive, or repetitive.

We may request additional proof of identity if we have reasonable doubt about the individual submitting a personal data request, to protect personal data and ensure security.