Privacy Policy

Yellow Box Markets Ltd. ("Company", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our trading services. By using our services, you consent to the data practices described in this policy. If you do not agree with any part of this policy, please do not use our services.

Yellow Box Markets Ltd. is the data controller responsible for your personal data. We are registered in Saint Lucia with registration number 2025-00712. If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at privacy@yellowboxmarkets.com.

We collect information you provide directly to us: • Personal identification: Full name, date of birth, nationality, government-issued ID • Contact information: Email address, phone number, residential address • Financial information: Bank account details, payment card information, source of funds • Trading information: Account activity, transaction history, trading preferences • Technical information: IP address, browser type, device information, cookies • Communication records: Customer support inquiries, feedback, correspondence

We collect information through various methods: • Account registration and verification processes • Trading platform usage and transactions • Customer support interactions • Website cookies and tracking technologies • Third-party verification services • Marketing communications and surveys

We process your personal data based on the following legal grounds: • Contract Performance: To provide our trading services and fulfill our contractual obligations • Legal Compliance: To comply with anti-money laundering, KYC, and other regulatory requirements • Legitimate Interests: For fraud prevention, security, and service improvement • Consent: For marketing communications and non-essential cookies

We use your information for the following purposes: • Account creation, verification, and management • Processing deposits, withdrawals, and trading transactions • Providing customer support and responding to inquiries • Complying with legal and regulatory obligations • Fraud prevention and security monitoring • Improving our services and user experience • Sending important account notifications • Marketing communications (with your consent)

We may share your information with: • Payment processors and banking partners for transaction processing • Identity verification and fraud prevention services • Regulatory authorities as required by law • Professional advisors (lawyers, accountants, auditors) • Affiliated companies within our corporate group • Service providers who assist in our operations We do not sell your personal information to third parties.

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws. When we transfer data internationally, we implement appropriate contractual and security measures to ensure your information receives adequate protection.

We retain your personal data for as long as necessary to: • Provide our services and maintain your account • Comply with legal and regulatory requirements (typically 5-7 years after account closure) • Resolve disputes and enforce our agreements • Maintain business records for legitimate purposes After the retention period, we securely delete or anonymize your data.

We implement industry-standard security measures to protect your information: • SSL/TLS encryption for data transmission • Secure data storage with access controls • Regular security assessments and updates • Employee training on data protection • Incident response procedures While we strive to protect your data, no method of transmission or storage is 100% secure.

Depending on your jurisdiction, you may have the following rights: • Access: Request a copy of your personal data • Rectification: Request correction of inaccurate data • Erasure: Request deletion of your data (subject to legal obligations) • Restriction: Request limited processing of your data • Portability: Request transfer of your data to another provider • Objection: Object to certain processing activities • Withdraw Consent: Withdraw previously given consent To exercise these rights, please contact us at privacy@yellowboxmarkets.com.

For privacy-related inquiries or to exercise your data protection rights: Email: privacy@yellowboxmarkets.com Yellow Box Markets Ltd. Ground Floor, The Sotheby Building Rodney Village, Rodney Bay, Gros-Islet Saint Lucia We will respond to your request within 30 days.