Privacy Policy

1. About This Policy

Welcome to Broking Bridge CRM. We are Broking Bridge Tech Ltd, a company registered in Mauritius, registration number [number]. In this policy, “we”, “us” and “our” mean Broking Bridge. We make software that helps forex and CFD brokers manage their customers.

This policy tells you what personal data we handle, why we handle it, and what choices you have. We follow the laws of Mauritius, mainly the Data Protection Act 2017 (the “DPA 2017”).

This policy is for:

• people who visit our website, brokingbridge.com;
• brokers, their admins and their staff who use our software (we call it the “Platform”);
• people whose details a broker saves in the Platform, such as traders, leads and introducing brokers (IBs).

If you are in the last group, please read Section 2. It explains who is in charge of your data.

2. Who Is in Charge of Your Data

It depends on whose data it is.

When we are in charge (controller). We decide how to use data about our own customers and website visitors.

When the broker is in charge. A broker saves data about its own clients and partners in the Platform. The broker decides how to use that data. We are only the helper (the “processor”). We use that data only to run the service for the broker, and we follow the broker’s instructions and our contract with it.

If you are a trader or IB of a broker, please contact that broker first about your account, trades or ID checks. We will help the broker answer you.

Registration. Broking Bridge is registered with the Data Protection Office of Mauritius. Registration number: [number].

3. What Data We Collect

Data you give us

• Your name, work email, phone number, job title and company name
• Your login details and settings
• Billing details, invoices and payment history
• Messages, support requests and notes from calls or demos

Data we collect on our own

• Your IP address, device, browser, operating system and language
• Pages you visit, features you use, times, and error reports
• Login history, security events and admin actions (we call these audit logs)

Data that comes from tools a broker turns on

• From trading platforms: account numbers, balances, orders and trade history
• From payment and ID check services: payment references and check results
• Records the broker saves or uploads, such as onboarding and compliance records

Extra care for ID documents and sensitive data. If a broker checks IDs, the documents and selfies go to the ID check service that the broker picks. That service follows the broker’s instructions. This data can be sensitive, for example face data. We keep access to it small. We use it only to run the ID check feature and for nothing else.

4. How We Use Your Data

We use data to:

• set up accounts and run the Platform;
• answer your questions and give support;
• stop fraud, misuse and break-ins;
• send invoices, take payments and keep our financial records;
• follow the laws and rules we must follow;
• see how features are used and make the product better (we use combined data that does not name you, when we can);
• tell you about updates, offers and events (see Section 11).

We do not sell personal data. We never use a broker’s client data for our own advertising, or for anything except serving that broker.

5. Why the Law Lets Us Use Your Data

The DPA 2017 says we must have a lawful reason to use your data. Our reasons are:

• Contract: we need your data to give you the Platform you signed up for.
• Our valid interests: we use data for security, fraud checks, support and product improvement. We first make sure this does not harm your rights.
• Legal duty: we must follow tax, accounting and anti-money-laundering rules, and answer lawful requests from authorities.
• Your consent: we ask for it for marketing messages and non-essential cookies. For sensitive data, we ask for consent separately and clearly.

For client data inside a broker’s workspace, the broker is in charge, so the broker picks the lawful reason.

6. Who We Share Data With

We share data only when we really need to. Everyone who gets it must sign a written promise to keep it private and protect it.

• Companies that help us run our service: hosting and storage, email and text messages, payments, support tools, and monitoring and analytics.
• Tools your broker chooses: trading platforms, ID and screening tools, payment gateways and messaging services. Data goes to them only if the broker turns them on. Their own privacy rules also apply.
• Professional advisers: lawyers, auditors and insurers.
• A new owner: if we merge with another company, are bought, or sell part of our business, data may go to the new owner. We will tell you first, and the same protection will continue.

You can see our list of helper companies (sub-processors) at [link], or ask us for it. We tell our broker customers [30] days before we add a new one, so they can raise any worries.

7. When the Law or the FSC Asks for Data

We may share data with courts, the Financial Services Commission, Mauritius (the “FSC”), the Financial Intelligence Unit, tax offices or the police if the law says we must, if we get a valid legal order, or if it is needed to stop fraud, financial crime or serious harm.

Many brokers on our Platform are licensed by the FSC. They may have to let the FSC see their records. We will help a broker with reasonable requests so it can meet those duties, including by giving records stored in the Platform.

We share only what is needed. When the law allows it, we tell the broker before we share its data.

8. Cookies

Cookies are small files a website saves on your device. Our website uses:

• Essential cookies: keep the site safe and working.
• Preference cookies: remember settings, like your language.
• Analytics cookies: help us see how the site is used.
• Marketing cookies: help us measure and improve our campaigns.

Only essential cookies are on by default. We use the others only if you say yes. You can change your choice at any time with “Cookie Settings” in the footer, or in your browser settings. If you block some cookies, parts of the site may not work well. For the name, purpose and life of each cookie, see our Cookie Policy.

Brokers control the cookies on their own client portals.

9. Keeping Your Data Safe

We use technical and organisational steps that fit the risk, as the DPA 2017 requires. These include:

• encryption when data moves and when it is stored;
• access by role, so each person sees only what they need;
• optional two-step login and IP limits;
• activity logs that show who did what;
• regular backups and security tests;
• a duty of secrecy for every team member who can see data.

No online service is 100% safe, and we cannot promise it.

If there is a data breach. If a breach affects a broker’s data, we tell that broker without delay, and within [48 hours] of confirming it. We give the broker the facts it needs to meet its own legal duties. These include telling the Data Protection Commissioner of Mauritius within 72 hours, and telling the people affected when the law requires it. For data where we are in charge, we will tell the Commissioner and the people affected as the law requires.

10. Where Your Data Is Stored

Our servers are in [country/region]. Some of our helper companies may handle data in other countries.

The DPA 2017 allows data to leave Mauritius only in certain cases. Depending on the case, we make sure that:

• the other country or company gives strong enough protection to your data; or
• we have a contract or other safeguards in place that protect your data; or
• the Data Protection Commissioner has approved the transfer, where this is needed; or
• you have given your clear consent, or another reason allowed by the DPA 2017 applies.

We also use technical protection like encryption. To ask about the safeguards we use, write to [email protected].

11. Marketing Messages

We send marketing messages only to business contacts who asked for them, or where the law allows. Every message has an unsubscribe link. You can also write to [email protected]. If you stop marketing messages, you will still get service messages, like security alerts, bills and important account news.

12. How Long We Keep Data

We keep personal data only as long as we need it, or as long as the law says.

• Our own account and billing records: while your account is active, and then for up to [X] years for tax, accounting and dispute reasons.
• Broker workspace data: for as long as the subscription lasts. After it ends, the broker has [30–90] days to export its data. Then we delete it. Backups are overwritten within [X] days.
• Records the law makes brokers keep: brokers often must keep ID check and transaction records for years after a client leaves. Under the Financial Intelligence and Anti-Money Laundering Act 2002 (FIAMLA), this is usually at least seven years. We do not override this. Each broker sets its own keeping rules in the Platform.
• Security logs: kept for [X] months, or longer if needed for an investigation.

13. Your Rights

Under the DPA 2017, you may have the right to:

• know how your data is used;
• see the data we hold about you;
• fix data that is wrong or incomplete;
• ask us to delete your data, if we are not required to keep it;
• ask us to limit how we use your data;
• object to some uses, such as direct marketing;
• not be judged only by a decision made by a computer, where the law gives you this right;
• get a copy of your data in a common format, where the law allows.

How to ask. Email [email protected]. We may ask you to prove who you are first. We answer within 30 days, or sooner if the law says so. If your data is in a broker’s workspace, we will pass your request to that broker. Sometimes the law lets us, or makes us, say no to a request. If that happens, we will tell you why.

14. Taking Back Your Consent

If we use your data because you said yes, you can say no later. Use Cookie Settings, the unsubscribe link in our emails, your account settings, or write to us. Taking back consent does not undo what we did with your data before that.

15. Complaints and Contacts

If you have a worry, please write to us first at [email protected]. We will try to fix it fast. You also have the right to complain to the Data Protection Commissioner.

Our Data Protection contact: [Name / role], [email protected], +230 5256 0374

16. Links to Other Websites

Our website and Platform may link to other sites and services. We do not control them, and we are not responsible for what they say or how they handle data. Please read their policies before you share anything.

17. Children

Broking Bridge is made for businesses. It is not for anyone under 18. We do not knowingly collect data about children. If you think a child’s data has reached us, please tell us and we will delete it.

18. Our Role and Your Broker’s Duties

Broking Bridge is a technology company. We are not a financial services provider. We do not hold client money, place trades or give investment advice.

Brokers who use our Platform must hold their own licences and follow the laws that apply to them. In Mauritius, these include the Financial Services Act 2007, the Securities Act 2005, FIAMLA, and the rules, codes and guides issued by the FSC. This covers ID checks (KYC), anti-money-laundering, stopping terror financing, sanctions checks, record keeping and reporting to the FSC.

We give brokers the tools. We do not make legal, suitability or eligibility decisions about any person. Nothing in the Platform or this policy is legal, tax or financial advice.

19. Changes to This Policy

When we change this policy, we will post the new version on this page with a new “Last updated” date. For big changes, we will also email account admins or show a notice in the Platform before the change starts. You can ask us for older versions.

20. Contact Us