Privacy Policy

Welcome to WhitePips (“WhitePips”, “Company”, “we”, “our”, or “us”).

WhitePips is committed to protecting your privacy and handling your personal information in a transparent, secure, and responsible manner.

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you:

1. visit our website;
2. create an account;
3. purchase one of our products or services;
4. participate in any trading evaluation or instant funding program;
5. join our affiliate or partnership program;
6. contact our customer support team;
7. subscribe to our newsletters or marketing communications; or
8. interact with our platform in any other way.

We understand that privacy is important to our customers. For this reason, we are committed to processing personal information in accordance with applicable privacy and data protection laws, including, where applicable, the General Data Protection Regulation (GDPR), UK GDPR, UAE Personal Data Protection Law (PDPL), California Consumer Privacy Act (CCPA), the laws of Saint Lucia, and other applicable privacy legislation.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy applies to all personal information collected by WhitePips through:

• www.whitepips.com
• Customer Dashboard
• Trading Dashboard
• Client Portal
• Mobile applications (where available)
• Customer Support
• Email communications
• Live Chat
• Affiliate Portal
• Marketing campaigns
• Social media interactions
• Surveys
• Promotions
• Events
• Any future products or services operated by WhitePips

This Privacy Policy applies regardless of whether you access our Services using:

• Desktop computers
• Mobile devices
• Tablets
• APIs
• Other supported technologies

This Privacy Policy does not apply to third-party websites that may be linked from our Services. Those websites operate under their own privacy policies, and WhitePips is not responsible for their privacy practices.

Trading Platforms, payment providers and banks. When you use MetaTrader 5, Volumetrica, a hosted checkout, a bank or a crypto wallet, the provider may also collect personal data under its own privacy policy, as a controller in its own right, for example to run its software, meet its own legal obligations or process your payment. This Privacy Policy covers what WhitePips does with the data it collects or receives.

Selfie and liveness checks involve processing images of your face, and our verification provider may create a biometric template to compare your face with the photograph on your identification document.

Where the law treats this as biometric or special category data, we process it only to verify your identity and prevent fraud, with your explicit consent or where the law otherwise permits, and we require our provider to keep it no longer than needed for the check and for legal record-keeping.

Newsletter. If you sign up for updates, we store your email address, the date and the page you signed up on, so that we can send you news about plans and payouts and prove your consent. Every email has an unsubscribe link.

Contact form. If you use the contact form, we store your name, email address, the topic and your message, so that we can reply and keep a record of the conversation.

Spam protection. To stop automated abuse, we check how quickly a form was completed and limit how many messages can be sent from one network. For this we keep a one-way hash of your network address for no longer than 24 hours; we do not store the address itself.

Do not give us personal data about anyone else, for example in a support message or a referral, unless you are entitled to share it and they know you are doing so.

Some information is needed to provide the Services or to meet our legal obligations. If you do not provide it, we may be unable to open your Account, issue a Trading Account, complete verification, or pay a payout.

WhitePips uses a small number of cookies and similar technologies, such as local storage, to run the Website and dashboard securely and, only with your consent, to measure how they are used. That measurement is our own first-party counter (its one cookie, wp_src, records which campaign or website brought you) together with Microsoft Clarity, provided by Microsoft Corporation, which sets its own cookies and records masked heatmaps and session replays: it captures layout, cursor, clicks and scrolling, and it is masked so that it does not capture what you type or, in the dashboard, what is on your screen. Microsoft processes that data on our behalf, and nothing is shared with it unless you accept analytics. Only if you also accept Advertising, a separate choice in the cookie banner, the website and the dashboard load the Meta Pixel, which tells Meta Platforms when you view a page, open an account, start a checkout or complete a purchase, so we can measure and improve our ads on Facebook and Instagram; without that consent we use no advertising cookies, retargeting pixels or cross-site tracking.

Cookie Policy. The full list of what we store, why, for how long, the third parties involved and how to change your choice is in our Cookie Policy. You can change your choice at any time with Cookie settings in the footer of every page.

We may also process personal data where it is necessary to establish, exercise or defend legal claims, including disputes about payouts, refunds and chargebacks.

To take payments, checkout payment data is shared with the payment provider that processes it. At the date of this policy, checkout payments are handled through a hosted checkout provided by UniPayment, which may process card, cryptocurrency and other payment methods.

To pay a payout by bank transfer, we share the account holder name, bank account details, payout amount and reference with our payout provider, our bank, and the intermediary, correspondent and receiving banks involved in the transfer. Banks may carry out their own sanctions and anti-money laundering screening and may ask us for more information about you or the payment.

To pay a payout in cryptocurrency, we share the wallet address, network and amount with the provider that sends the transfer.

To issue your credentials and run your Trading Accounts, we share the data needed, such as your name, email address, country and account identifiers, with the providers of MetaTrader 5 and Volumetrica and, where needed for data licensing, with dxFeed, and we receive your trading records from them.

We share identity documents, images and details with identity verification, sanctions screening, fraud prevention and blockchain analytics providers so they can carry out checks for us.

We may share information with our lawyers, accountants, auditors and insurers where needed for advice, audits, insurance and legal claims, under a duty of confidentiality.

Information may be shared with carefully selected business partners where necessary to deliver a product or service requested by you. Partners who referred you may receive limited attribution information, such as the fact that a referred customer made a purchase, but not your documents or trading data.

We may share your information where you have expressly authorized us to do so.

Cryptocurrency transfers are recorded on public blockchains. The receiving address, amount and time of a crypto payout, or of a crypto payment you make, can be seen by anyone and cannot be changed or deleted by WhitePips.

WhitePips may operate internationally.

As a result, your personal information may be transferred to and processed in countries outside your country of residence, including Saint Lucia and the countries where our service providers, banks and Trading Platform providers operate.

Where required by applicable law, WhitePips will implement appropriate safeguards to protect transferred personal information. These safeguards may include:

• Standard contractual clauses, including the UK addendum where UK law applies
• Transfers to countries recognised as providing adequate protection
• Contractual confidentiality obligations
• Appropriate technical security measures
• Organizational safeguards
• Other legally recognized transfer mechanisms

A copy of the safeguards. You may ask us for information about the safeguards that apply to a transfer by writing to [email protected].

WhitePips takes information security seriously.

We implement commercially reasonable administrative, technical, and organizational measures designed to protect personal information against:

• Unauthorized access
• Unauthorized disclosure
• Accidental destruction
• Data loss
• Alteration
• Misuse
• Cybersecurity threats

Security measures may include:

• Encryption
• Access controls
• Multi-factor authentication
• Firewalls
• Intrusion monitoring
• Security logging
• Secure cloud infrastructure
• Employee confidentiality obligations
• Regular security assessments
• Incident response procedures

While we strive to protect your information, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

Accordingly, WhitePips cannot guarantee absolute security, although we continuously work to maintain industry-appropriate safeguards.

Your part. Keep your password secret and unique, secure your devices and email account, and tell us at once at [email protected] if you think your Account has been accessed without permission. We will never ask for your password by email or chat.

WhitePips retains personal information only for as long as it is reasonably necessary to:

1. provide and maintain our Services;
2. manage your account and customer relationship;
3. process transactions and payouts;
4. conduct identity verification and compliance checks;
5. resolve disputes and enforce our agreements;
6. detect and prevent fraud, abuse, and unauthorized activity;
7. meet legal, accounting, tax, regulatory, and recordkeeping obligations; and
8. protect our legal rights and legitimate business interests.

The length of time we retain information depends on the nature of the information, the purpose for which it was collected, and applicable legal requirements.

When personal information is no longer required, we will take reasonable steps to securely delete, anonymize, or otherwise dispose of it in accordance with our internal retention procedures and applicable law.

Certain records may be retained for longer periods where required or permitted by law, including records relating to identity verification, financial transactions, compliance obligations, fraud investigations, dispute resolution, and legal proceedings.

Retention by category. The following table explains how the principles above apply to the main categories of data:

Depending on your country of residence and applicable law, you may have certain rights regarding your personal information.

These rights may include the right to:

1. request access to the personal information we hold about you;
2. request correction of inaccurate or incomplete personal information;
3. request deletion of your personal information where legally permissible;
4. request restriction of processing in certain circumstances;
5. object to certain types of processing;
6. request portability of your personal information where technically feasible;
7. withdraw consent where processing is based solely on your consent; and
8. lodge a complaint with a competent supervisory authority or data protection regulator.

The availability of these rights depends on the laws applicable to your jurisdiction and may be subject to legal limitations and exceptions.

To exercise your rights, you may contact WhitePips at [email protected]. We may request additional information to verify your identity before processing your request.

You may request confirmation of whether WhitePips processes your personal information and, where applicable, request access to such information together with certain supplementary details required by law.

If you believe any personal information we hold is inaccurate, incomplete, or outdated, you may request that we correct or update the information.

You are also responsible for keeping your account information accurate and current, including your bank account and wallet details for payouts.

Subject to applicable law, you may request that we delete your personal information.

Please note that we may retain certain information where necessary to:

1. comply with legal obligations;
2. complete contractual obligations;
3. prevent fraud;
4. resolve disputes;
5. enforce our legal rights; or
6. maintain required business records.

Where permitted by law, you may request that we temporarily restrict certain processing activities while we assess a request relating to your personal information.

Where applicable, you may object to processing carried out on the basis of our legitimate interests or for direct marketing purposes.

If you object to direct marketing communications, we will stop sending such communications, although we may continue to send essential service-related notifications.

Where legally applicable, you may request a copy of certain personal information you have provided to us in a structured, commonly used, and machine-readable format, or request that we transfer such information to another organization where technically feasible.

Where we rely on your consent, you may withdraw it at any time, for example by using the unsubscribe link in an email, changing your cookie settings, or writing to us. Withdrawal does not affect processing that took place before it.

Where a decision based solely on automated processing has a legal or similarly significant effect on you, you may ask for a person to review it, give your point of view and contest it, as explained in section 17 (Automated decision-making).

You may complain to the data protection authority in the country where you live or work, or where you think the law was broken. We would be grateful for the chance to resolve your concern first, so please contact us at [email protected].

Sending a request. Write to [email protected] from the email address registered to your Account, say which right you want to use, and give enough detail for us to find the data concerned.

Verification. We will verify your identity before acting, and may ask for more information to do so. Someone acting for you must show that they are authorised.

Cost. Requests are free. Where a request is clearly unfounded or excessive, we may charge a reasonable fee or refuse it, as the law allows.

Limits. We may be unable to meet a request in full where the law requires us to keep data, where doing so would affect other people’s rights, or where it would prejudice the prevention or investigation of fraud or a legal claim. If so, we will explain why unless the law prevents us.

Where permitted by applicable law, WhitePips may send you marketing communications relating to:

• New products and services
• Platform updates
• Promotions and special offers
• Educational content
• Newsletters
• Events and webinars
• Partner opportunities

You may opt out of receiving marketing communications at any time by:

1. using the unsubscribe link included in our emails;
2. updating your communication preferences within your account (where available); or
3. contacting our support team.

Please note that opting out of marketing communications will not affect transactional or service-related communications, including account notifications, security alerts, compliance requests, or updates relating to products you have purchased.

WhitePips’s Services are intended solely for individuals who are at least eighteen (18) years of age or the legal age required to use our Services in their jurisdiction.

We do not knowingly collect personal information from children or minors.

If we become aware that personal information has been collected from an individual who does not meet the applicable age requirement, we will take reasonable steps to delete such information unless retention is required by law.

If you believe that a child has provided us with personal information, please contact us promptly.

Our Services may contain links to third-party websites, applications, or services operated by organizations that are not controlled by WhitePips.

This Privacy Policy applies only to WhitePips’s Services.

We are not responsible for the privacy practices, security, content, or policies of third-party websites or services.

We encourage you to review the privacy policies of any third-party website you visit before providing personal information.

WhitePips may use automated systems to support operational processes, including fraud detection, account security, risk management, identity verification, and platform integrity.

Where we use automation. Automated systems are used, in particular, to:

1. measure Trading Accounts against their published loss limits and drawdown, and record a breach when a limit is exceeded;
2. close the open positions of a CFD Trading Account that does not hold the Weekend Holding add-on at the Friday weekend deadline, record a Weekend Holding warning the first time and close the Trading Account the second time, as described in the Trading Rules;
3. detect patterns that may indicate prohibited trading, automated trading where it is not permitted, multiple Accounts or location masking;
4. score transactions, payouts, bank accounts and wallets for fraud and sanctions risk; and
5. check identity documents and compare selfies with them.

How they work. A breach of a loss limit is an objective measurement against the figures in the Plan Specification. So is the weekend close: it depends only on whether positions are open at the deadline on a Trading Account without the Weekend Holding add-on. Other automated results, such as a fraud or prohibited-trading flag, are normally reviewed by a person before an account is closed or a payout is refused.

Where legally required, decisions that produce legal or similarly significant effects will be subject to appropriate safeguards, including the possibility of requesting human review where applicable.

Asking for a review. You may ask for a person to review an automated decision by writing to [email protected]. For a breach of a loss limit, the review checks whether the measurement was correct; it does not waive the rule.

Automated systems are used to assist our operations and are regularly monitored to improve accuracy, consistency, and security.

In the event of a suspected or confirmed security incident affecting personal information, WhitePips will take appropriate steps to:

1. investigate the incident;
2. contain and mitigate any impact;
3. restore affected systems where appropriate;
4. assess legal reporting obligations; and
5. notify affected individuals or regulatory authorities where required by applicable law.

Notification. Where the law requires it, we will notify the competent authority without undue delay and, under the GDPR or UK GDPR, within 72 hours of becoming aware of a notifiable breach. We will tell affected individuals without undue delay where a breach is likely to result in a high risk to them, and explain what happened and what they can do.

Our incident response procedures are designed to minimize risks and support the continued security of our Services.

WhitePips does not offer or provide the Services to residents or nationals of, or persons located in, the following restricted jurisdictions: Iran, North Korea and the Palestinian Territories. The following regions are restricted in the same way: Crimea, Sevastopol, Luhansk, Donetsk, Zaporizhzhia and Kherson (territory of Ukraine); Abkhazia and South Ossetia (Georgia); the Turkish Republic of Northern Cyprus; Somaliland; Transnistria (Moldova); and Nagorno-Karabakh.

WhitePips also treats as restricted any country or territory that is subject to comprehensive sanctions administered by the United States Office of Foreign Assets Control (OFAC), the European Union, the United Kingdom, or the United Nations, and any jurisdiction identified by the Financial Action Task Force (FATF) as a high-risk jurisdiction subject to a call for action.

The list of restricted jurisdictions may be updated from time to time to reflect applicable laws, sanctions, regulatory requirements, and WhitePips’s internal compliance policies, without prior notice. The current list is always available in the Restricted Jurisdictions policy.

Attempting to access or use the Services from a restricted jurisdiction, including through the use of a VPN, proxy, or any other means of concealing your actual location, constitutes a material breach of the WhitePips Terms of Service and of this document.

WhitePips may decline to open, and may suspend, restrict, or terminate, any Account where it determines that these restrictions apply. Eligibility is verified at signup and again during identity (KYC) verification.

Why this involves personal data. To enforce these restrictions we process your country of residence, nationality, IP address and location signals, and the country of your bank account and payment methods.

WhitePips may update this Privacy Policy from time to time to reflect changes in:

• Our products and services
• Business operations
• Legal requirements
• Regulatory obligations
• Industry standards
• Security practices

Any updated version will be published on our Website together with the revised “Last Updated” date.

Where required by applicable law, we will provide additional notice of material changes through appropriate channels.

Your continued use of our Services after an updated Privacy Policy becomes effective constitutes your acknowledgment of the revised Privacy Policy.

If you have any questions regarding this Privacy Policy, your personal information, or your privacy rights, please contact WhitePips at [email protected].

For privacy-related requests, please include sufficient information to allow us to verify your identity and process your request efficiently.

Postal address. WhitePip FX Ltd., Unit 1, La Place Creole Building, Rodney Village, Rodney Bay, Gros-Islet, Saint Lucia. Office: Business Center, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates.

This Privacy Policy should be read together with the following WhitePips documents:

1. the Terms of Service;
2. the Plan Specification of your Trading Account, together with the Trading Rules (which are what earlier documents called the CFDs Challenge Terms, Futures Challenge Terms and Instant Account Terms);
3. the Cookie Policy;
4. the anti-money laundering and verification sections of the Terms of Service (the AML & KYC Policy);
5. the Risk Disclosure;
6. the Payout Policy and the Refund Policy;
7. the Restricted Jurisdictions policy;
8. the separate partner terms given to approved Partners (the Partners Terms & Conditions); and
9. any additional legal notices or policies published by WhitePips.

In the event of any inconsistency, each document shall apply to the specific subject matter it governs.

Nothing in this Privacy Policy limits any rights that you may have under applicable privacy or data protection laws.

If any provision of this Privacy Policy is found to be invalid, unlawful, or unenforceable, the remaining provisions shall remain in full force and effect.

This Privacy Policy is intended to promote transparency regarding how WhitePips collects, uses, stores, shares, and protects personal information and should not be interpreted as creating contractual rights beyond those required by applicable law.