Source: https://whitepips.com/legal/privacy Summary: The WhitePips Privacy Policy: what personal data WhitePip FX Ltd. collects, why, who it is shared with, how long it is kept and how to use your privacy rights. Last updated: 2026-10-28 1. [Home](https://whitepips.com/) 2. [Legal](https://whitepips.com/legal/) 3. Privacy Policy # Privacy Policy What personal data we collect when you use WhitePips, why we need it, who we share it with, how long we keep it, and how to use your rights over it. - **Effective date**: 17 September 2026 - **Last updated**: 23 October 2026 - **Version**: 2.0 On this page 1. 1 Introduction 2. 2 Scope of this Privacy Policy 3. 3 Our privacy principles 4. 4 Definitions 5. 5 Information we collect 6. 6 Cookies and similar technologies 7. 7 How we use your information 8. 8 Legal bases for processing 9. 9 How we share your information 10. 10 International data transfers 11. 11 Data security 12. 12 Data retention 13. 13 Your privacy rights 14. 14 Marketing communications 15. 15 Children’s privacy 16. 16 Third-party websites 17. 17 Automated decision-making 18. 18 Data security incident response 19. 19 Restricted jurisdictions 20. 20 Changes to this Privacy Policy 21. 21 Contact us 22. 22 Governing documents 23. 23 Final provisions Back to top [All legal documents](https://whitepips.com/legal/) **On this page _23 sections_** 1. 1 Introduction 2. 2 Scope of this Privacy Policy 3. 3 Our privacy principles 4. 4 Definitions 5. 5 Information we collect 6. 6 Cookies and similar technologies 7. 7 How we use your information 8. 8 Legal bases for processing 9. 9 How we share your information 10. 10 International data transfers 11. 11 Data security 12. 12 Data retention 13. 13 Your privacy rights 14. 14 Marketing communications 15. 15 Children’s privacy 16. 16 Third-party websites 17. 17 Automated decision-making 18. 18 Data security incident response 19. 19 Restricted jurisdictions 20. 20 Changes to this Privacy Policy 21. 21 Contact us 22. 22 Governing documents 23. 23 Final provisions Back to top [All legal documents](https://whitepips.com/legal/) ## At a glance Figures from the text below. Each tile opens its section. **5 years** typically at least, after closure, for KYC/AML and payment records _Section 12.5_**13 months** website analytics events, then deleted _Section 12.5_**3 years** contact form messages, at most _Section 12.5_**24 hours** spam-protection network hashes, at most _Section 12.5_**1 month** to answer a verified rights request; up to two more if complex _Section 13_**72 hours** to notify the authority of a notifiable breach under the GDPR _Section 18_**18+** the Services are for adults only _Section 15_**Never sold** WhitePips does not sell your personal information _Section 9_ ## Key points - WhitePip FX Ltd., registered in Saint Lucia, is the controller of your personal data. Send any privacy request to notifications@whitepips.com. - We collect identity and verification documents, contact details, payment, bank and wallet details, trading data, device data and your messages to us. - We use it to run your accounts, verify who you are, take payments, pay rewards, prevent fraud and meet legal obligations. We do not sell your personal data. - Verification and anti-money laundering records are typically kept for at least 5 years after your account closes. Other data is kept only as long as it is needed. - You can ask to access, correct, delete, restrict, move or object to the use of your data, and withdraw consent, within the limits the law sets. This summary is here to help you find your way. It is not part of the Privacy Policy and does not change it: the full text below is what applies. ## 1 Introduction 1.1 Welcome to **WhitePips** (“WhitePips”, “Company”, “we”, “our”, or “us”). 1.2 **Who is responsible for your data.** WhitePip FX Ltd., an International Business Company registered in Saint Lucia (Registration No. 2026-00645) with its registered office at Unit 1, La Place Creole Building, Rodney Village, Rodney Bay, Gros-Islet, Saint Lucia and its office at Business Center, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates, is the data controller of personal data processed under this Privacy Policy. For privacy matters and data-subject requests, please contact notifications@whitepips.com. 1.3 WhitePips is committed to protecting your privacy and handling your personal information in a transparent, secure, and responsible manner. 1.4 This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you: 1. visit our website; 2. create an account; 3. purchase one of our products or services; 4. participate in any trading evaluation or instant funding program; 5. join our affiliate or partnership program; 6. contact our customer support team; 7. subscribe to our newsletters or marketing communications; or 8. interact with our platform in any other way. 1.5 We understand that privacy is important to our customers. For this reason, we are committed to processing personal information in accordance with applicable privacy and data protection laws, including, where applicable, the General Data Protection Regulation (GDPR), UK GDPR, UAE Personal Data Protection Law (PDPL), California Consumer Privacy Act (CCPA), the laws of Saint Lucia, and other applicable privacy legislation. 1.6 By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. Next _2 Scope of this Privacy Policy_ ## 2 Scope of this Privacy Policy 2.1 This Privacy Policy applies to all personal information collected by WhitePips through: - www.whitepips.com - Customer Dashboard - Trading Dashboard - Client Portal - Mobile applications (where available) - Customer Support - Email communications - Live Chat - Affiliate Portal - Marketing campaigns - Social media interactions - Surveys - Promotions - Events - Any future products or services operated by WhitePips 2.2 This Privacy Policy applies regardless of whether you access our Services using: - Desktop computers - Mobile devices - Tablets - APIs - Other supported technologies 2.3 This Privacy Policy does not apply to third-party websites that may be linked from our Services. Those websites operate under their own privacy policies, and WhitePips is not responsible for their privacy practices. 2.4 **Trading Platforms, payment providers and banks.** When you use MetaTrader 5, Volumetrica, a hosted checkout, a bank or a crypto wallet, the provider may also collect personal data under its own privacy policy, as a controller in its own right, for example to run its software, meet its own legal obligations or process your payment. This Privacy Policy covers what WhitePips does with the data it collects or receives. Next _3 Our privacy principles_ ## 3 Our privacy principles WhitePips is committed to the following principles: - **Transparency**: We explain what information we collect, why we collect it, and how it is used. - **Security**: We implement commercially reasonable administrative, technical, and organizational safeguards to protect your personal information. - **Data minimization**: We collect only the information reasonably necessary to provide our Services, comply with legal obligations, improve our products, and protect our business. - **Accuracy**: We encourage users to keep their information accurate and up to date. - **User control**: Where required by applicable law, we provide mechanisms that allow users to access, correct, or request deletion of their personal information. - **Compliance**: We strive to comply with applicable privacy and data protection laws in every jurisdiction in which we operate. - **Accountability**: We keep records of how we process personal data and review our safeguards and service providers regularly. Next _4 Definitions_ ## 4 Definitions For the purposes of this Privacy Policy: - **Account**: Your registered WhitePips account. - **Personal Information**: Any information that identifies, relates to, describes, or can reasonably be associated with an identifiable individual. We also call it “personal data”. - **Processing**: Any operation performed on personal information, including collection, storage, use, disclosure, transfer, analysis, or deletion. - **Services**: All products, platforms, evaluations, instant funding programs, customer portals, websites, software, APIs, educational resources, and related services operated by WhitePips. - **Website**: The official WhitePips website and all associated domains operated by WhitePips. - **Cookies**: Small text files placed on your device to enhance functionality, improve user experience, analyze traffic, and support security. - **Third-Party Service Provider**: Any external organization that processes personal information on behalf of WhitePips for operational purposes. - **Controller and processor**: A controller decides why and how personal data is processed. A processor processes it on a controller’s behalf and on its instructions. - **Special category and biometric data**: Personal data that the law treats as especially sensitive, including biometric data used to identify a person, such as a face template created during a selfie check. - **Other terms**: Capitalised terms not defined here, such as Trading Account, Plan Specification and Store Credit, have the meanings given in the [Terms of Service](https://whitepips.com/legal/terms) . Next _5 Information we collect_ ## 5 Information we collect Depending on how you interact with our Services, we may collect different categories of information. ### 5.1 Information you provide When you create an account, purchase a product, contact us, or otherwise interact with our Services, you may provide information such as: - Full name - Email address - Phone number - Date of birth - Country of residence - Nationality - Residential address - Billing address - Username - Password (stored only in hashed form) - Profile information - Communication preferences Where required for compliance purposes, we may also request: - Government-issued identification - Passport - National identity card - Driver’s licence - Proof of address - Selfie verification - Tax identification information (where applicable) - Source of funds documentation - Additional compliance documentation reasonably required to verify your identity ### 5.2 Verification images and biometric data 5.2.1 Selfie and liveness checks involve processing images of your face, and our verification provider may create a biometric template to compare your face with the photograph on your identification document. 5.2.2 Where the law treats this as biometric or special category data, we process it only to verify your identity and prevent fraud, with your explicit consent or where the law otherwise permits, and we require our provider to keep it no longer than needed for the check and for legal record-keeping. ### 5.3 Financial, bank and payout information Where necessary to provide our Services, we may collect or receive information relating to: - Payment confirmations - Transaction history - Billing records - Invoice information - Refund records - Promotional credits and Store Credit - Affiliate commissions - Payout requests - The payment method used at checkout (for example card, Apple Pay, Google Pay, UPI, bank transfer, cryptocurrency, QR code, Skrill or Binance Pay) and the last digits or reference of it - Bank account details for payouts, such as account holder name, bank name and address, account number or IBAN, SWIFT/BIC or routing code, and bank country - Crypto wallet addresses, selected networks and blockchain transaction identifiers - Chargeback, payment dispute and returned-transfer records WhitePips does not intentionally store complete payment card numbers where payments are processed by certified third-party payment providers. ### 5.4 Account information We may collect information relating to your account activity, including: - Account creation date - Login history - Device information - Security settings - Verification status - Program participation - Product purchases - Customer support history - Notification preferences - Records of the legal documents you accepted - Sanctions, politically exposed person and fraud screening results ### 5.5 Trading information Where applicable, we may process information relating to your participation in our evaluation or funding programs, including: - Trading activity - Performance metrics - Account statistics - Trading history - Challenge progress - Evaluation results - Risk management metrics - Payout eligibility reviews - Compliance reviews - Trading Platform login identifiers - Orders, positions and execution records, with timestamps - The IP address and device used to place trades - Expert advisor and trade copier usage This information is processed for the operation, administration, security, and integrity of our Services, and, in aggregated or pseudonymised form, for risk management, research and product development. ### 5.6 Communications When you communicate with WhitePips, we may retain records of: - Emails - Live chat conversations - Support tickets - Contact forms - Survey responses - Social media messages - Community channel messages and usernames, such as on Discord - Telephone or video conversations where legally permitted These communications may be retained for customer service, quality assurance, training, security, fraud prevention, and compliance purposes. ### 5.7 Information collected automatically When you access our Services, certain technical information may be collected automatically, including: - IP address - Approximate location derived from the IP address - Browser type - Browser version - Operating system - Device type - Device identifiers - Language preferences - Screen resolution - Referring website - Pages visited - Time spent on pages - Clickstream data - Date and time of access - Session duration - Error logs - Security events - Signals that indicate a VPN, proxy or hosting network This information helps us maintain security, improve performance, analyze website usage, and enhance the overall user experience. Our website analytics runs only with your consent and stores no IP address. With that consent it keeps one first-party cookie, wp_src, recording which campaign, advertisement or website brought you, so that an account you open or a purchase you make can be credited to it; see the [Cookie Policy](https://whitepips.com/legal/cookies) . ### 5.8 Website forms and newsletter 5.8.1 **Newsletter.** If you sign up for updates, we store your email address, the date and the page you signed up on, so that we can send you news about plans and payouts and prove your consent. Every email has an unsubscribe link. 5.8.2 **Contact form.** If you use the contact form, we store your name, email address, the topic and your message, so that we can reply and keep a record of the conversation. 5.8.3 **Spam protection.** To stop automated abuse, we check how quickly a form was completed and limit how many messages can be sent from one network. For this we keep a one-way hash of your network address for no longer than 24 hours; we do not store the address itself. ### 5.9 Information from third parties We may receive information from trusted third parties, including: - Payment service providers - Banks and payout providers - Identity verification providers - Sanctions and politically exposed person screening providers - Blockchain analytics providers - Fraud prevention providers - Trading Platform and market data providers - Analytics providers - Marketing partners - Affiliate partners - Customer support platforms - Social media platforms (where you choose to interact with us) We process such information only where permitted by applicable law and where necessary for the purposes described in this Privacy Policy. ### 5.10 Information about other people 5.10.1 Do not give us personal data about anyone else, for example in a support message or a referral, unless you are entitled to share it and they know you are doing so. ### 5.11 If you do not provide information 5.11.1 Some information is needed to provide the Services or to meet our legal obligations. If you do not provide it, we may be unable to open your Account, issue a Trading Account, complete verification, or pay a payout. Next _6 Cookies and similar technologies_ ## 6 Cookies and similar technologies 6.1 WhitePips uses a small number of cookies and similar technologies, such as local storage, to run the Website and dashboard securely and, only with your consent, to measure how they are used. That measurement is our own first-party counter (its one cookie, wp_src, records which campaign or website brought you) together with Microsoft Clarity, provided by Microsoft Corporation, which sets its own cookies and records masked heatmaps and session replays: it captures layout, cursor, clicks and scrolling, and it is masked so that it does not capture what you type or, in the dashboard, what is on your screen. Microsoft processes that data on our behalf, and nothing is shared with it unless you accept analytics. Only if you also accept Advertising, a separate choice in the cookie banner, the website and the dashboard load the Meta Pixel, which tells Meta Platforms when you view a page, open an account, start a checkout or complete a purchase, so we can measure and improve our ads on Facebook and Instagram; without that consent we use no advertising cookies, retargeting pixels or cross-site tracking. 6.2 **Cookie Policy.** The full list of what we store, why, for how long, the third parties involved and how to change your choice is in our [Cookie Policy](https://whitepips.com/legal/cookies) . You can change your choice at any time with Cookie settings in the footer of every page. Next _7 How we use your information_ ## 7 How we use your information WhitePips processes personal information only where there is a legitimate business or legal reason for doing so. We may use your information for the following purposes. ### 7.1 Provide our Services - Creating user accounts - Managing customer profiles - Delivering purchased products - Processing evaluations - Operating funded account programs - Managing partner accounts - Issuing Trading Platform credentials and market data access - Measuring objectives, breaches and payout eligibility ### 7.2 Verify identity - Identity verification - Age verification - Fraud prevention - Anti-money laundering checks - Sanctions and politically exposed person screening - Compliance reviews - Risk assessments ### 7.3 Process payments - Purchase processing - Billing - Refunds - Affiliate commissions - Payout requests - Sending payouts by bank transfer or cryptocurrency, and issuing Store Credit - Handling returned transfers, chargebacks and payment disputes - Financial record keeping ### 7.4 Customer support - Responding to enquiries - Resolving technical issues - Managing complaints - Improving customer satisfaction - Quality assurance ### 7.5 Improve our Services We analyze usage information to: - Improve website functionality - Enhance platform performance - Develop new features - Fix technical issues - Improve user experience ### 7.6 Security Personal information may be processed to: - Detect fraud - Prevent abuse - Monitor suspicious activity - Secure user accounts - Protect platform integrity - Investigate security incidents - Detect prohibited trading, multiple Accounts and location masking ### 7.7 Communications We may use your information to: - Send service notifications - Provide product updates - Respond to enquiries - Deliver security alerts - Notify you about account activity - Send newsletters and promotional communications where permitted by law You may unsubscribe from marketing communications at any time. ### 7.8 Legal and regulatory compliance Personal information may be processed where reasonably necessary to: - Comply with legal obligations - Respond to lawful requests - Protect our legal rights - Enforce our agreements - Prevent illegal activity - Cooperate with regulatory authorities ### 7.9 Purposes and legal bases at a glance | Purpose | Main categories of data | Legal basis | | --- | --- | --- | | Creating and running your Account and Trading Accounts | Identity, contact, account, trading and device data | Contract | | Issuing Trading Platform credentials and data access | Name, email, account identifiers | Contract | | Identity verification, anti-money laundering and sanctions screening | Identity, documents, images, screening results, bank and wallet details | Legal obligation; legitimate interests; explicit consent for biometric checks where the law requires it | | Monitoring trading and detecting prohibited conduct and fraud | Trading, device, IP, payment, bank and wallet data | Legitimate interests; contract | | Taking payments, refunds and chargebacks | Payment method, transaction and identity data | Contract; legal obligation | | Paying payouts by bank transfer or cryptocurrency, and issuing Store Credit | Identity, bank account details, wallet addresses, payout records | Contract; legal obligation | | Tax, accounting and record-keeping | Transaction and identity data | Legal obligation | | Customer support and complaints | Contact, communications and account data | Contract; legitimate interests | | Improving the Services and analytics | Usage, device and cookie data | Legitimate interests; consent for non-essential cookies | | Marketing communications | Contact data and preferences | Consent, or legitimate interests where the law allows | | Publishing testimonials and payout stories | Name or alias, country, payout and trading figures, testimonial | Consent | | Legal claims and enforcing our agreements | Any relevant data | Legitimate interests; legal obligation | Next _8 Legal bases for processing_ ## 8 Legal bases for processing Where applicable under the General Data Protection Regulation (GDPR), UK GDPR, or similar legislation, WhitePips processes personal information on one or more of the following legal bases. ### 8.1 Contract performance We process information where necessary to: - Create accounts - Deliver purchased products - Operate our Services - Process transactions - Pay payouts - Provide customer support ### 8.2 Legal obligations Processing may be required to comply with: - Anti-money laundering laws - Sanctions laws - Tax obligations - Court orders - Regulatory requirements - Fraud prevention obligations ### 8.3 Legitimate interests We may process personal information where necessary for our legitimate interests, provided those interests are not overridden by your rights. Examples include: - Platform security - Fraud detection - Business analytics - Product improvement - Customer support - Operational management - Legal protection ### 8.4 Consent Where required by applicable law, we process information based on your consent. Examples include: - Marketing communications - Certain cookies - Promotional campaigns - Biometric verification, where explicit consent is required - Publishing your testimonial or payout story You may withdraw your consent at any time where processing is based solely on consent. Withdrawal does not affect processing that took place before it. ### 8.5 Legal claims 8.5.1 We may also process personal data where it is necessary to establish, exercise or defend legal claims, including disputes about payouts, refunds and chargebacks. Next _9 How we share your information_ ## 9 How we share your information WhitePips does not sell your personal information. We may disclose information only where reasonably necessary to operate our business, comply with legal obligations, or protect our rights. ### 9.1 Service providers We may share information with trusted providers assisting us with: - Payment processing - Identity verification - Cloud hosting - Customer support - Email delivery - Website analytics - Fraud prevention - Cybersecurity - Data storage - Software infrastructure These providers process information only on our behalf and under appropriate contractual safeguards. ### 9.2 Payment providers, banks and payout providers 9.2.1 To take payments, checkout payment data is shared with the payment provider that processes it. At the date of this policy, checkout payments are handled through a hosted checkout provided by UniPayment, which may process card, cryptocurrency and other payment methods. 9.2.2 To pay a payout by bank transfer, we share the account holder name, bank account details, payout amount and reference with our payout provider, our bank, and the intermediary, correspondent and receiving banks involved in the transfer. Banks may carry out their own sanctions and anti-money laundering screening and may ask us for more information about you or the payment. 9.2.3 To pay a payout in cryptocurrency, we share the wallet address, network and amount with the provider that sends the transfer. ### 9.3 Trading Platform and market data providers 9.3.1 To issue your credentials and run your Trading Accounts, we share the data needed, such as your name, email address, country and account identifiers, with the providers of MetaTrader 5 and Volumetrica and, where needed for data licensing, with dxFeed, and we receive your trading records from them. ### 9.4 Verification and screening providers 9.4.1 We share identity documents, images and details with identity verification, sanctions screening, fraud prevention and blockchain analytics providers so they can carry out checks for us. ### 9.5 Professional advisers and insurers 9.5.1 We may share information with our lawyers, accountants, auditors and insurers where needed for advice, audits, insurance and legal claims, under a duty of confidentiality. ### 9.6 Business partners 9.6.1 Information may be shared with carefully selected business partners where necessary to deliver a product or service requested by you. Partners who referred you may receive limited attribution information, such as the fact that a referred customer made a purchase, but not your documents or trading data. ### 9.7 Corporate transactions If WhitePips undergoes: - Acquisition - Merger - Investment - Reorganization - Sale of assets - Corporate restructuring Personal information may be transferred as part of that transaction, subject to applicable law. ### 9.8 Legal requirements We may disclose information where reasonably necessary to: - Comply with legal obligations - Respond to lawful requests from courts, regulators, tax authorities and law enforcement - Protect public safety - Prevent fraud - Enforce our agreements - Protect our legal rights - Defend legal claims ### 9.9 With your consent 9.9.1 We may share your information where you have expressly authorized us to do so. ### 9.10 Public blockchains 9.10.1 Cryptocurrency transfers are recorded on public blockchains. The receiving address, amount and time of a crypto payout, or of a crypto payment you make, can be seen by anyone and cannot be changed or deleted by WhitePips. Next _10 International data transfers_ ## 10 International data transfers 10.1 WhitePips may operate internationally. 10.2 As a result, your personal information may be transferred to and processed in countries outside your country of residence, including Saint Lucia and the countries where our service providers, banks and Trading Platform providers operate. 10.3 Where required by applicable law, WhitePips will implement appropriate safeguards to protect transferred personal information. These safeguards may include: - Standard contractual clauses, including the UK addendum where UK law applies - Transfers to countries recognised as providing adequate protection - Contractual confidentiality obligations - Appropriate technical security measures - Organizational safeguards - Other legally recognized transfer mechanisms 10.4 **A copy of the safeguards.** You may ask us for information about the safeguards that apply to a transfer by writing to notifications@whitepips.com. Next _11 Data security_ ## 11 Data security 11.1 WhitePips takes information security seriously. 11.2 We implement commercially reasonable administrative, technical, and organizational measures designed to protect personal information against: - Unauthorized access - Unauthorized disclosure - Accidental destruction - Data loss - Alteration - Misuse - Cybersecurity threats 11.3 Security measures may include: - Encryption - Access controls - Multi-factor authentication - Firewalls - Intrusion monitoring - Security logging - Secure cloud infrastructure - Employee confidentiality obligations - Regular security assessments - Incident response procedures 11.4 While we strive to protect your information, no method of internet transmission or electronic storage can be guaranteed to be completely secure. 11.5 Accordingly, WhitePips cannot guarantee absolute security, although we continuously work to maintain industry-appropriate safeguards. 11.6 **Your part.** Keep your password secret and unique, secure your devices and email account, and tell us at once at notifications@whitepips.com if you think your Account has been accessed without permission. We will never ask for your password by email or chat. Next _12 Data retention_ ## 12 Data retention 12.1 WhitePips retains personal information only for as long as it is reasonably necessary to: 1. provide and maintain our Services; 2. manage your account and customer relationship; 3. process transactions and payouts; 4. conduct identity verification and compliance checks; 5. resolve disputes and enforce our agreements; 6. detect and prevent fraud, abuse, and unauthorized activity; 7. meet legal, accounting, tax, regulatory, and recordkeeping obligations; and 8. protect our legal rights and legitimate business interests. 12.2 The length of time we retain information depends on the nature of the information, the purpose for which it was collected, and applicable legal requirements. 12.3 When personal information is no longer required, we will take reasonable steps to securely delete, anonymize, or otherwise dispose of it in accordance with our internal retention procedures and applicable law. 12.4 Certain records may be retained for longer periods where required or permitted by law, including records relating to identity verification, financial transactions, compliance obligations, fraud investigations, dispute resolution, and legal proceedings. 12.5 **Retention by category.** The following table explains how the principles above apply to the main categories of data: | Category | How long we keep it | | --- | --- | | Identity verification documents, images and screening results (KYC/AML records) | For as long as necessary for the purpose and to meet legal, accounting and AML obligations, typically at least 5 years after account closure for KYC/AML records | | Payment, refund, chargeback and payout records, including bank and wallet details used | For as long as necessary for the purpose and to meet legal, accounting and AML obligations, typically at least 5 years after account closure | | Account and trading data | For as long as your Account is open, and then for as long as necessary for the purpose and to meet legal, accounting and AML obligations, including to support payout, fraud and dispute decisions | | Support messages and complaints | For as long as necessary to handle the matter and to meet legal, accounting and AML obligations | | Marketing preferences | Until you unsubscribe or withdraw consent; we then keep a minimal record so that we respect your choice | | Website analytics events | Up to 13 months, then deleted; no IP address or cookie identifier is stored | | Newsletter sign-ups | Until you unsubscribe; we then keep a minimal record so that we respect your choice | | Contact form messages | For as long as necessary to handle the matter, and in any case no longer than 3 years | | Spam-protection network hashes | No longer than 24 hours | | Records relating to investigations, disputes and legal claims | Until the matter is resolved and any limitation period has expired | 12.6 **Blockchain records.** Information recorded on a public blockchain cannot be deleted by WhitePips, as explained in section 9.10 (Public blockchains). Next _13 Your privacy rights_ ## 13 Your privacy rights 13.1 Depending on your country of residence and applicable law, you may have certain rights regarding your personal information. 13.2 These rights may include the right to: 1. request access to the personal information we hold about you; 2. request correction of inaccurate or incomplete personal information; 3. request deletion of your personal information where legally permissible; 4. request restriction of processing in certain circumstances; 5. object to certain types of processing; 6. request portability of your personal information where technically feasible; 7. withdraw consent where processing is based solely on your consent; and 8. lodge a complaint with a competent supervisory authority or data protection regulator. 13.3 The availability of these rights depends on the laws applicable to your jurisdiction and may be subject to legal limitations and exceptions. 13.4 To exercise your rights, you may contact WhitePips at notifications@whitepips.com. We may request additional information to verify your identity before processing your request. ### 13.5 Right of access 13.5.1 You may request confirmation of whether WhitePips processes your personal information and, where applicable, request access to such information together with certain supplementary details required by law. ### 13.6 Right to rectification 13.6.1 If you believe any personal information we hold is inaccurate, incomplete, or outdated, you may request that we correct or update the information. 13.6.2 You are also responsible for keeping your account information accurate and current, including your bank account and wallet details for payouts. ### 13.7 Right to erasure 13.7.1 Subject to applicable law, you may request that we delete your personal information. 13.7.2 Please note that we may retain certain information where necessary to: 1. comply with legal obligations; 2. complete contractual obligations; 3. prevent fraud; 4. resolve disputes; 5. enforce our legal rights; or 6. maintain required business records. ### 13.8 Right to restrict processing 13.8.1 Where permitted by law, you may request that we temporarily restrict certain processing activities while we assess a request relating to your personal information. ### 13.9 Right to object 13.9.1 Where applicable, you may object to processing carried out on the basis of our legitimate interests or for direct marketing purposes. 13.9.2 If you object to direct marketing communications, we will stop sending such communications, although we may continue to send essential service-related notifications. ### 13.10 Right to data portability 13.10.1 Where legally applicable, you may request a copy of certain personal information you have provided to us in a structured, commonly used, and machine-readable format, or request that we transfer such information to another organization where technically feasible. ### 13.11 Right to withdraw consent 13.11.1 Where we rely on your consent, you may withdraw it at any time, for example by using the unsubscribe link in an email, changing your cookie settings, or writing to us. Withdrawal does not affect processing that took place before it. ### 13.12 Rights about automated decisions 13.12.1 Where a decision based solely on automated processing has a legal or similarly significant effect on you, you may ask for a person to review it, give your point of view and contest it, as explained in section 17 (Automated decision-making). ### 13.13 Right to complain 13.13.1 You may complain to the data protection authority in the country where you live or work, or where you think the law was broken. We would be grateful for the chance to resolve your concern first, so please contact us at notifications@whitepips.com. ### 13.14 How to make a request 13.14.1 **Sending a request.** Write to notifications@whitepips.com from the email address registered to your Account, say which right you want to use, and give enough detail for us to find the data concerned. 13.14.2 **Verification.** We will verify your identity before acting, and may ask for more information to do so. Someone acting for you must show that they are authorised. 13.14.3 **Timing.** We respond within one month of receiving a verified request. Where a request is complex or we receive many requests, we may extend this by up to two further months and will tell you why. 13.14.4 **Cost.** Requests are free. Where a request is clearly unfounded or excessive, we may charge a reasonable fee or refuse it, as the law allows. 13.14.5 **Limits.** We may be unable to meet a request in full where the law requires us to keep data, where doing so would affect other people’s rights, or where it would prejudice the prevention or investigation of fraud or a legal claim. If so, we will explain why unless the law prevents us. 13.14.6 **No penalty.** We will not treat you unfairly for using your privacy rights. Next _14 Marketing communications_ ## 14 Marketing communications 14.1 Where permitted by applicable law, WhitePips may send you marketing communications relating to: - New products and services - Platform updates - Promotions and special offers - Educational content - Newsletters - Events and webinars - Partner opportunities 14.2 You may opt out of receiving marketing communications at any time by: 1. using the unsubscribe link included in our emails; 2. updating your communication preferences within your account (where available); or 3. contacting our support team. 14.3 Please note that opting out of marketing communications will not affect transactional or service-related communications, including account notifications, security alerts, compliance requests, or updates relating to products you have purchased. Next _15 Children’s privacy_ ## 15 Children’s privacy 15.1 WhitePips’s Services are intended solely for individuals who are at least eighteen (18) years of age or the legal age required to use our Services in their jurisdiction. 15.2 We do not knowingly collect personal information from children or minors. 15.3 If we become aware that personal information has been collected from an individual who does not meet the applicable age requirement, we will take reasonable steps to delete such information unless retention is required by law. 15.4 If you believe that a child has provided us with personal information, please contact us promptly. Next _16 Third-party websites_ ## 16 Third-party websites 16.1 Our Services may contain links to third-party websites, applications, or services operated by organizations that are not controlled by WhitePips. 16.2 This Privacy Policy applies only to WhitePips’s Services. 16.3 We are not responsible for the privacy practices, security, content, or policies of third-party websites or services. 16.4 We encourage you to review the privacy policies of any third-party website you visit before providing personal information. Next _17 Automated decision-making_ ## 17 Automated decision-making 17.1 WhitePips may use automated systems to support operational processes, including fraud detection, account security, risk management, identity verification, and platform integrity. 17.2 **Where we use automation.** Automated systems are used, in particular, to: 1. measure Trading Accounts against their published loss limits and drawdown, and record a breach when a limit is exceeded; 2. close the open positions of a CFD Trading Account that does not hold the Weekend Holding add-on at the Friday weekend deadline, record a Weekend Holding warning the first time and close the Trading Account the second time, as described in the [Trading Rules](https://whitepips.com/legal/trading-rules#holding) ; 3. detect patterns that may indicate prohibited trading, automated trading where it is not permitted, multiple Accounts or location masking; 4. score transactions, payouts, bank accounts and wallets for fraud and sanctions risk; and 5. check identity documents and compare selfies with them. 17.3 **How they work.** A breach of a loss limit is an objective measurement against the figures in the Plan Specification. So is the weekend close: it depends only on whether positions are open at the deadline on a Trading Account without the Weekend Holding add-on. Other automated results, such as a fraud or prohibited-trading flag, are normally reviewed by a person before an account is closed or a payout is refused. 17.4 Where legally required, decisions that produce legal or similarly significant effects will be subject to appropriate safeguards, including the possibility of requesting human review where applicable. 17.5 **Asking for a review.** You may ask for a person to review an automated decision by writing to notifications@whitepips.com. For a breach of a loss limit, the review checks whether the measurement was correct; it does not waive the rule. 17.6 Automated systems are used to assist our operations and are regularly monitored to improve accuracy, consistency, and security. Next _18 Data security incident response_ ## 18 Data security incident response 18.1 In the event of a suspected or confirmed security incident affecting personal information, WhitePips will take appropriate steps to: 1. investigate the incident; 2. contain and mitigate any impact; 3. restore affected systems where appropriate; 4. assess legal reporting obligations; and 5. notify affected individuals or regulatory authorities where required by applicable law. 18.2 **Notification.** Where the law requires it, we will notify the competent authority without undue delay and, under the GDPR or UK GDPR, within 72 hours of becoming aware of a notifiable breach. We will tell affected individuals without undue delay where a breach is likely to result in a high risk to them, and explain what happened and what they can do. 18.3 Our incident response procedures are designed to minimize risks and support the continued security of our Services. Next _19 Restricted jurisdictions_ ## 19 Restricted jurisdictions 19.1 WhitePips does not offer or provide the Services to residents or nationals of, or persons located in, the following restricted jurisdictions: Iran, North Korea and the Palestinian Territories. The following regions are restricted in the same way: Crimea, Sevastopol, Luhansk, Donetsk, Zaporizhzhia and Kherson (territory of Ukraine); Abkhazia and South Ossetia (Georgia); the Turkish Republic of Northern Cyprus; Somaliland; Transnistria (Moldova); and Nagorno-Karabakh. 19.2 WhitePips also treats as restricted any country or territory that is subject to comprehensive sanctions administered by the United States Office of Foreign Assets Control (OFAC), the European Union, the United Kingdom, or the United Nations, and any jurisdiction identified by the Financial Action Task Force (FATF) as a high-risk jurisdiction subject to a call for action. 19.3 The list of restricted jurisdictions may be updated from time to time to reflect applicable laws, sanctions, regulatory requirements, and WhitePips’s internal compliance policies, without prior notice. The current list is always available in the [Restricted Jurisdictions](https://whitepips.com/legal/restricted-jurisdictions) policy. 19.4 Attempting to access or use the Services from a restricted jurisdiction, including through the use of a VPN, proxy, or any other means of concealing your actual location, constitutes a material breach of the WhitePips [Terms of Service](https://whitepips.com/legal/terms) and of this document. 19.5 WhitePips may decline to open, and may suspend, restrict, or terminate, any Account where it determines that these restrictions apply. Eligibility is verified at signup and again during identity (KYC) verification. 19.6 **Why this involves personal data.** To enforce these restrictions we process your country of residence, nationality, IP address and location signals, and the country of your bank account and payment methods. Next _20 Changes to this Privacy Policy_ ## 20 Changes to this Privacy Policy 20.1 WhitePips may update this Privacy Policy from time to time to reflect changes in: - Our products and services - Business operations - Legal requirements - Regulatory obligations - Industry standards - Security practices 20.2 Any updated version will be published on our Website together with the revised “Last Updated” date. 20.3 Where required by applicable law, we will provide additional notice of material changes through appropriate channels. 20.4 Your continued use of our Services after an updated Privacy Policy becomes effective constitutes your acknowledgment of the revised Privacy Policy. Next _21 Contact us_ ## 21 Contact us 21.1 If you have any questions regarding this Privacy Policy, your personal information, or your privacy rights, please contact WhitePips at notifications@whitepips.com. 21.2 For privacy-related requests, please include sufficient information to allow us to verify your identity and process your request efficiently. 21.3 **Postal address.** WhitePip FX Ltd., Unit 1, La Place Creole Building, Rodney Village, Rodney Bay, Gros-Islet, Saint Lucia. Office: Business Center, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates. Next _22 Governing documents_ ## 22 Governing documents 22.1 This Privacy Policy should be read together with the following WhitePips documents: 1. the [Terms of Service](https://whitepips.com/legal/terms) ; 2. the Plan Specification of your Trading Account, together with the [Trading Rules](https://whitepips.com/legal/trading-rules) (which are what earlier documents called the CFDs Challenge Terms, Futures Challenge Terms and Instant Account Terms); 3. the [Cookie Policy](https://whitepips.com/legal/cookies) ; 4. the anti-money laundering and verification sections of the [Terms of Service](https://whitepips.com/legal/terms) (the AML & KYC Policy); 5. the [Risk Disclosure](https://whitepips.com/legal/risk-disclosure) ; 6. the [Payout Policy](https://whitepips.com/legal/payout-policy) and the [Refund Policy](https://whitepips.com/legal/refund-policy) ; 7. the [Restricted Jurisdictions](https://whitepips.com/legal/restricted-jurisdictions) policy; 8. the separate partner terms given to approved Partners (the Partners Terms & Conditions); and 9. any additional legal notices or policies published by WhitePips. 22.2 In the event of any inconsistency, each document shall apply to the specific subject matter it governs. Next _23 Final provisions_ ## 23 Final provisions 23.1 Nothing in this Privacy Policy limits any rights that you may have under applicable privacy or data protection laws. 23.2 If any provision of this Privacy Policy is found to be invalid, unlawful, or unenforceable, the remaining provisions shall remain in full force and effect. 23.3 This Privacy Policy is intended to promote transparency regarding how WhitePips collects, uses, stores, shares, and protects personal information and should not be interpreted as creating contractual rights beyond those required by applicable law. By accessing or using the Services, you acknowledge that you have read, understood, and accepted this Privacy Policy. Privacy Policy · Version 2.0 · Effective 17 September 2026 · WhitePip FX Ltd., registered in Saint Lucia, Registration No. 2026-00645. Questions: notifications@whitepips.com. Back to top [All legal documents](https://whitepips.com/legal/) [Back to WhitePips](https://whitepips.com/) ## Related policies [**Trading Rules** The objectives, loss limits, conduct rules and resets for every CFD, Futures and Instant account. _Read the policy_](https://whitepips.com/legal/trading-rules) [**Payout Policy** How payouts are earned, requested and paid by bank transfer, in crypto or as store credit. _Read the policy_](https://whitepips.com/legal/payout-policy) [**Terms of Service** The agreement between you and WhitePip FX Ltd. for every account, evaluation and payout. _Read the policy_](https://whitepips.com/legal/terms) [**Cookie Policy** Which cookies and similar technologies WhitePips uses on its website and dashboard, why, for how long, and how to change your choice. _Read the policy_](https://whitepips.com/legal/cookies) [**Risk Disclosure** The risks of simulated evaluations, leveraged CFDs and futures, technology, and payouts by bank transfer or in crypto. _Read the policy_](https://whitepips.com/legal/risk-disclosure) [**Refund Policy** When a fee paid to WhitePips can be refunded, when it cannot, how to ask, and how refunds reach you. _Read the policy_](https://whitepips.com/legal/refund-policy) [**Restricted Jurisdictions** Where WhitePips does not offer its services, how sanctions apply, and what happens if the restrictions are circumvented. _Read the policy_](https://whitepips.com/legal/restricted-jurisdictions) All legal documents [Legal hub](https://whitepips.com/legal/) - [Trading Rules](https://whitepips.com/legal/trading-rules) - [Payout Policy](https://whitepips.com/legal/payout-policy) - [Terms of Service](https://whitepips.com/legal/terms) - Privacy Policy - [Cookie Policy](https://whitepips.com/legal/cookies) - [Risk Disclosure](https://whitepips.com/legal/risk-disclosure) - [Refund Policy](https://whitepips.com/legal/refund-policy) - [Restricted Jurisdictions](https://whitepips.com/legal/restricted-jurisdictions) --- WhitePips provides skill-based trading evaluations on simulated accounts; payouts are real money based on simulated performance. Nothing here is financial advice or a promise of profit, passing an evaluation does not guarantee funding, payouts or income, and trading leveraged products carries significant risk. Not offered in the restricted jurisdictions listed at https://whitepips.com/legal/restricted-jurisdictions.