Privacy Policy

1. Controller & contact

The controller responsible for data processing on this website is:

EU / EEA representative (Art. 27 GDPR)

Because we offer services to people in the EU/EEA, we are required to designate a representative in the Union. You may contact our representative on all matters related to the processing of your personal data:

2. Scope & principles

This policy applies to this website. It does not cover the third-party platforms we link to (for example your broker TegasFX, MyFxBook, Telegram or our booking provider), which operate under their own privacy policies.

We process personal data only where a legal basis applies under Art. 6(1) GDPR — in particular your consent (point a), the performance of a contract or pre-contractual steps (point b), or our legitimate interests (point f), such as operating a secure website. Where we rely on consent, you can withdraw it at any time with effect for the future.

3. Your rights

Subject to the conditions of the GDPR, you have the right to:

• Access (Art. 15) — confirmation of whether we process your data, and a copy of it.
• Rectification (Art. 16) — correction of inaccurate data.
• Erasure (Art. 17) — deletion of your data where applicable.
• Restriction (Art. 18) of processing.
• Data portability (Art. 20) — receipt of your data in a machine-readable format.
• Objection (Art. 21) — to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent (Art. 7(3)) at any time, without affecting prior lawful processing.

To exercise any of these rights, contact us at info@algovaro.com. You also have the right to lodge a complaint with a supervisory authority, for example the data-protection authority in your country of residence.

4. Hosting

This website is hosted by Shinjiru (Shinjiru Technology Sdn Bhd) on infrastructure located in Singapore. When you visit the site, the hosting provider processes connection data (see “Server log files” below) on our behalf as a processor under Art. 28 GDPR. Hosting in Singapore constitutes a transfer to a third country — see “International data transfers”.

5. Server log files

When you access the site, the server automatically collects and stores information that your browser transmits. This may include the browser type and version, the operating system, the referrer URL, the requested resource, the date and time of the request, and the IP address (typically shortened or stored only briefly).

This data is not merged with other data sources. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in the secure and stable operation of the website. Log data is retained for a short period and then deleted.

6. Cookies & local storage

We do not use any non-essential cookies before you consent. The only browser storage we set without consent is strictly necessary and stays on your device — it is not transmitted to us:

The legal basis for the strictly necessary storage is Art. 6(1)(f) GDPR (and, where required, § 25(2) TDDDG, which exempts storage that is strictly necessary). Any storage that is not strictly necessary is set only on the basis of your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR.

7. Consent & withdrawal

On your first visit we show a consent banner that lets you accept or reject non-essential processing on an equal footing, and choose individual categories under “Settings”. Nothing in the Marketing category loads until you actively agree.

You can change or withdraw your choice at any time — use the small “Cookies” control at the bottom-left of any main page, or open your cookie settings here. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

8. Analytics — Plausible

We use Plausible Analytics to understand, in aggregate, how the site is used (for example which pages are visited). Plausible is a privacy-first analytics tool that does not use cookies, does not store identifiers on your device, and does not collect or retain personal data or build cross-site profiles. Measurement is fully anonymous and aggregated.

Because no personal data is processed and nothing is stored on or read from your device, this runs without consent. The legal basis for the underlying reach measurement is our legitimate interest (Art. 6(1)(f) GDPR) in understanding and improving our website.

Provider: Plausible Insights OÜ, Estonia (EU). See the provider's privacy documentation for details.

9. Meta pixel (marketing)

Only if you consent to the Marketing category do we load the Meta pixel (also “Facebook pixel”). It allows us to measure the reach and effectiveness of our advertising on Meta platforms (Facebook, Instagram), to attribute conversions, and — where applicable — to build audiences for advertising.

When active, the pixel may set the cookies _fbp and _fbc and transmit data such as your IP address, browser/device information, the pages you view and actions you take, together with an event identifier, to Meta. This may involve a transfer to Meta Platforms, Inc. in the USA (see “International data transfers”). We and Meta act as joint controllers for the collection and transmission of this data under Art. 26 GDPR.

The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can withdraw it at any time (see §7).

• Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.
• Pixel ID: 908559955243378.

10. Outbound link attribution

When you click certain outbound links (for example to our partner / sign-up destination at app.optivyro.com), we may append marketing parameters such as fbclid, fbc and fbp to the destination URL. These values exist only if the Meta pixel has already been set with your consent, and they are used solely to attribute a sign-up to the campaign that referred you. If you did not consent to marketing, no such parameters are added.

11. Other third-party services

The following services may process personal data when you use the corresponding feature. Linked external platforms operate under their own privacy policies.

12. International data transfers

Some processing involves countries outside the EU/EEA that may not provide an equivalent level of data protection, in particular:

• United States — the controller (Future of Trading LLC) and Meta Platforms, Inc.
• Singapore — website hosting (Shinjiru).

Where we transfer personal data to such third countries, we rely on appropriate safeguards under Chapter V GDPR, such as the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the EU–US Data Privacy Framework. You may request a copy of the relevant safeguards using the contact details above.

13. Retention

We keep personal data only as long as necessary for the purposes described here or as required by law. Server logs are deleted after a short period; consent records are kept as evidence of consent; marketing identifiers expire as stated above. When data is no longer required, it is deleted or anonymised.

14. Changes to this policy

We may update this policy to reflect changes to our services or legal requirements. The current version is always available on this page, with the “Last updated” date above.