Legal

Privacy Policy

Last updated: 1 January 2026

1. Who we are

This Privacy Policy explains how Tarim ("Tarim", "we", "us") collects and uses personal data when you visit our website, create an account or use our trading platform. For the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, Tarim is the controller of the personal data described here. Our registered address is High Holborn 232, LS1 5AT Leeds, GB.

2. Personal data we collect

Depending on how you interact with us, we may collect:

• identity and contact details, such as your name, email address, telephone number and date of birth;
• account information, such as login details, preferences and settings;
• verification information that we are legally required to obtain, such as identity documents and proof of address;
• financial and transactional information, such as deposits, withdrawals, trading activity and portfolio history;
• technical data, such as IP address, device identifiers, browser type and usage logs;
• communications you send to us, including support enquiries.

3. How we use your personal data

We use personal data to create and manage your account, provide the Platform, process transactions, verify your identity, prevent fraud and financial crime, respond to enquiries, improve our services, and meet our legal and regulatory obligations. We will only use your data for the purposes for which it was collected, unless we reasonably consider that another purpose is compatible with the original one.

4. Lawful bases for processing

We rely on one or more of the following lawful bases under the UK GDPR: performance of a contract with you; compliance with legal obligations, including anti-money laundering checks; our legitimate interests, such as securing the Platform and improving our services, where these are not overridden by your rights; and your consent, where we ask for it specifically, which you may withdraw at any time.

5. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, understand how the website is used and protect against abuse. Strictly necessary cookies are always active. Other categories are set only where permitted by law and, where required, with your consent. You can control cookies through your browser settings, although some features may not work correctly if you disable them.

6. Sharing your personal data

We do not sell your personal data. We may share it with carefully selected service providers who process data on our behalf, such as hosting, identity verification, payment and analytics providers, under written contracts that require appropriate safeguards. We may also disclose data where required by law, by a court or regulator, or to protect our rights and the safety of others.

7. International transfers

Some of our providers may process data outside the United Kingdom. Where this happens, we use mechanisms recognised under the UK GDPR, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with supplementary measures where appropriate.

8. Retention

We keep personal data only for as long as necessary for the purposes described in this policy. Records relating to identity verification and transactions are generally retained for the period required by anti-money laundering and tax legislation after your relationship with us ends. Other data is deleted or anonymised when no longer needed.

9. Your rights

Subject to certain legal exceptions, you have the right to access your personal data, request correction, request erasure, restrict or object to processing, request data portability, and withdraw consent at any time. You may also object to direct marketing at any time. To exercise these rights, contact us using the details below. We will respond within one month, as required by law, and we may ask you to confirm your identity first.

10. Security

We apply technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, misuse and alteration. These include encryption in transit, access controls and regular security reviews. No system is completely secure, so we cannot guarantee absolute security. Please keep your credentials confidential and notify us promptly of any suspected compromise.

11. Children

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can take appropriate steps.

12. Complaints

If you have concerns about how we handle your personal data, please contact us first so that we can try to resolve them. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.

13. Changes to this policy

We may update this Privacy Policy from time to time. The revised version will be published on this page with an updated "last updated" date. Where changes are material, we will provide additional notice, such as an email or an in-product message.

14. Contact us

For questions or requests relating to this policy, email [email protected] or call +44 20 7946 2478.