eFXdata Privacy Policy

eFXdata™ is part of Boston eFX, LLC.

Boston eFX, LLC is committed to protecting the privacy and security of personal data. This Privacy Policy explains how eFXdata collects, uses, stores, and protects personal information when you access or use eFXdata.com, plus.efxdata.com, and related services (collectively, the “Services”).

1. Data Controller

The data controller responsible for processing personal data described in this Privacy Policy is:

Boston eFX, LLC
198 Tremont Street, Suite 407
Boston, MA 02116
United States

Email: legal (at) efxdata (dot) com

2. Legal Basis for Processing Personal Data

Depending on the circumstances, eFXdata processes personal data under one or more of the following legal bases:

• Performance of a contract when providing Services to users
• Legitimate interests in operating, maintaining, and improving the Services
• Compliance with legal obligations
• User consent where required by applicable law

Where processing is based on legitimate interests, those interests include maintaining the security of the Services, preventing abuse, improving platform functionality, ensuring the reliability of infrastructure, and supporting the ongoing operation and improvement of the platform, provided that such interests are not overridden by the rights and freedoms of users.

3. Personal Data That We Collect

eFXdata collects limited categories of personal data necessary to operate and secure the Services.

3.1. Usage Data

Based on your usage

• Requested web pages
• IP address and login frequency associated with the IP address
• Browser and device information provided by your browser software
• Timestamps and server request data

IP addresses may be processed for security monitoring, fraud prevention, system administration, and service optimization purposes and may be treated as personal data under applicable data protection laws.

3.2. Account and Service Usage Data

If you create an account or access subscription services, we may collect:

• Email address
• Phone number where applicable
• Account login information
• Subscription status and service usage activity
• User preferences such as notification settings, email delivery preferences, and time zone settings

3.3. Payment Information

Payment processing may be handled by third-party payment providers. eFXdata does not store full payment card numbers.

The personalized billing data that eFXdata™ does store is as follows:

• If using credit cards:
  • Your type of card (Visa, MasterCard, American Express, Discover)
  • The last four digits of your card
  • Your card’s expiration date
  • Your billing address, city, state (if applicable), zip/postal code, and country
• If using PayPal:
  • Your PayPal account email
  • Your country of residence
  • Your PayPal account verification status

Note: Certain Payment Information may not apply if access to the Services is provided through a broker, financial institution, or other authorized partner.

4. How We Use Personal Data

eFXdata processes personal data primarily for the following purposes:

1. Operating and maintaining the Services
2. Internal record keeping, e.g. Login session identifier or Partner group identifier you may be associated with (e.g. provided by your broker or a partnering site)
3. Improving website performance and functionality
4. Detecting and preventing misuse of the Services
5. Maintaining the security of the platform
6. Complying with applicable legal obligations
7. Security Monitoring and Abuse Prevention - eFXdata may monitor usage patterns, login activity, IP addresses, and technical access logs in order to maintain the security and integrity of the Services, detect unauthorized access, prevent fraud, enforce our Terms of Service, investigate potential violations, and protect the platform from misuse or abusive activity.

eFXdata provides financial market data and analytics tools and does not use personal data to evaluate individuals’ financial behavior or to make financial or investment decisions about users.

5. Automated Decision-Making and Profiling

eFXdata does not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on individuals.

6. Sharing Personal Data

eFXdata does not sell personal data.

Personal data may be disclosed in the following circumstances:

1. To service providers that assist in operating the Services (such as infrastructure providers or analytics services)
2. When received from third party providers, such as brokers: In some cases, eFXdata may receive limited account information from authorized partners or financial institutions that provide access to the Services to their clients.
3. When required by law or valid legal process
4. To protect the rights, property, or safety of eFXdata, its users, or the public
5. Advertising and Analytics Providers

   eFXdata may use third-party analytics and advertising technologies provided by platforms such as X or similar services to understand how users interact with the Services and to measure the effectiveness of advertising campaigns.

   These technologies may collect technical information such as pages visited, browser information, device information, device identifiers, and IP address.

   Further information about the use of cookies and tracking technologies is described in the Cookies section of this Privacy Policy.

   Once data is transmitted to an advertising or analytics provider, the provider may process such data as an independent controller or joint controller in accordance with its own privacy policies.

6. Infrastructure and Security Providers

   eFXdata may use third-party infrastructure and security providers, such as Cloudflare, to improve the reliability, performance, and security of the Services. These providers may process technical information such as IP addresses, device identifiers, and request metadata in order to deliver website content, prevent malicious activity, and maintain service availability.

   Such providers may process technical information on behalf of eFXdata for the purpose of delivering, securing, and maintaining the Services.

7. International Data Transfers

eFXdata operates in the United States. Personal data may be processed or stored on servers located in the United States or other jurisdictions where our service providers operate.

Where personal data is transferred outside the European Economic Area, eFXdata implements appropriate safeguards in accordance with applicable data protection laws. These safeguards may include the use of Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms designed to protect personal data during international transfers.

8. Protecting Personal Data

eFXdata is committed to protecting personal data and payment information from unauthorized access.

Security measures include:

• Encrypted transmission of data between browsers and servers
• Modern encryption protocols such as TLS 1.2 or higher
• Restricted access to systems containing personal data
• Technical safeguards designed to protect against unauthorized access or misuse

Despite these measures, no internet transmission can be guaranteed to be completely secure.

9. Cookies

eFXdata uses cookies and similar technologies to support functionality and analyze usage of the Services.

9.1. Types of Cookies eFXdata May Use

1. Essential cookies

   Used to maintain basic functionality of the website

2. Preference cookies

   Used to store user preferences, including acknowledgment of the privacy notice.

3. Security cookies

   Used to detect misuse or unauthorized activity.

4. Analytics cookies

   Third-party Google Analytics cookies are used to track performance and usage statistics.

   Google Analytics creates pseudonymous usage profiles that enable analysis of website usage. Information stored in such cookies may include:

   • Browser type and version
   • Operating system
   • Referring URL
   • Hostname of the accessing computer
   • Time of server request

   This information may be transmitted to and stored on Google servers.

   Google Analytics may process personal data on servers located in the United States or other jurisdictions.

5. Advertising cookies

   eFXdata may use advertising pixels or tracking technologies provided by third-party platforms (such as X) to measure the effectiveness of advertising campaigns and improve marketing performance.

9.2. Analytics Providers

eFXdata uses third-party analytics providers, including Google Analytics, to understand how visitors interact with the website and to improve the Services. These analytics providers may collect information such as pages visited, time spent on pages, referring websites, browser type, and device information.

Where possible, eFXdata uses privacy-enhancing settings such as IP anonymization or similar technical measures to limit the identification of individual users.

9.3. Opt-Out of Analytics Tracking

Users who wish to limit analytics tracking may disable cookies through their browser settings or use available browser add-ons provided by analytics providers.

For example, as of the time of this privacy policy, users can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on available at: https://tools.google.com/dlpage/gaoptout

10. Managing Cookies

Users may configure their browser settings to refuse cookies or notify them when cookies are being used.

You can access and browse eFXdata's website without accepting cookies. However, disabling cookies may limit certain functionality of the website, including:

• Currency filters
• Access to certain pages of the website

11. Do Not Track Signals

Some web browsers transmit “Do Not Track” signals. The Services do not currently respond to Do Not Track signals due to the lack of a standardized industry framework.

12. Data Retention

eFXdata retains personal data only for as long as necessary for operational and security purposes.

Typical retention periods include:

• Cookies: up to two years from initial access
• IP address and server log information: approximately three months

Retention periods may be extended where required for legal, regulatory, or security reasons.

13. Children's Privacy

The Services are not intended for individuals under the age of 18. eFXdata does not knowingly or attempts to collect personal data from children.

14. Anonymous Access

Visitors may access the eFXdata homepage and browse certain public portions of the website without providing personal data.

15. Links to Other Websites

The eFXdata website may contain links to external websites. eFXdata is not responsible for the privacy practices or content of those sites.

Users are encouraged to review the privacy policies of any external websites they visit.

16. Your Data Protection Rights

Depending on your jurisdiction, you may have rights regarding your personal data, including:

• The right to access personal data we hold about you
• The right to request correction of inaccurate data
• The right to request deletion of personal data
• The right to object to certain processing activities
• The right to request restriction of processing

Requests to exercise these rights will be handled in accordance with applicable law.

If you are located in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority if you believe that your personal data has been processed in violation of applicable data protection laws. We encourage users to contact us first so we can attempt to resolve any concerns.

17. California Privacy Rights

Residents of California may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to request information about categories of personal data collected and the right to request deletion of personal data.

18. Contacting Us

For privacy-related inquiries or requests regarding your personal data, you may contact us at:

Email: legal (at) efxdata (dot) com

or by mail:

Boston eFX, LLC
198 Tremont Street, Suite 407
Boston, MA 02116
United States

19. Policy Modification

eFXdata may update this Privacy Policy from time to time. When material changes are made, the date at the bottom of this document will be updated.

Last updated: 12 March MMXXVI