The controller responsible for your personal data is Follow The Market Ltd., [registered address], Nigeria, company registration number [number]. Contact for privacy matters: ftmwebnation@gmail.com. [Data protection officer, and EU/UK representative if one is required for customers there]
| Category | What it includes | Where it comes from |
|---|---|---|
| Account data | Email address; a password (stored only as a protected hash by our authentication provider, never in readable form); the plan(s) you hold | You, and our payment system when you buy |
| Payment data | Your email, plan purchased, payment status and reference. Card and bank details are entered on Stripe's page and are not received or stored by FTM | You, via Stripe |
| Trading-account data | The MT5 account number, broker server and master trading password you enter in the connect form, and the risk profile you pick. The password is used only to log in to your trading account and place trades as you have instructed. [Confirm with the engine team how it is stored and protected] | You |
| Trading activity | Account balance, equity, open positions, trade history and status, reported by the trading terminal connected to your account | Your trading account |
| Identity checks | Where we are required or choose to verify identity or screen against sanctions lists: details you provide for that purpose | You, and screening services |
| Support messages | The content of emails or chats you send us, and our replies | You |
| Technical data | IP address, browser type and the time of requests, kept in server logs for security and reliability | Your browser |
We use service providers who process data on our behalf under agreements that limit what they may do with it. We do not sell your personal data.
| Provider | Purpose |
|---|---|
| Supabase | Customer accounts and login (our project is hosted in Frankfurt, Germany) |
| Stripe | Taking payments and sending payment receipts |
| Vercel | Hosting the website and its server functions |
| Cloudflare | Protecting and routing traffic to our trading systems |
| Your broker (for example Deriv) | Executing trades on your own trading account |
| [Hosting provider of the trading-engine servers] | Running the systems that connect to your trading account |
We may also disclose data where the law requires it, for example to courts, regulators or law-enforcement authorities.
FTM is registered in Nigeria, and some providers, such as Stripe, Vercel and Cloudflare, may process data in the United States or other countries. Your data is therefore handled outside the country where you live, and for customers in the EEA or UK, outside the EEA/UK. Where the law requires safeguards for such transfers we rely on recognised mechanisms, such as standard contractual clauses or an adequacy decision. [Counsel to confirm the safeguard for each provider and for transfers to FTM itself]
We keep personal data only as long as needed for the purposes above. In general: account data for as long as your account exists; payment and accounting records for the periods required by applicable commercial and tax law; support messages [period]; server logs [period]. When data is no longer needed we delete or anonymise it. [Confirm retention periods with counsel]
Connections to the website are encrypted. Passwords for FTM accounts are stored only as protected hashes. Secret keys that connect our systems are held on the server side and are never placed in the website's code or sent to your browser. Access to customer data is limited to people and systems that need it. No system is perfectly secure; if a breach affects your rights we will notify you and the authorities as the law requires.
This website does not use advertising cookies, tracking pixels or analytics tools. It does store a small amount of data in your browser that it needs to work:
The site also loads the Inter typeface from Google Fonts and a script library from the jsDelivr content network. Your browser contacts those services directly when the page loads, so they receive your IP address. [Counsel to confirm whether these should be self-hosted]
If you choose to take part in the FTM community, other members may see the display name, country and short description you choose, and your standing on the leaderboard. You control this with the "Show me in the community" switch in your profile; turning it off hides you. You can also block and report other members.
Under the GDPR and the Nigeria Data Protection Act you have the right to: access your data; have it corrected; have it erased; restrict its use; receive it in a portable format; object to processing based on our legitimate interests; and withdraw consent at any time where we rely on it. To use any of these rights, email ftmwebnation@gmail.com. We may need to confirm your identity first, and some data we must keep to meet legal obligations.
The services are for people aged 18 or over. We do not knowingly collect data from anyone under 18; if you believe we have, contact us and we will delete it.
We may update this policy as our services change. The "Last updated" date at the top shows the current version. If a change is significant we will tell you by email or in your dashboard.
Questions about this policy or your data: ftmwebnation@gmail.com. You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live or work, or the Nigeria Data Protection Commission. [Counsel to confirm the competent authorities].
This document is a draft prepared from how the website and its connected services currently work. It is not legal advice and should be reviewed by a qualified data-protection lawyer before it is relied upon. Items highlighted in yellow must be completed or confirmed first.