Privacy Policy

Who is responsible

The data controller is Lurotix Markets Ltd., trading as BTC 800 + Lurotix, with its office at Independence Square, Port of Spain, Trinidad and Tobago. Questions and requests about this policy go to [email protected]. Where the platform works with intermediaries for execution and custody, each party acts on the data it needs for its own role.

Personal data we collect

The platform collects the data needed to open and operate an account and to answer you: first and last name, email address, phone number, country of residence, and, as onboarding proceeds, identity and address documents, date of birth, nationality, and financial information relevant to risk assessment and source-of-funds checks. The content of messages you send is processed to answer them.

Usage data

When you use the site, the platform collects technical data: IP address, browser type and version, device type, pages visited, referring page, and timestamps. This data keeps the service secure, diagnoses faults, and supports the analytics described below. It is not used to build advertising profiles.

Cookies

The site uses a small number of cookies and equivalent storage: strictly necessary cookies for session integrity and security, functional storage for preferences such as the interface state, and, if analytics is enabled, measurement cookies. You can refuse non-essential cookies in your browser without losing access to the site's core functions. No cookie on this site is used for third-party advertising.

Controllers and processors

Lurotix Markets Ltd. is the controller for account data. Service providers, such as hosting, email delivery, identity verification, and payment processing providers, act as processors: they handle data on documented instructions, under contractual protection, for no purpose of their own. Intermediaries providing execution and custody act as controllers for the parts of the relationship they are party to.

Purposes and legal bases

Data is processed to perform the contract you enter when you register (operating the account, executing agreed services), to comply with legal obligations (identity verification, record keeping, reporting), for legitimate interests (security, fraud prevention, service improvement), and on the basis of consent for marketing communication, which you can withdraw at any time without affecting your account.

Data Protection Act framework alignment

The platform's data handling is aligned with the Data Protection Act framework applicable in Trinidad and Tobago: collection is limited to stated purposes, data is accurate and kept current, security is proportionate to sensitivity, retention is bounded, and you can ask what is held about you and correct it.

How long data is kept

Account and verification records are kept for the periods required by applicable financial and AML requirements, which generally means years beyond the end of the relationship. Marketing consent records are kept until withdrawal plus a short confirmation period. Usage data is kept no longer than needed for security and analytics, and support correspondence is kept for the life of the account plus any period a complaint or dispute makes necessary.

Who data is shared with

Personal data is shared with: identity verification providers, so checks can run; execution and custody intermediaries, who must know their client; payment providers, to move the funds you direct; IT providers under processing agreements; and regulators, courts, and law-enforcement bodies, including the Financial Intelligence Unit of Trinidad and Tobago, where disclosure is required by law. Data is never sold.

Cross-border transfers

Because trading venues and service providers operate internationally, data may be processed outside Trinidad and Tobago. Where that happens, transfers use safeguards appropriate to the data: contractual clauses with the provider, and where available, frameworks recognized under the applicable data-protection requirements.

Security of data

Transport is encrypted with TLS, storage is encrypted at rest, identity documents sit in a separate store with restricted access, and access to personal data is limited to roles that need it and logged. The fuller technical picture, including 2FA, session control, and the audit log, is on the Security page. No system is perfectly secure, and if a breach affecting your data occurs, you will be informed as the law requires.

Your rights

You can ask for access to the personal data held about you, correction of what is inaccurate, deletion of what is no longer needed, restriction of processing while a dispute is resolved, a copy of your data in a portable form, and objection to processing based on legitimate interests. To exercise any of these, write to [email protected] from your registered address. Identity is confirmed before any disclosure, and requests are answered within the timeframes of the applicable framework.

Marketing

Marketing emails are sent only where you consented, every message contains a working unsubscribe link, and withdrawal is honored promptly. Choosing not to receive marketing has no effect on service or account terms.

Analytics

The site carries a measurement slot that the operator can enable. When enabled, analytics reports on aggregate usage, pages, and referrers, with IP truncation where the tool supports it. While the slot is empty, no analytics runs and no third-party measurement request is made.

Children

The services are directed at adults. Accounts are not opened for persons under 18, and data knowingly collected from a child is deleted promptly upon discovery.

Links to other sites

The site links to pages it does not control, such as regulator information. This policy does not cover those sites, and you should read their own notices.

Changes to this policy

The policy is updated when services or legal requirements change. The current version is always the one published on this page, and material changes affecting how your data is used are announced to registered clients in advance of taking effect.

Contact

Privacy questions, access requests, and complaints about data handling go to [email protected] or Lurotix Markets Ltd., Independence Square, Port of Spain, Trinidad and Tobago. Data-handling complaints can also follow the route on the Complaints page.