Privacy Policy.

Introduction

This Privacy Policy explains how ZZL (“we”, “us”, “our”) collects, uses, and protects personal information you provide when accessing our website, registering an account, or using our challenge and funded-trader services. By using our services you consent to the practices described in this policy.

We are committed to protecting your privacy and handling your data with care. This policy applies to all visitors and registered traders of ZZL.

Information We Collect

We collect the following categories of personal information:

• Account data: name, email address, date of birth, country of residence, phone number, password (encrypted)
• Identity verification (KYC): government-issued ID, proof of address, selfie verification — required before payouts
• Payment data: payment method details processed by our third-party payment processors. Card numbers are NOT stored on our servers
• Trading data: challenge purchases, account performance, trade history, payout history
• Technical data: IP address, device type, browser, operating system, log files, cookies, and similar identifiers
• Communications: support tickets, chat transcripts, email correspondence

How We Use Your Information

We use your information to:

• Provide, operate, and improve our services
• Process payments and payouts
• Verify your identity and comply with anti-money-laundering and counter-terrorism-financing obligations
• Detect and prevent fraud, abuse, and security incidents
• Send service-related notifications (account updates, payout confirmations, security alerts)
• Send marketing communications, where you have opted in, including launch offers, product updates, and educational content. You can unsubscribe at any time
• Comply with legal obligations and respond to lawful requests from public authorities

Legal Basis For Processing

We process your personal data based on one or more of the following legal grounds:

• Contract: processing necessary to perform the trader agreement with you
• Legitimate interests: processing necessary to operate and secure our services, prevent fraud, and improve our offerings
• Legal obligation: processing required by applicable laws (KYC, AML, tax)
• Consent: for marketing communications and optional services where consent is required

Sharing Your Information

We do NOT sell your personal data. We share your data only with:

• Service providers who help us operate ZZL (payment processors, identity verification providers, cloud hosting, customer support tooling, email delivery, analytics). These providers are bound by data-processing agreements.
• Trading platform partners (cTrader, MatchTrader, MetaTrader 5) to provision and operate your trading accounts
• Regulatory and legal authorities when required by law, court order, or to protect rights and safety
• Successors in the event of a merger, acquisition, or sale of assets, subject to the same protections described in this policy

Cookies And Tracking

We use cookies and similar technologies to recognise you across visits, maintain your session, analyse traffic, and personalise our marketing. You can control cookies through your browser settings; disabling cookies may affect some site functionality.

We use both first-party cookies (set by ZZL) and third-party cookies (set by analytics, marketing, and payment providers).

Data Retention

We retain personal data for as long as necessary to fulfil the purposes set out in this policy, including legal, accounting, and reporting requirements. Account and trading data are typically retained for the duration of your account plus a period of up to 7 years thereafter to comply with regulatory recordkeeping obligations. KYC data is retained as required by applicable AML laws.

Your Rights

Depending on your jurisdiction you may have rights to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data (subject to legal retention obligations)
• Restrict or object to certain processing
• Data portability — receive your data in a structured machine-readable format
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at privacy@zzl.com.

Security

We implement industry-standard technical and organisational measures to protect your personal data, including TLS encryption in transit, encryption at rest for sensitive fields, role-based access controls, regular security audits, and breach notification procedures. No system can be guaranteed completely secure; please notify us immediately if you suspect a security incident affecting your account.

International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including jurisdictions whose data protection laws may differ from yours. When we transfer data internationally, we put in place appropriate safeguards (such as standard contractual clauses) to protect your data in accordance with this policy and applicable law.

Changes To This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to you through your registered email address or via a prominent notice on our website. The “last updated” date at the top of this policy indicates when it was most recently revised.

Contact

If you have questions about this Privacy Policy or our data practices, contact us:

• Email: privacy@zzl.com
• Support: support@zzl.com
• Registered office: [INSERT REGISTERED ADDRESS]