Privacy Policy

Protecting your privacy and personal data is an absolute priority for Shift Profitex. We are committed to handling your information responsibly, transparently and exclusively in accordance with applicable data protection laws – in particular the General Data Protection Regulation (GDPR). This Privacy Policy explains clearly and in straightforward language which data we collect, why we collect it, how long we store it and how we protect it.

1. Data controller

The operator of the Shift Profitex website and platform is responsible for the processing of your personal data within the meaning of the GDPR. You can find contact details and further information in the imprint of this website. Our Data Protection Officer is available for any questions relating to data privacy.

2. Data we collect

We only collect and process data that is strictly necessary to provide our services, fulfil legal obligations and operate the platform securely. In particular, this includes:

Identity data: first and last name, date of birth (for age and identity verification).
Contact details: email address, telephone number (optional), country of residence and, where applicable, address.
Account and transaction data: payment information, deposits and withdrawals, transaction history.
Technical and usage data: IP address, browser type, device information, access times, log files.
Verification documents: identity documents, proof of address or other documents required for KYC/AML checks (only where legally required).

We do not collect special categories of personal data (sensitive information such as health data, religious beliefs etc.), unless there is an explicit legal obligation or your explicit consent.

3. How we collect data

Your data is collected through various secure channels:

Directly from you: during registration, when maintaining your profile, submitting verification documents or using contact forms.
Automatically: via cookies, server log files, analytics tools and device information while you use the platform.
From third parties: payment service providers (e.g. for deposits/withdrawals), identity verification partners (KYC/AML) or – with your consent – social login services.

4. Purposes of processing

We process your data solely for the following clearly defined purposes:

Creating and managing your account and providing platform functionality.
Secure processing of deposits, withdrawals and payment transactions.
Personal customer support and responding to your enquiries.
Compliance with legal and regulatory obligations (e.g. KYC, AML, tax law).
Ensuring IT and platform security (fraud detection, abuse prevention).
Improving the user experience and platform functionality.
Advertising and marketing – only with your explicit consent.

5. Legal bases for processing

Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).
Compliance with legal obligations (Art. 6(1)(c) GDPR), e.g. anti-money laundering requirements.
Legitimate interests (Art. 6(1)(f) GDPR), such as security and fraud prevention.
Your explicit consent (Art. 6(1)(a) GDPR), e.g. for marketing or optional features.

6. Sharing of data

Your data is only shared where necessary and exclusively with carefully selected partners:

Payment service providers and banks for processing transactions.
Specialised verification partners for KYC/AML checks.
IT and cloud service providers (only under data processing agreements).
Analytics and security tools (anonymised or pseudonymised where possible).
External advisors (e.g. lawyers, tax consultants) as required by law.
Authorities and courts where legally obliged or for the enforcement of rights.

Your data is never sold or commercially passed on to third parties.

7. International data transfers

Some of our service providers (for example cloud providers or analytics tools) are located outside the European Economic Area (EEA). In such cases, we ensure an adequate level of data protection by implementing appropriate safeguards (e.g. EU Standard Contractual Clauses, Binding Corporate Rules or adequacy decisions).

8. Data security

We use state-of-the-art technical and organisational measures to protect your data:

End-to-end encryption during transmission (TLS 1.3+).
Encrypted storage of sensitive data (AES-256).
Regular security audits and penetration tests by independent experts.
Continuous monitoring for unusual access patterns and attacks.
Access restrictions and strict permission management within our team.
Segregated client accounts for customer funds with regulated partners.

Even with all these measures, no system can be guaranteed to be absolutely secure – however, we consistently reduce potential risks to a very low level.

9. Data retention

We only store your data for as long as necessary for the purposes described:

For the duration of active use of your account and as long as the contract is in place.
After account closure, for as long as statutory retention obligations apply (e.g. 5–10 years for tax and regulatory purposes).
Until you withdraw your consent for processing activities based on consent (e.g. marketing).

Data that is no longer required is promptly and securely deleted or anonymised.

10. Your rights as a data subject

You have extensive rights regarding your personal data. At any time, you may:

Request information about the data we hold about you.
Request correction of inaccurate data or completion of incomplete data.
Request deletion of your data (provided no statutory retention obligations apply).
Request restriction of processing.
Receive your data in a machine-readable format and transfer it to another controller.
Withdraw your consent at any time (without affecting the lawfulness of processing prior to withdrawal).
Lodge a complaint with a supervisory authority (e.g. your local data protection authority).

11. Cookies and similar technologies

We use cookies and comparable technologies to ensure platform functionality, analyse usage and provide you with an optimal user experience. Essential cookies are always active; for analytics and marketing cookies, we obtain your consent. Details can be found in our separate Cookie Policy.

12. Changes to this Privacy Policy

We may amend this Privacy Policy when necessary, for example due to legal changes or new features. The current version is always available here on the website. We will inform you of any material changes by email or via the platform.

13. Contact for data protection matters

If you have questions, suggestions or wish to exercise your rights, please contact us by email at shiftprofitex@gmail.com or via the contact form. Our Data Protection Officer will respond to you as soon as possible.

By using Shift Profitex, you confirm that you have read, understood and accepted this Privacy Policy.

Thank you for placing your trust in us. Protecting your data is – and will remain – our top priority.