Privacy Policy

Last updated: 22 September 2026

1. Who we are

This Privacy Policy explains how OT PMC ("OT PMC", "we", "us" or "our") collects and processes personal data when you visit our website, register for an account, contact us, subscribe to our communications or use our services. We act as the data controller for the personal data described in this policy. We are committed to handling your information lawfully, fairly and transparently, and to keeping it secure.

2. The personal data we collect

Information you provide to us

Registration and account data — your name, email address, telephone number, country of residence, password (stored only in securely hashed form) and account preferences.
Enquiry data — the details you submit through our contact forms, by email or by telephone, including your name, contact details, the topic of your enquiry and the content of your message.
Newsletter and communication data — your email address and communication preferences when you subscribe to research, market updates or other communications.
Client onboarding data — where you apply for trading or portfolio management services, we may collect additional information required by law or to assess suitability, such as identity documents, proof of address, date of birth, financial information, investment experience and risk tolerance.

Information collected automatically

Technical data — your IP address, browser type and version, device type, operating system, time zone setting and similar information.
Usage data — the pages you visit, the time and date of access, referring pages and actions taken on our website, recorded in server logs for security and operational purposes.
Account activity — sign-in times and security events related to your account.

3. How we use your personal data

To create, administer and secure your account and to authenticate you when you sign in.
To respond to your enquiries and provide the information or services you request.
To assess suitability and appropriateness, and to verify your identity, where required before providing services.
To send you research, market commentary and service updates you have subscribed to.
To send important administrative messages about your account, our services or changes to our terms and policies.
To maintain the security and integrity of our website, including preventing fraud, abuse and unauthorised access.
To comply with legal and regulatory obligations, including record-keeping, anti-money-laundering and counter-terrorist-financing requirements.
To analyse and improve the performance, content and usability of our website and services.

4. Legal bases for processing

Where data protection laws require a legal basis for processing, we rely on one or more of the following:

Contract — processing necessary to provide the account or services you have requested, or to take steps at your request before entering into an agreement.
Legal obligation — processing necessary to comply with laws and regulations that apply to us.
Legitimate interests — processing necessary for our legitimate interests, such as securing our website, preventing fraud and improving our services, where those interests are not overridden by your rights.
Consent — for example, to send you marketing communications. You may withdraw your consent at any time.

5. Cookies

Cookies are small text files placed on your device when you visit a website. We use only the cookies that are necessary for our website to function securely:

Cookie	Purpose	Type	Duration
Authentication cookie	Keeps you signed in to your client area and protects your session	Strictly necessary	Session, or longer if you choose to stay signed in
Anti-forgery cookie	Protects forms such as registration, sign-in and contact against cross-site request forgery attacks	Strictly necessary	Session

Strictly necessary cookies cannot be switched off in our systems, as the website cannot function securely without them. You can set your browser to block or delete cookies, but some parts of the website, such as the client area, will then not work. We may also use your browser's local storage to remember simple display preferences; this information stays on your device.

6. Third-party content and services

To provide live market information and a consistent visual experience, our website incorporates content from third-party providers:

TradingView — live charts, quotes, economic calendars and related widgets are delivered by TradingView. When these widgets load, your browser connects directly to TradingView's servers, and TradingView may collect technical data and set its own cookies in accordance with its privacy policy.
European Central Bank reference rates — reference exchange rates are retrieved by our servers from a publicly available data service. No personal data is shared in this process.
Web fonts — typefaces are delivered by Google Fonts, which requires your browser to connect to Google's servers and transmit your IP address.

We are not responsible for the privacy practices of third parties, and we encourage you to review their policies. Links to external websites are provided for convenience only.

We do not sell your personal data. We share it only where necessary, and only with:

service providers who host our website, deliver email and provide IT, security and support services, acting on our instructions and under appropriate confidentiality obligations;
brokers, liquidity providers, custodians, banks and payment providers, where necessary to provide services you have requested;
identity-verification and fraud-prevention providers, where required;
professional advisers, such as lawyers, auditors and insurers, where necessary;
regulators, law enforcement agencies, courts and other public authorities, where we are required or permitted by law to do so; and
a purchaser or successor in the event of a merger, acquisition or reorganisation, subject to equivalent protections.

8. International data transfers

Because our services and service providers operate internationally, your personal data may be transferred to, stored in or processed in countries other than your own, which may have different data protection laws. Where we transfer personal data internationally, we take appropriate steps to ensure that it receives an adequate level of protection, such as relying on adequacy decisions, standard contractual clauses or other safeguards recognised by applicable law.

9. Data retention

We keep personal data only for as long as necessary for the purposes described in this policy. In general:

account data is kept for as long as your account is active and for a period afterwards as required by law or to resolve disputes;
client records subject to regulatory requirements are retained for the minimum period required by applicable law, which may be several years after the relationship ends;
enquiry data is kept for as long as needed to respond to and follow up on your enquiry, and then deleted or anonymised;
newsletter data is kept until you unsubscribe; and
server logs are kept for a limited period for security and troubleshooting purposes.

10. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. These include encrypted connections (HTTPS), hashing of passwords, access controls, protection against cross-site request forgery and restricted access to personal data on a need-to-know basis. No method of transmission over the internet or of electronic storage is completely secure, however, and we cannot guarantee absolute security. Please keep your password confidential and notify us immediately if you suspect any unauthorised use of your account.

11. Your rights

Depending on the laws that apply to you, you may have the right to:

request access to the personal data we hold about you;
request correction of inaccurate or incomplete data;
request deletion of your data, subject to our legal retention obligations;
request restriction of, or object to, certain processing, including processing based on legitimate interests;
request a copy of your data in a portable format;
withdraw consent at any time, where processing is based on consent; and
lodge a complaint with the data protection authority in your country of residence.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity before responding, and we will respond within the time frames required by applicable law.

12. Marketing preferences

We will send you newsletters, research and marketing communications only where you have agreed to receive them or where otherwise permitted by law. Every such message includes a simple way to unsubscribe, and you may also contact us at any time to update your preferences. Unsubscribing from marketing will not affect important service messages about your account.

13. Children

Our website and services are intended only for persons aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe that a minor has provided us with personal data, please contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal requirements. The date at the top of this page shows when it was last revised. Where changes are significant, we will take reasonable steps to notify you, for example by email or by a notice on our website.

15. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise your rights, please contact us at info@otpmc.com or through our contact page. Please include "Privacy" in the subject line so that we can direct your request promptly.