Privacy Policy, Trading House Online

1. Introduction

This Privacy Policy explains how Bills Trading ("we", "us", "our") collects, uses, discloses, and protects personal information when you visit bills-trading.com, register for the Trading House Online live event (the "Event"), take part in its educational sessions, join the Trading House Online Challenge (the "Challenge"), use our Telegram bot or our groups on messaging apps, interact with our marketing, or communicate with us.

Bills Trading is responsible for your personal information as described in this Policy (the law calls us the "controller"). We aim to comply with applicable privacy laws, including the UAE Personal Data Protection Law, the EU and UK General Data Protection Regulation (GDPR), Canada's PIPEDA and Québec's privacy law (Law 25).

We have designated a Privacy Officer responsible for ensuring compliance with applicable privacy laws. Contact information is provided at the end of this Policy. Acknowledging this Policy does not, by itself, constitute consent to the processing of your personal information. Where consent is required by applicable law, we will obtain it separately. Words defined in our Terms of Use mean the same here.

We are not a broker. We organise and promote the Event and the educational sessions. We are not a broker: we do not hold your money, run trading accounts or execute trades. If you join the Challenge, you open a trading account with our partner broker, RaiseFX, operated by Raise Global SA (Pty) Ltd in South Africa and its affiliated companies (the "Broker"), an independent company with its own terms and privacy policy. The Broker is responsible for its platform and services and for the information you give it there. The Challenge has its own Challenge Terms.

2. Information We Collect

We collect personal information in three main ways:

2.1 Information You Provide

We collect information you voluntarily provide, including:

Contact information: name, email address, phone number, country.
Challenge registration data: the details the Broker needs to open your trading account (name, email address, phone number, date of birth, street address, postal code, city and country), if you join the Challenge.
Account information: username, preferences.
Transaction information: purchase history and billing details, if you buy something from us (payment card details are processed by our payment processors; we do not store full card numbers).
Communications: messages you send us (email, chat, SMS, Telegram, WhatsApp, social media), support requests, feedback.
Registration and participation data: event registrations and your answers to our short questions after you register.
Telegram data: your Telegram user ID, username and display name when you use our bot or join our groups, and your phone number if you share it with the bot.
User content you choose to share: testimonials, video answers, comments or other submissions (content you submit for publication may become public).
Consent records and marketing preferences: what you accepted and when, your cookie choice, and your opt-ins and opt-outs.

We will identify any mandatory information, and explain the consequences of not providing it, at the point of collection. All other information is optional.

2.2 Information Collected Automatically

When you use our website, our bot or our groups, we may automatically collect:

Device information: IP address, browser type, operating system, browser language, device identifiers.
Usage data: pages visited, links clicked, time spent, referring URLs, the campaign parameters (UTM) in the link you clicked, and the steps you complete in our bot.
Location data: general geographic location based on IP address.
Cookie and pixel data: online identifiers and browsing activity collected through cookies and similar technologies.

2.3 Information from Third Parties

We may receive information from social media platforms (when you interact with us there), advertising and analytics partners and payment processors. We receive and use such information only where there is a lawful basis for the disclosure and our use of it, including any consent required by applicable law.

If you join the Challenge, the Broker sends us an identifier for your account and tells us whether you already had an account with it and whether your account is linked to the Challenge. Once you agree on the Broker's platform to share your activity with the Challenge, it also sends us:

About your account: your first name, country, account status, your first deposit (amount, currency and date) and the status of your identity and address checks.
About your trading: your closed trades (instrument, buy or sell, size, result and time), and your balance and equity over time.

The Broker never sends us your last name, your password, your identity documents or your payment details. If you ask the Broker to stop sharing, it stops sending us new information. We do not obtain this information if you only attend the Event or the sessions.

3. How We Use Your Information

We only collect and use your information when we have a valid reason to do so, such as to fulfill a contract with you, comply with legal obligations, pursue legitimate business interests where recognised by applicable law, or with your consent. Where UAE law applies, we rely on your consent or an applicable legal exception permitting processing without consent. Specifically, we use your information to:

Deliver the Event: send you the confirmation, the access link and reminders.
Run the Challenge: if you join it, send your Challenge registration data to the Broker, check eligibility, show the leaderboard, count trades for the prize draws, run draws, contact winners, deliver prizes and detect cheating.
Provide products and services: provide access, offer support, manage accounts.
Communicate with you: answer your questions, send service messages and important updates, and use your answers to our short questions to decide how we follow up with you. Some answers in our bot are written automatically by software, and a member of our team may also reply to you through the bot.
Send marketing: news about the Event, the educational sessions and our future events, if you asked for it or where the law allows it, always with a way to stop.
Process payments and prevent fraud: billing, verification, security.
Improve our website and services: analytics, testing, performance monitoring.
Run advertising and measure results: measure and show our ads, including sending scrambled (hashed) email addresses and phone numbers to Meta from our website through its Conversions API, together with page-view and registration events, with your consent where the law requires it. We never send Meta or any advertising platform your deposit, verification or trading information. We do not send Meta or other advertising platforms your trading budget or signals derived from your financial circumstances.
Use recordings and content: use recordings in which you appear and content you choose to share to present our Services, subject to the notice and permissions described in our Terms of Use. Before using your identifiable image, voice, name or content in advertising or promotional material, we will obtain your separate permission identifying the intended uses and how to withdraw it. This permission is optional and is not a condition of participation.
Meet legal obligations and protect our rights: tax, accounting, keeping records of your consent, answering lawful requests, enforcing our terms.

If you are in the European Economic Area or the United Kingdom, our legal bases are:

Contract: delivering the Event and the educational sessions, and providing any other services you request, where processing is necessary to perform our contract with you.
Consent: marketing where the law requires consent, non-essential cookies and tags, sending Meta your visit and registration events with hashed contact details, and using your image, voice, name or other identifiable content in our marketing.
Legitimate interests: security and fraud prevention, improving our Services where consent is not required, defending legal claims and marketing to registrants where the law allows it, provided these interests are not overridden by your rights and freedoms.
Legal obligations: tax, accounting and lawful requests.

You can object at any time to our use of your information based on legitimate interests, including direct marketing.

4. Cookies and Tracking Technologies

This section is our cookie policy. We use cookies, pixels, and similar technologies to keep the website working, remember preferences, understand traffic and performance, measure advertising, and (where enabled) show relevant ads. These may be first-party (set by us) or third-party (set by service providers).

4.1 Types of Cookies

Essential cookies: required for basic site functionality (security, navigation) and to remember your cookie choice. These cannot be disabled through our Cookie settings.
Analytics cookies: help us understand how visitors use our site.
Functional cookies: remember your preferences and settings.
Marketing cookies: measure and show our ads. This includes the Meta pixel (the _fbp and _fbc cookies, kept up to 90 days), which reports page views and registrations to Meta, and a first-party identifier that links your visit to your registration and remembers the campaign that brought you. If we advertise on Google, YouTube or TikTok, their tags may also be present.

Where the law requires it, including for visitors in the European Economic Area, the United Kingdom and Québec, we ask for your consent before we load any non-essential cookie or tag or send Conversions API events. You can change your choice at any time through the Cookie settings link at the bottom of every page. You can reject non-essential cookies as easily as you can accept them. If you withdraw consent, we stop further use of the cookies, tags and Conversions API events that rely on that consent.

4.3 Third-Party Technologies

We may use third-party analytics and advertising tools that place their own cookies on your device. These third parties have their own privacy policies governing their use of your information.

4.4 Your Choices

You can control cookies through your browser settings (block, delete, or limit cookies), device settings, or industry opt-out tools for interest-based advertising. You can also limit Meta's use of your data in your Meta ad preferences. Blocking cookies may affect site functionality.

Do Not Track: our site does not currently respond to "Do Not Track" browser signals.

5. Email and Messaging Communications

We send marketing messages by email, SMS or messaging apps only if you asked for them or where the law allows it without consent. We never use pre-ticked boxes. We follow the electronic marketing rules where you live, including Canada's Anti-Spam Legislation (CASL), the UK Privacy and Electronic Communications Regulations and the EU ePrivacy rules. We identify ourselves in every message and provide a clear way to unsubscribe.

5.2 SMS and Messaging Apps

If you give us your mobile number or contact us on Telegram or WhatsApp, we use it to send you messages about the Event or the educational sessions: confirmations, reminders, updates and, where allowed, promotional content.

Important: we do not sell, share, or disclose mobile phone numbers, messaging opt-in data, or consent records to third parties for their marketing or promotional purposes, except for the sharing of hashed phone numbers with Meta described in Sections 3 and 6, with your consent where required by law.

5.3 Opting Out

You can unsubscribe from marketing emails with the "unsubscribe" link in any email. To stop SMS messages, reply STOP. To stop WhatsApp messages, contact us directly or block us. To stop our Telegram bot, send it /stop or block us. You can leave any of our groups at any time. You may also contact us directly. After opting out, we may still send messages needed to deliver what you requested, such as access links or messages about a registration you already started. We will not use these service messages to send marketing you have opted out of.

6. Disclosure of Your Information

We do not sell your personal information. We may share your information with:

Service providers: companies that build, host and run our website, database, bot, messaging, CRM, analytics, advertising and support on our instructions. They only access the information they need and must protect it.
Telegram: Telegram (Telegram Messenger Inc.) runs the platform for our bot and groups under its own privacy policy. Messages you send our bot are stored by Telegram and are not end-to-end encrypted.
Meta Platforms: advertising measurement and delivery through the Meta pixel and Conversions API, and WhatsApp messaging. For the Meta pixel and Conversions API, where applicable under data protection law, Meta and we share responsibility for collecting this data and sending it to Meta (the law calls us joint controllers). Meta is responsible for its subsequent independent processing under its own privacy policy. WhatsApp messaging is subject to its separate applicable terms and privacy policy.
The public and other members: other group members see your Telegram name and any other profile information visible under your settings. Whatever you post in our groups or live sessions may appear on screen. Promotional use of your identifiable information remains subject to the separate permission described in Section 3.
The Broker: your Challenge registration data, when you join the Challenge, so it can open your account. The Broker then uses it under its own privacy policy.
Business transfers: if we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
Legal requirements: when required by law, court order, or government request, or to protect our rights, safety, or property.
With your consent: for any other purpose with your explicit agreement.

7. Where Your Information Is Handled

Our service providers host our website and our database for us in the European Union and the United States, and people working for us access it from the European Union, Canada and the United Arab Emirates. Our website, our registration page and our bot are delivered by a content delivery network whose servers and short-lived cache are distributed worldwide, so your request may be handled by a server close to you. Your information may therefore be handled outside your country, where the law may be different. When we send information about people in Europe or the United Kingdom to a country without equivalent protection, we use the standard contracts approved by the European Commission and the United Kingdom, or another safeguard the law allows, and you can ask us for a copy. Before we send information about people in Québec outside Québec, we check that it will be properly protected through a privacy impact assessment and a written agreement reflecting that assessment, where Québec law applies. For transfers subject to UAE law, we comply with the applicable conditions for international transfers under the UAE Personal Data Protection Law. We also carry out any required transfer assessments and implement any necessary supplementary safeguards.

8. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

Contact information and registrations: until 24 months pass without any interaction with us. Conversations with our bot and with our support team: 3 months after the Event. If you unsubscribe from marketing, we keep only what we need to stop marketing messages, unless other information is necessary for a separate lawful purpose described in this Policy and remains subject to the applicable retention period. Telegram account identifiers and group participation information are kept only as long as needed to provide the bot or group access you request, subject to the other retention purposes above.
Existing Challenge or broker-related records, if any: we retain only the information necessary to resolve existing obligations or disputes or meet legal requirements, and for no longer than 12 months after the relevant Trading House Online Challenge ends, unless longer retention is legally required or necessary for a specific legal claim. Any date of birth, street address, postal code and city collected solely to open a broker account are deleted once the account is open, or within 30 days if it cannot be opened. We do not reuse these records for new broker referrals or financial promotions.
Recordings and content you submit: as long as necessary for the purposes described in this Policy, subject to any required permission. If you withdraw permission for marketing use of your image, voice, name or content, we stop new marketing uses and remove it from the marketing we control as soon as reasonably possible.
Transaction and accounting records, including any existing prize records: for the period required by applicable tax and accounting laws.
Consent records: up to 3 years after we last rely on them.
Analytics data: retained only as long as necessary for the stated analytics purposes, then deleted or anonymized so that it no longer identifies you.

When no longer needed, we securely delete or anonymize your information.

9. Data Security

We implement reasonable technical and organizational measures to protect your information, including encryption, access controls, and secure data storage. However, no method of transmission or storage is 100% secure.

If a breach creates a legal notification duty, we will notify affected individuals and regulators as required.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: request a copy of the personal information we hold about you.
Correction: request correction of inaccurate or incomplete information.
Deletion: request deletion of your personal information, subject to legal exceptions.
Restriction: ask us to limit how we use your information in some cases, for example while we check a request.
Portability: request a copy of your data in a structured, commonly used electronic format.
Withdraw consent: withdraw consent at any time, for example to stop marketing or the use of your image, voice, name or results. This does not affect the lawfulness of processing based on your consent before its withdrawal.
Object: object to certain uses, and at any time to direct marketing.
Automated decisions: our bot may answer your questions automatically, and you can ask for a person at any time. Where applicable law gives you rights concerning automated decisions, you may request human review, express your views and contest the decision.
De-indexation: if your personal information is publicly available through our Services and causes you harm or is no longer necessary, you may request its removal or de-indexation.
Complaint: lodge a complaint with a supervisory authority.

To exercise these rights, contact our Privacy Officer using the information below. We will respond within the timeframes required by applicable law (typically 30 days, or one month in Europe and the United Kingdom). We may verify your identity before processing your request.

For information held independently by a third party, contact that third party; we will help you if you ask. We remain responsible for handling requests concerning information we hold or process, including any existing Challenge or broker-related records.

10.1 European and United Kingdom Residents

If you are located in the European Economic Area, the United Kingdom or Switzerland, you have rights under the GDPR, the UK GDPR or Swiss law. You may lodge a complaint with your local data protection authority.

10.2 United Arab Emirates Residents

Where the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies to our processing, you have the rights provided by that law. Where UAE law applies, we rely on your consent or an applicable legal exception permitting processing without consent, and you may object to direct marketing at any time.

11. Children's Privacy

Our services are intended for adults aged 18 or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we delete it promptly and stop that person from using our Services, subject to any retention required by law. If you believe we have information about a child, please contact us.

12. Third-Party Links

Our website, bot and groups may contain links to third-party websites or services. We are not responsible for their independent privacy practices, but remain responsible for our own collection, use and disclosure of your information as required by applicable law. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For important changes, we will tell you before they take effect. Where a change requires new consent under applicable law, we will obtain that consent before the changed processing begins.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Privacy Officer:

Privacy Officer: [email protected], subject "Privacy"

14.1 Privacy Complaints

If you are not satisfied with our response, you may file a complaint with the appropriate authority:

United Arab Emirates: the UAE Data Office or other competent authority responsible for the applicable data protection law.
United Kingdom residents: Information Commissioner's Office: www.ico.org.uk
European Economic Area residents: the data protection authority of your country (list at www.edpb.europa.eu).
Québec residents: Commission d'accès à l'information du Québec: www.cai.gouv.qc.ca
Canadian residents: Office of the Privacy Commissioner of Canada: www.priv.gc.ca
Swiss residents: Federal Data Protection and Information Commissioner: www.edoeb.admin.ch