Privacy Policy

1. Controller

The data controller is the company operating A-Book Funded, identified in full on our Legal & company information page. Privacy questions: support@abook-funded.uk.

2. What we collect and why

• Account data (name, email, country, language), to create and operate your account. Legal basis: contract.
• Contact details (email, phone), to send you your credentials, invoice, confirmations, rule warnings and payout notifications, by email, SMS and phone. Legal basis: performance of the contract. Marketing is separate and rests on your consent, withdrawable in one click.
• Payment data, processed by our payment providers; we receive confirmation, amount and payment references, never full card numbers. Legal basis: contract, legal obligations.
• Identity verification (KYC), before your first payout, our verification provider processes your identity document and a liveness check. Legal basis: legal obligation (AML) and legitimate interest in preventing fraud.
• Trading activity on simulated accounts (orders, positions, equity history), to operate the evaluation, calculate rewards, and evidence rule decisions. Legal basis: contract.
• Device and connection data (IP address, device identifiers, session metadata), to secure accounts and detect prohibited multi-account behaviour. Legal basis: legitimate interest. Decisions that end an account are reviewed by a human; they are never taken by automated means alone.
• Assistant conversations, what you type into the chat bubble and the answers given, so we can improve our support and this site. We never ask for identity documents, account numbers or payment details there, and you should not type them. Legal basis: legitimate interest. While a conversation is open it is also held in your browser's session storage, so that it survives moving from one page to another; it is erased when you close the tab, and it is not a cookie.

3. Processors and recipients

We share data only with processors needed to run the Service: our trading platform and CRM provider (Leverate), our identity verification provider (Sumsub), our payment providers, our hosting provider, Anthropic (the assistant on this site) and, for visitors who consent to analytics on the public site, Google (Google Analytics) and Microsoft (Clarity). Each acts under contract and processes data only on our instructions. We do not sell personal data, and our platform provider is contractually barred from monetising it.

4. International transfers

Where data leaves the UK/EEA, transfers rely on adequacy decisions or standard contractual clauses. Details available on request.

5. Retention

Account and trading records: 6 years after account closure (evidence and accounting obligations). KYC records: 5 years after the end of the relationship (AML). Support conversations: 3 years. Assistant conversations: 12 months. Data no longer needed is deleted or anonymised.

6. Your rights

Under UK GDPR and GDPR you can request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. Write to support@abook-funded.uk; we answer within one month. You may complain to the ICO (UK) or your local authority (in France, the CNIL).

7. Cookies

The public site uses strictly necessary storage (your language preference and your consent choice) and, only if you accept the analytics category, audience measurement and session replay. Session replay reconstructs an anonymised view of your visit (the pages you saw, where you clicked and scrolled) so we can find and fix what blocks people. It is not a recording of your screen or your camera. Personal and payment fields are masked in the browser before anything is sent, so we never receive their contents. No advertising trackers, and no profiling. You can withdraw consent at any time from « Cookie preferences » in the footer, which stops the capture immediately.