Privacy Policy

The Short Version

This Privacy Policy explains how ForexBrokerLead ("we", "us") collects, uses, and protects personal data when you visit our website or use our services. It applies to website visitors and clients who purchase leads — it does not apply to the leads themselves (those have their own consent records, available on request).

1. Who We Are & Data Controller

ForexBrokerLead is the data controller for personal data collected via this website. That means we decide what data to collect and how to use it.

• Company: ForexBrokerLead
• Email: support@forexbrokerlead.com
• Phone: +8801985908941
• Data Protection Officer: dpo@forexbrokerlead.com
• EU Representative (Article 27): Available on request.

If you're in the EU/EEA, UK, or Switzerland, you have the rights described in Section 7 below.

2. What Data We Collect

2.1 Data you give us (when you fill out a form)

• Name, email address, phone number (required)
• Company name, country, job title (optional)
• Lead type interest, budget, requirements (message field)
• Source page (which page you submitted the form from)

2.2 Data we collect automatically

• IP address (used for geo-blocking and fraud detection, not stored in identifiable form for >30 days)
• Browser type, device type, operating system
• Pages visited, time on page, referrer URL
• Anonymous analytics cookies (Google Analytics 4, Microsoft Clarity)

2.3 Data we DON'T collect

• We don't run browser fingerprinting.
• We don't read your email or scan your contacts.
• We don't use third-party advertising pixels that track you across other websites (our Meta Pixel fires only on our own pages).
• We don't sell, rent, or share your data with third parties for their marketing.

3. Legal Basis for Processing (GDPR)

Under GDPR Article 6, we process your personal data on the following legal bases:

• Consent (Art. 6(1)(a)) — when you submit our contact form, you consent to us using your data to respond to your enquiry. You can withdraw consent at any time.
• Contract (Art. 6(1)(b)) — when you purchase leads, we process your data (name, email, payment info) to fulfill the contract.
• Legitimate interest (Art. 6(1)(f)) — we use anonymous analytics to improve our website. Our legitimate interest: making the site better. Your interest: not having a broken website. We've balanced these and concluded analytics is fine; you can opt out below.
• Legal obligation (Art. 6(1)(c)) — we may retain certain records (e.g. invoices, payment receipts) to comply with tax and accounting laws.

4. How We Use Your Data

We use your data for the following purposes:

• Responding to your enquiry — we email/call you back about your lead request.
• Delivering leads — if you place an order, we email your CSV to the address you provided.
• Fulfilling orders — processing payment, sending invoices, delivering leads, providing support.
• Improving our website — anonymous analytics to see which pages work and which don't.
• Marketing — we may email you occasionally with relevant offers. You can unsubscribe with one click (every email has an unsubscribe link). We never text-message you for marketing without explicit opt-in.
• Fraud prevention — checking orders against known fraud patterns, blocking IPs with suspicious activity.
• Legal compliance — keeping records for tax, accounting, and regulatory purposes.

5. Who We Share Data With

We share data with the following categories of recipients — only the minimum necessary for each purpose:

• Payment processors (Stripe, PayPal, your bank) — to process your payment. We never see or store your full card number.
• Email service provider (our hosting provider) — to deliver emails to and from you.
• Analytics providers (Google Analytics 4, Microsoft Clarity) — anonymous, aggregate data only.
• Hosting provider — to host this website and its database.
• Legal authorities — only if compelled by valid court order or legal process.

We do not share your data with:

• Other lead generation companies.
• Brokers or exchanges (we sell leads to them, but we don't sell your data to them).
• Advertising networks for cross-site tracking.
• Data brokers or aggregators.

See our Data Processing Agreement for the full list of subprocessors and their roles.

6. How Long We Keep Your Data

• Form submissions (no purchase): 24 months, then automatically deleted.
• Client account data: 7 years after your last purchase (for tax/accounting compliance), then deleted.
• Payment records: 7 years (legal requirement in most jurisdictions).
• Email correspondence: 24 months.
• Analytics data: 14 months (Google Analytics default).
• Server logs (IP addresses): 30 days.

You can request earlier deletion at any time — see Section 7.

7. Your Rights (GDPR / CCPA / UK GDPR)

If you're in the EU/EEA, UK, Switzerland, or California, you have the following rights regarding your personal data:

• Right of access — request a copy of all personal data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure ("right to be forgotten") — request deletion of your personal data.
• Right to restrict processing — ask us to limit how we use your data.
• Right to data portability — receive your data in a machine-readable format (JSON or CSV).
• Right to object — object to processing based on legitimate interest or for marketing.
• Right to withdraw consent — at any time, for processing based on consent.
• Right to lodge a complaint — with your local data protection authority (EU) or the ICO (UK).

To exercise any of these rights, email support@forexbrokerlead.com with the subject line "DSAR — [Your Name]". We respond to all valid requests within 30 days (usually within 5).

8. Cookies & Tracking

We use cookies for two purposes: keeping the website working (essential cookies) and understanding how visitors use the site (analytics cookies). See our Cookie Policy for the full list.

When you first visit, you'll see a cookie banner. You can:

• Accept all — analytics cookies load and start tracking.
• Decline — only essential cookies load; no analytics tracking.
• Change your mind later — there's a "Cookie preferences" link in the footer.

We don't use advertising cookies that track you across other websites.

9. Data Security

We take security seriously. Here's what we do:

• Encryption in transit: All traffic uses TLS 1.3 with HSTS.
• Encryption at rest: All stored personal data is encrypted with AES-256.
• Access control: Only authorized team members can access personal data, with MFA required.
• Regular audits: We conduct quarterly security reviews and annual penetration tests.
• Breach notification: If we suffer a breach affecting your data, we'll notify you within 72 hours (per GDPR Article 33).
• PCI DSS: We never store full card numbers — all card processing goes through our PCI-DSS Level 1 certified payment processor.

No system is 100% secure, but we've done the work to make ours as secure as reasonably possible.

10. International Data Transfers

ForexBrokerLead operates globally. Your data may be processed in countries other than your own, including the UK, EU, US, and Bangladesh.

For transfers out of the EU/EEA/UK, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• UK International Data Transfer Addendum (for UK-to-international transfers).
• EU-US Data Privacy Framework (for transfers to US-based subprocessors who are certified).

A copy of our SCCs is available on request — email support@forexbrokerlead.com.

11. Children's Privacy

Our services are strictly B2B — we do not knowingly collect data from anyone under 18. If you believe a minor has submitted data to us, please contact support@forexbrokerlead.com and we'll delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We'll bump the "Last updated" date at the top of this page and notify active clients by email if material changes are made.

13. Contact

Questions about your privacy or this policy?

• Email: support@forexbrokerlead.com
• Data Protection Officer: dpo@forexbrokerlead.com
• Phone: +8801985908941

You can also lodge a complaint with your local data protection authority. In the EU: find your DPA here. In the UK: the Information Commissioner's Office.