Privacy Policy

1. Who we are and how to contact us

Master Forex Academy is the data controller responsible for the personal data described in this policy. We are a trading education business: we sell and deliver courses about the foreign exchange market. We do not provide investment advice, manage client money, or execute trades on anyone's behalf, and we therefore do not process the kinds of financial data a broker or advisor would.

Our registered address is:

For any question about this policy, or to exercise any of the rights described in section 8, contact us at info@masterforexit.com. We aim to respond within 5 working days and are required to respond substantively within one month.

2. The personal data we collect

We collect only what we need, and we collect it in three ways.

a. Data you give us directly

• Free lesson requests: your first name and email address, and whether you consented to marketing emails.
• Course purchases: your name, email address, billing address, country, and the details of what you bought. Where required for EU VAT, we also record the country we determined you are resident in.
• Payment data: card and payment details are entered directly with our payment processor. We never receive or store your full card number. We receive only a transaction reference, the amount, the outcome, and the last four digits of the card.
• Support and enquiries: the content of emails or contact form messages you send us, including anything you choose to tell us.
• Mentorship participants: any trading plan, journal or chart analysis you voluntarily submit for educational feedback.

b. Data we collect automatically

• Technical data: your IP address, browser type and version, device type, operating system, language and referring page.
• Usage data: which pages and lessons you view, when, and for how long; and which links you click.
• Cookie and pixel data: identifiers set by us or by the third parties named in section 4, but only where you have consented to non-essential cookies.

c. Data we receive from third parties

• Confirmation of payment status from our payment processor.
• Aggregate advertising statistics from Meta — for example how many people who saw an ad later visited the site. Where you have consented to marketing cookies, this may be linked to your visit.
• Email engagement data (opens, clicks, bounces, unsubscribes) from our email provider.

We do not collect special category data (such as health, political opinions or biometric data), and we ask that you do not send it to us.

3. Why we use your data and our legal basis

Under the UK and EU GDPR we must have a lawful basis for each use of your data. Ours are set out below.

Where we rely on consent, you can withdraw it at any time without affecting anything we did before you withdrew it. Withdrawing consent to marketing does not remove your access to a course you have bought.

4. Cookies and tracking technologies

When you first visit, we ask for your cookie choices. Until you choose, only strictly necessary cookies are set — no analytics or advertising tags load. You can change your choices at any time using the “Cookie settings” link in the footer of every page.

• Strictly necessary. Required for security, load balancing and to remember your cookie preference. These do not require consent because the site cannot function safely without them.
• Analytics. Aggregate statistics about which pages and lessons are used, so we can improve the material. Set only with your consent.
• Marketing. The Meta Pixel, which measures whether our Facebook and Instagram ads lead to visits and enrolments, and allows us to show ads to relevant audiences. Set only with your consent.

Full details of each cookie, its provider and its lifespan are in our Cookie Policy. You can also block or delete cookies in your browser settings, though strictly necessary cookies are required for the site to work correctly.

5. Who we share your data with

We do not sell your personal data, and we do not share it with unrelated third parties for their own marketing. We use the following processors and partners, each of which is contractually bound to protect your data and to use it only as we instruct:

We do not currently use the following, and will update this policy before we do: Google Ireland Limited (Google Analytics 4).

In addition, we may disclose data to our accountants and professional advisors where necessary, and to public authorities, courts or regulators where we are legally required to do so. If our business is sold or restructured, your data may transfer to the acquirer, who would remain bound by this policy.

Regarding Meta specifically: where you consent to marketing cookies, Meta acts as an independent controller for some of the data it receives via the Pixel, under its own Privacy Policy. We receive only aggregate reports and cannot see your Meta profile. We do not upload customer email lists to Meta.

6. International transfers

We are based in Italy and prefer processors with EU infrastructure. Some of the providers named above are based in, or transfer data to, the United States. Where that happens, the transfer is covered by one or more of the following safeguards: the European Commission's Standard Contractual Clauses, the EU–US Data Privacy Framework where the provider is certified, and supplementary technical measures such as encryption in transit and at rest. You may request a copy of the relevant safeguards by emailing us.

7. How long we keep your data

We keep personal data only as long as we need it for the purpose we collected it, and then delete or anonymise it.

Marketing contacts

36 months from your last interaction with us, then deleted.

Customer and invoice records

10 years, as required by Italian tax and accounting law (Codice Civile art. 2220).

Support correspondence

24 months from resolution.

Analytics data

26 months maximum, in aggregate form.

Course account

For as long as you hold access, then 24 months after your last login, unless tax law requires us to keep the purchase record longer.

8. Your rights under the GDPR

If you are in the EU or the UK, you have the following rights. They are free to exercise, and we will not treat you differently for using them.

• Access — obtain a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — have your data deleted where we no longer have a valid reason to keep it. Note that we cannot delete invoice records we are legally required to retain.
• Restriction — ask us to pause processing while a dispute about accuracy or legitimate interests is resolved.
• Portability — receive the data you gave us in a structured, machine-readable format, or have it sent to another controller.
• Objection — object to processing based on legitimate interests, and object at any time to direct marketing, which we will always honour.
• Withdraw consent — at any time, via the unsubscribe link in any marketing email or the cookie settings link in our footer.

To exercise any right, email info@masterforexit.com. We may ask you to confirm your identity before we act, to make sure we do not disclose your data to someone else.

9. Notice for California residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and why, to request a copy of it, to request its deletion, to correct inaccuracies, and to opt out of the “sale” or “sharing” of personal information for cross-context behavioural advertising. You also have the right not to be discriminated against for exercising these rights.

We do not sell personal information for money. However, the use of the Meta Pixel for advertising measurement may be treated as “sharing” for cross-context behavioural advertising under California law. You can opt out simply by declining or disabling marketing cookies via the “Cookie settings” link in our footer — this is our recognised opt-out mechanism, and we honour Global Privacy Control (GPC) signals where your browser sends them.

The categories of personal information we collect are identifiers (name, email, IP address), commercial information (purchases), and internet activity (pages viewed). We disclose these to the service providers listed in section 5 for the business purposes described there. To make a request, email info@masterforexit.com with “California privacy request” in the subject line. An authorised agent may submit a request on your behalf with written proof of authorisation.

10. Children

Our courses and this website are intended for adults. We do not knowingly collect personal data from anyone under 18, and you must be at least 18 to purchase a course or request the free lessons. If you believe a minor has given us personal data, contact us and we will delete it promptly.

11. Security

The site is served exclusively over HTTPS with a valid TLS certificate. Access to customer data is limited to people who need it, protected by strong authentication, and logged. Payment card data never touches our systems. No method of transmission over the internet is completely secure, so while we take these measures seriously we cannot guarantee absolute security. If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours and inform you where legally required.

12. Automated decision-making

We do not make any decisions about you based solely on automated processing that would have a legal or similarly significant effect. Our payment processor may run automated fraud checks on a transaction; if a payment is declined on that basis you can contact us and we will look into it manually.

13. Changes to this policy

We review this policy at least annually and whenever we change how we use personal data. The “last updated” date at the top of this page always reflects the current version. If we make a material change — for example adding a new processor or a new purpose — we will notify subscribers by email or with a prominent notice on the site before the change takes effect.

14. Complaints

If you are unhappy with how we have handled your data, please tell us first at info@masterforexit.com so we can try to put it right. You also have the right to complain to a data protection authority at any time.

In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it). If you are in another EU country you may complain to your local authority; in the UK, to the Information Commissioner's Office (ico.org.uk).