PRIVACY FAQs

What rights do I have in relation to my personal data?

You are entitled to ask us:

• for a copy of your personal data;
• to correct your personal data (if it is inaccurate, incomplete or not up-to-date);
• to ‘port’ your personal data (i.e. to transfer in a structured, commonly used and machine-readable format, to you or another data controller);
• to erase your personal data; or
• restrict its processing (i.e. processing will temporarily stop (save to the extent that personal data will continue to be stored)).

You also have rights to object to some processing that is based on our legitimate interests, and to processing for direct marketing purposes. Further, where we have asked for your consent to process your data, you are entitled to withdraw this consent as more fully described above.

These rights are limited in some situations — for example, where we can demonstrate that we have a legal requirement to process your personal data. In some instances, this may mean that we are able to retain data even if you withdraw your consent.

Where we require your personal data to comply with legal or contractual obligations, then provision of such data is mandatory: if such data is not provided, then we will not be able to manage our contractual relationship with you, or to meet obligations placed on us.

We hope that we can satisfy any queries you may have about the way we process your personal data. If you have any concerns about how we process your personal data, you can get in touch at: privacy@jaftex.com.

If you have unresolved concerns you also have the right to complain to EU data protection authorities. The relevant data protection authority will be the data protection authority of the country: (i) of your habitual residence; (ii) of your place of work; or (iii) in which you consider the alleged infringement has occurred.

How long will you hold my data?

Where we process your personal and transaction data, we do this for as long as your account is active and for no more than 7 years after this.

Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.

Where we process personal data for site security purposes, we retain it for 24 months.

Where will you send my data?

Sometimes Jaftex will need to share your personal data with third parties and suppliers outside of the European Economic Area (the “EEA”) (i.e. all 27 EU Member States plus Iceland, Liechtenstein and Norway), such as the USA and Japan.

Where this is the case, we have procedures in place to ensure that your personal data receives the same level of protection as if it were being processed inside of the EEA. If you have any questions about how we protect your data outside of the EEA, please contact us at privacy@jaftex.com.

See our Privacy Policy for further details.