Privacy Policy

Data controller

StoneX Luxembourg acts as the Data Controller in relation to personal data collected through this website and in the course of providing financial services. Our registered office is located at Bâtiment Espace Strassen, 5, rue des Primeurs, L-2361 Luxembourg.

Personal data we collect

In the course of providing our services and operating our website, StoneX Luxembourg may collect and process the following categories of personal data:

• Identity data: full name, date of birth, nationality, and government-issued identification documentation.
• Contact data: postal address, email address, and telephone number.
• Financial data: account information, transaction records, and investment portfolio details, where applicable.
• Technical data: IP address, browser type and version, time zone settings, browser plug-in types and versions, operating system and platform, and other technology used to access this website.
• Usage data: information about how you use our website, products, and services.
• Communication data: correspondence, inquiries, and records of communications exchanged with our teams.

Legal basis for processing

StoneX Luxembourg processes personal data on the following legal bases:

• Contractual necessity: processing required to perform a contract with you or to take steps at your request before entering into a contract.
• Legal obligation: processing necessary to comply with applicable regulatory, legal, and supervisory requirements.
• Legitimate interests: processing necessary for the legitimate interests pursued by StoneX Luxembourg, where such interests are not overridden by the rights and freedoms of the data subject.
• Consent: where you have provided explicit and informed consent to the processing of your personal data for a specific purpose.

Data retention

StoneX Luxembourg retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with applicable legal, regulatory, and supervisory retention requirements. In general, client data is retained for a minimum period of ten years following the termination of a client relationship, in accordance with applicable Luxembourg and EU financial services regulations.

Your rights

Under the GDPR and applicable Luxembourg data protection legislation, you have the following rights in relation to your personal data:

• The right to access your personal data held by StoneX Luxembourg.
• The right to request rectification of inaccurate or incomplete personal data.
• The right to request erasure of your personal data, subject to applicable legal and regulatory retention obligations.
• The right to object to or request restriction of processing.
• The right to data portability, where technically feasible.
• The right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing prior to withdrawal.

Exercising your rights

To exercise any of the above rights, please submit a written request to our Data Protection Officer at the registered address above or via the Contact page of this website. We will respond to all legitimate requests within 30 calendar days.

Cookies

Our website uses cookies and similar tracking technologies to enhance user experience, analyze website traffic, and facilitate certain functionality. For full details on our use of cookies, please refer to our Cookie Policy, available on this website. You may manage your cookie preferences at any time through your browser settings.

Changes to this policy

StoneX Luxembourg reserves the right to update or amend this Privacy Policy at any time. Any material changes will be communicated via this website. We encourage you to review this policy periodically to remain informed of our current data protection practices.