Last updated: April 25, 2026

Privacy Policy

This Privacy Policy explains how Institutional Trading Academy Ltd, trading as ITAfx Academy ("we", "us", "Company"), collects, uses, stores, and protects personal data when you use our website and services. We are committed to protecting your privacy in accordance with applicable data protection legislation.

1. Data Controller

2. Data We Collect

We collect the following categories of personal data:

Information you provide directly:

• Full name, email address, country, and phone number (when you register or contact us)
• Payment information (processed by third-party payment processors; we do not store full card numbers)
• Messages and inquiries submitted through our contact form
• Age confirmation and consent records

Information collected automatically:

• IP address and approximate geographic location
• Browser type, operating system, and device information
• Pages visited, time spent, and navigation patterns
• Referral source and campaign parameters (UTM tags)
• Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Data

We use your personal data for the following purposes:

• Service delivery: To create and manage your account, provide access to purchased programs, and deliver educational content
• Communication: To respond to your inquiries, send order confirmations, and provide important service updates
• Payment processing: To process transactions and prevent fraud
• Analytics: To understand how our website is used and to improve our services
• Marketing: To send promotional communications, only with your prior consent. You can opt out at any time
• Legal compliance: To comply with applicable laws, regulations, and legal processes

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract performance: Processing necessary to deliver the services you purchased
• Consent: Where you have given explicit consent (e.g., marketing communications, cookies)
• Legitimate interest: For analytics, fraud prevention, and service improvement, balanced against your rights
• Legal obligation: Where processing is required by applicable law

5. Data Sharing

We do not sell your personal data. We may share data with:

• Payment processors: To process your transactions securely
• Analytics providers: To analyze website usage (e.g., Google Analytics, Microsoft Clarity)
• Advertising platforms: To measure ad performance (e.g., Meta Pixel), using anonymized or pseudonymized data where possible
• Customer support tools: To manage inquiries and provide support
• Legal authorities: When required by law or to protect our rights

6. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection. Where such transfers occur, we implement appropriate safeguards to protect your data, including standard contractual clauses or equivalent measures.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Specifically:

• Account and purchase data: retained for the duration of your account and up to 5 years after closure, for legal and tax compliance
• Marketing consent records: retained until you withdraw consent
• Analytics data: retained in anonymized form
• Contact form submissions: retained for up to 2 years

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data, subject to legal retention requirements
• Restriction: Request restriction of processing in certain circumstances
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interest or for direct marketing
• Withdraw consent: Withdraw previously given consent at any time

To exercise any of these rights, contact us at contact@itafx.pro. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/SSL), access controls, and regular security assessments.

10. Children

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete such data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through our website or via email. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

For any questions about this Privacy Policy or to exercise your data rights, please contact: