Privacy Policy

Your personal information and assets are our top priority. We are fully committed to safeguarding them.

Greyrock Evolux collects and retains data necessary for your trading activity on our trading platform. How we collect, use, and store this information is set out in the Privacy Policy below.

The following principles guide our policy:

• To ensure complete transparency about how we collect and store your personal information:

Our goal is to make it clear how we collect and process your data, so you can make informed decisions. We follow transparent guidelines and processes for handling information on this official website. This policy sets out the specific methods we use, giving you clear, practical details about how your information is used and how it works. You are in the driver's seat.

We’ll share updates promptly whenever we determine you should be informed. Transparency is central to how we operate.

Our trained team is always on hand to answer any questions about our processes, including our obligations under the laws of Australia. You can contact us at: info@greyrock-evolux.com

• We do not use personal data for any purpose other than as set out in our Privacy Policy.

We may process personal data for the following purposes, including ensuring the proper operation of Greyrock Evolux Services and facilitating connections between trader-members and third-party trading platforms. We also process data to maintain and improve our official website and Services, protect our rights, and comply with regulatory and other legal obligations. Where necessary, we use this data to perform administrative and other business functions in connection with the Services provided to you, the client.

To deliver better services tailored to your preferences and needs, Greyrock Evolux uses personal data.

• To access and use the essential tools that help protect your personal information and safeguard your rights in this regard:

You can contact us at any time to request access to your personal information. We can correct, update, or delete it as required. We can also arrange to transfer your data to you or to a nominated third party. We offer these services to help you exercise your privacy rights and maintain control over your information.

• Safeguard your personal information:

We use high‑quality, bank‑grade security across our services. While no system can be guaranteed 100% secure, we continuously upgrade our infrastructure and reinforce the safeguards we have in place.

We maintain a comprehensive Privacy Policy and best‑practice security systems.

1. The Scope?

This policy sets out our procedures for collecting, processing, and sharing personal information about individuals.

The terms of our policy apply to any identifiable natural person. This includes anyone who can be, or has already been, identified from personal information entrusted to us, or from data we hold, access and/or combine.

Data processing, as defined in the Privacy Policy, specifically refers to the storage, management, and organisation of personal data.

We do not knowingly collect or solicit any information about individuals under 18. We also do not permit anyone under 18 to use our platform for any purpose. If we become aware of any user under 18, or any information relating to a person under 18 on our official website or platform, we will delete that information immediately.

2. What personal information do we collect and store?

When you register with us, we collect the personal data required to enable your use of our services. Where necessary, we may also request additional information to verify account ownership. To maintain and improve service quality, we collect and analyse data about how you use our platform and our third-party partners’ services.

3. You are under no obligation to provide your personal data to the company.

You are under no obligation to provide your data; however, if you choose not to, we may be unable to deliver certain services, and your access to our platform may be restricted.

4. What personal information do we collect? When you visit our website, we may collect the following personal information:

We do not collect data that could be used to personally identify you. We do collect information such as your account activity, your IP address, and the date and time you access your account. For maintenance, security, and support, we retain system crash reports, browser details, and the type of device used to access your account. We also record your account’s language preference.

When it comes to personal data, we only collect and store the information you consent to share with us when you connect to a third-party trading platform via our service.

Personal information you provide to third-party platforms may include your full name, address, phone number, and email address.

5. Why does the company need my personal data, and is it legal for them to collect it?

The company collects, stores, and processes your personal information solely for the purposes described in this Policy. All such activities are conducted in line with applicable laws in Australia.

The company will only handle, process or transmit your data in accordance with applicable laws in Australia. The legal grounds for doing so are:

• By submitting your details to the company, you consent to the storage and processing of your personal information. You also authorise us to transfer your information to the relevant third-party trading platform for one or more purposes that you have approved.
• To improve services, establish or defend legal claims, and pursue legitimate interests, among other purposes, the company may need to store and process your personal data.
• We process data to comply with our legal obligations.

If you would like more information about the data processing the company is required to perform, please contact us via email.

Below is a list of the specific ways we may use your personal data, along with the legal basis for each use.

6. Disclosure of Personal Data to Third Parties

To support the storage and processing of IP addresses, the conduct of user surveys and analysis, and other related services, the company may share anonymised personal data with third-party service providers.

At your request, we will share certain personal information you provide with third-party services. In such cases, the handling of your data will be governed by that company’s privacy policy. This may include multiple online trading platforms.

To better serve our clients and continually improve our services, the company may share personal information with its affiliates and partner companies.

Where required by law, or to protect our rights and assets, as well as those of our third-party partners, we may disclose data to relevant legal or regulatory authorities.

In the event of a significant corporate transaction, such as the sale of the company or seeking investment or financing, we may share relevant data in a lawful and appropriate manner. This may also occur in connection with any merger, restructuring, consolidation, or insolvency (including bankruptcy), in accordance with applicable law.

7. Use of Cookies and Third-Party Services

For site analytics and to work with our advertising partners, we may use cookies and similar technologies, in accordance with applicable laws and industry standards.

Cookies are small files stored on your device when you visit our website. We use them to collect information about your browsing behaviour and preferences to help personalise and enhance your experience. Cookies let us remember your settings and preferences and tailor our services accordingly. We also use them for website analytics and to compile statistics for planning and improvement.

In general, this site uses two types of cookies. Session cookies are stored in your browser only for the duration of your visit and are deleted when you close your browser. Persistent cookies remain in your browser after your session ends. They help the site recognise you when you return and make your experience smoother.

Types of cookies:

Cookies may be used where necessary and only for their intended purposes:

Cookies are blocked or have been deleted

If you wish to delete or block cookies, you can do this via your browser settings. Follow the links below for step-by-step instructions for the most popular browsers.

• firefox
• Microsoft Edge
• Google Chrome
• safari

Blocking cookies may restrict certain functions and stop some site features from working as intended.

ONLINE TRACKING NOTICE

Your personal data will be retained for as long as necessary to fulfil the purposes described in this policy. We may keep it for longer where required by applicable laws, regulations, or our internal policies.

Your personal data will be shared with third-party trading platforms only at your request and discretion for a period of 12 months. After those 12 months, and with your consent, we will continue sharing the data for a further 12 months.

Our processes include routinely reviewing all personal data to determine whether it remains necessary.

9. Transfer of personal data to third countries or international organisations

When required to deliver our services or for security reasons, we may transfer personal data to third countries (i.e. outside your home country) and to international organisations under robust security safeguards. We apply industry-leading data protection standards to protect your information and ensure your legal rights and remedies remain available in all cases.

All residents of the EEA (European Economic Area) are protected by data protection laws and safeguards.

• All data transfers are carried out under the EU’s legal jurisdiction and competence, in accordance with the data protection safeguards set out in Article 45(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”)
• All data transfers between public bodies or authorities are carried out in accordance with Article 46(2). These transfers are governed by a legally binding and enforceable agreement.
• The European Commission’s Standard Contractual Clauses, under Article 46(2)(c) of the GDPR, set the conditions for data transfers, and any such transfers are carried out in accordance with these Clauses. You can review them on the European Commission’s official website at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

For more information about the specific security measures the company uses to safeguard your personal data during third-country transfers, please email info@wealthwaydigital.uk

10. Protection of Personal Data

Personal data is protected using the highest-level technical and organisational measures, aligned with industry best-practice procedures. These controls help prevent unauthorised or accidental destruction, loss, or alteration of that data.

Although we apply rigorous, legally mandated data protection measures, it is not possible to guarantee in all circumstances that your personal data will remain entirely error-free. Accordingly, we cannot be held liable for any disclosure of personal data, or for incidental, intangible, or consequential loss or damage. This includes events beyond our control, such as disclosure arising from transmission errors, third-party unauthorised access, or similar causes.

If we receive a legally enforceable request from regulators or other authorities, we may be required to disclose your personal information. Once disclosed under legal obligation, we cannot control how those authorities handle, store, or protect your data.

Any information sent over the internet, including personal information, carries a risk of interception and cannot be guaranteed to be completely secure. The Company cannot guarantee the security of any data transmitted online.

11. Links to third-party websites

On our official website, you may encounter links to third-party applications and websites. Please note that these parties are not affiliates, are not under the company's control, and our privacy policy does not apply to them. They have their own policies and practices for collecting and processing personal data, and we are not responsible for such activities. Use at your own discretion.

Always review the privacy policy of any company or service when visiting their official website, before sharing any personal information. Make sure their data collection, use and processing practices align with your preferences and priorities. Any information you choose to provide should be shared directly with the service provider.

12. Policy Amendments

We may update or amend this policy at any time. We will notify you of any changes via our website and other appropriate channels. The latest version of this Privacy Policy will be posted on our official website and, unless stated otherwise, will take effect immediately upon publication.

13. Your rights regarding personal data

You retain full control and the final say over how your personal data is used, including the right to verify its accuracy, correct any errors, and choose to delete it or limit the scope and nature of our processing.

On this page, EEA residents will find information relevant to them:

Your personal data is protected in accordance with the rights described herein. You can immediately exercise these rights by emailing the address below.

Accessing Your Rights

If the personal information you have provided is accurate, you may access it at any time. Any of your personal data that we process is accessible to us and therefore verifiable.

You can request access to your personal data at any time for verification, and we will provide it in electronic format. If you request additional copies of the data we process, beyond the initial copy, a reasonable fee may apply.

Rights granted by law and under this Privacy Policy must not encroach on the rights of others. The company reserves the right to refuse or restrict access to personal information where doing so would infringe another person’s rights or freedoms.

Right to Correct Inaccuracies

Any errors in your personal information, whether due to omission or inaccuracy, may be corrected by you or by the Company to ensure it can be processed correctly.

Erasure Rights

You have the full right to request the deletion of your personal data in the following circumstances. 1) If your personal data has been processed without your consent or outside lawful grounds. 2) When you ask for the data to be removed and the Company has no legal obligation to retain it. 3) If you withdraw consent or otherwise object to any data processing by us, even where it is lawful and in our or a third party provider’s legitimate interests. 4) If we are legally required to delete your data.

The right to deletion may be overridden by legal obligations imposed by EU or Member State law. Likewise, it does not apply where the data is required for the establishment, exercise, or defence of legal claims.

Right to Restrict Data Processing

You have the right to request that we restrict the processing of your personal information if you believe it is inaccurate.

If you request that the use of your personal data be restricted, we will delete it except in the following cases: 1) where applicable law in the European Union or any Member State prevents deletion. 2) With your consent, where retention is required for the establishment, exercise, or defence of legal claims. 3) To protect the rights of another natural person.

Data Portability Rights

You have the right to access and review any personal data you have provided, where you have consented in any form to its collection and where the processing is carried out by automated systems.

You have the right to request the transfer of any or all of your personal data to another company or organisation, where this is technically feasible. This does not affect your right to have your data deleted. We may decline where fulfilling this request would infringe the rights or freedoms of another individual.

Right to object to data processing

While the Company may process data to pursue its legitimate interests, or those of a third-party service provider, you have the right to object and request that we stop processing. This right does not apply where there is a compelling legal need to continue, including to establish, exercise, or defend legal claims. In such circumstances, we may continue processing your personal information.

You may request at any time that your personal data not be processed for direct marketing purposes.

Your Right to Withdraw or Refuse Consent

You may withdraw your consent to our processing of your personal data at any time and, where feasible, with immediate effect. This does not apply retroactively to any processing carried out before you withdrew your consent.

If you are dissatisfied for any reason, you have the right to lodge a complaint with any legal, regulatory or other supervisory authority.

If you believe your rights and freedoms have been infringed in connection with the processing of your personal data, European Union Member States have established regulatory and supervisory authorities for this purpose. You may lodge a complaint with the relevant authority at your discretion.

Section 13 outlines the circumstances in which your personal data rights may be limited under European Union law or the laws of its Member States.

When we receive your request about your personal data and how it is processed, we will provide access to the information you have requested, as set out in Section 13 of this policy. We may extend this timeframe by up to two months, depending on the volume of requests we are handling and the nature of your request. If an extension is required, we will notify you within one month of receiving your request.

Unless this would conflict with applicable law or the provisions of Section 13, we will provide the requested information electronically at no cost. We reserve the right to charge a reasonable fee or decline a request that is unfounded, excessive, or repetitive.

We reserve the right to require additional proof of identity if we have reasonable doubt about the identity of the person making a personal data request, for data protection and security purposes.