Privacy Policy

Yal Group Inc., an International Business Company incorporated in Saint Lucia under company registration number 2026-00484, registered office Ground Floor, Sotheby Building, Rodney Village, Rodney Bay, Gros-Islet, Saint Lucia, is the controller of the personal data described in this policy.

Our data protection contact is info@yal.com. That mailbox reaches the people accountable for data protection at Yal Group Inc., and it is the route to use for any question or request about your data. We ask you to write to the mailbox rather than to an individual, so that a request is logged and answered even when a particular person is unavailable.

We are established in Saint Lucia, so the data protection law of our own jurisdiction is the Data Protection Act of Saint Lucia, which establishes a Data Protection Commissioner. Depending on where you live, the law of your own country may also give you rights against us.

This policy covers our websites, our client onboarding and account services, our trading platforms to the extent we process data through them, and our communications with you. It applies whether you are a client, an applicant, a visitor, an introducing broker, or a representative of a corporate client.

MetaTrader 5 is a third-party platform licensed to us. Its own provider processes some data in its own right and under its own notices, and this policy does not extend to processing we do not control.

We do not seek special category data, such as data about health, beliefs or biometrics, except where an identity document or a liveness check necessarily contains it, in which case we use it only to verify your identity.

• Directly from you, when you apply, fund your account, trade, or contact us.
• Automatically, when you use our websites and platforms, through the technical data described above.
• From third parties: identity and sanctions screening providers, credit reference and fraud prevention agencies, payment providers and banks, public registers, and introducing brokers or affiliates who referred you.

If you do not give us the identity, address and source of funds information we ask for, we cannot open or maintain your account. That is a legal requirement on us, not a commercial preference. See our AML and KYC Policy.

We will only send you marketing where you have agreed to receive it, or where you are an existing client and the message concerns services similar to those you already use. Every marketing message carries an unsubscribe link, and you can also opt out at any time by writing to info@yal.com.

Opting out of marketing does not stop service messages. We will still send you the things we are required to send you, such as statements, margin notifications, changes to your agreement and security alerts.

We do not sell your personal data, and we do not share it for another organisation's own marketing.

We share personal data only where there is a reason to, and only as much as is needed:

• Service providers acting on our instructions. Identity verification and screening providers, payment providers and banks, platform and technology providers, hosting and communications providers, and support tooling. They process data for us under contract and may not use it for their own purposes.
• Liquidity providers and market counterparties. Where necessary to execute or settle your transactions, and generally without identifying you personally.
• Regulators, law enforcement and tax authorities. Where we are required to report, or where we receive a lawful request. This includes reporting under anti-money-laundering and tax information exchange obligations.
• Professional advisers, auditors and insurers. Where they need it to advise us or to audit us.
• Introducing brokers and affiliates. Where one referred you, we may confirm that your account was opened and share limited activity data for the purpose of calculating what they are owed. They do not receive your identity documents.
• A purchaser of our business. If we are sold or reorganised, under confidentiality obligations, and only to the extent necessary.

We operate internationally and our service providers do too, so your data may be processed in countries other than the one you live in, including countries whose data protection law differs from your own.

Where we transfer personal data across borders, we do so under a contract requiring the recipient to protect it to the standard described in this policy, to use it only for the purpose we specify, and to return or delete it when the engagement ends. You may ask us for information about the safeguards applying to a particular transfer.

We keep personal data for as long as you are a client, and after that for as long as the law requires us to and for as long as a claim could still be brought.

When a retention period ends we delete the data or anonymise it so that it can no longer be linked to you.

You can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct data that is wrong or incomplete.
• Delete data we no longer have a reason to hold. We cannot delete records we are legally required to keep, and we will tell you when that is the reason.
• Restrict or object to processing we carry out on the basis of our legitimate interests, including profiling for marketing.
• Port the data you gave us to another provider, in a structured, commonly used, machine-readable format.
• Withdraw consent at any time, where our processing is based on it.

Write to info@yal.com to exercise any of these. We will respond within 30 days, and we will tell you before that runs out if a request is complex enough to need longer. We may need to verify your identity first, which is itself a protection for you. We do not charge for a request unless it is manifestly unfounded or excessive.

If you are unhappy with how we have handled your data, tell us first so that we can put it right. You may also complain to the data protection supervisory authority in your own country, and to the Data Protection Commissioner of Saint Lucia.

We use technical and organisational measures appropriate to the sensitivity of the data, including encryption of data in transit and at rest, access control on a need-to-know basis, multi-factor authentication for our systems, logging and monitoring, supplier due diligence, and staff training.

No system is perfectly secure. Where a breach occurs that is likely to affect you, we will tell you and the relevant authority as required. You can help by using a strong and unique password, enabling any second factor we offer, keeping your devices patched, and treating any message asking for your credentials as fraudulent. We will never ask you for your password.

Our websites use cookies and similar technologies. Strictly necessary cookies make the site work, remember your locale, and protect against abuse, and they cannot be switched off. Analytics and marketing cookies are used only with your consent, and you can change or withdraw that consent at any time through the cookie settings on the site.

You can also block or delete cookies in your browser. Blocking strictly necessary cookies will stop parts of the site from working.

We use automated tools in onboarding, principally for identity verification, sanctions screening and fraud detection. Where an automated check produces a result that would lead to an application being declined or an account being restricted, a person reviews it before the decision takes effect. You may ask for that review to be explained to you, and you may contest the outcome, except where telling you would breach a legal restriction on disclosure.

We do not use your trading data to make automated decisions that produce legal effects for you.

Our services are not offered to anyone under 18 and we do not knowingly collect data about children. If we discover that we hold data about a child, we will delete it.

We may update this policy. The current version is always the one published here, and where a change is material we will tell you before it takes effect.

Yal Group Inc., Ground Floor, Sotheby Building, Rodney Village, Rodney Bay, Gros-Islet, Saint Lucia. Email info@yal.com.