VirtuaBroker Corp. (“VirtuaBroker”, “VB”, “Company”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy (“Policy”) explains how we collect, use, disclose, process, store, and safeguard information relating to users (“you”, “your”, or “User”) of the VirtuaBroker website, platform, applications, APIs, and related financial services available through www.virtuabroker.ca (collectively, the “Services”).

This Policy is designed in accordance with applicable privacy and data protection laws, including Canadian anti-money laundering regulations, industry compliance obligations, and internationally recognized privacy principles. The structure and compliance framework are inspired by leading fintech and crypto-service providers.

By accessing or using our Services, you acknowledge and agree to the practices described in this Policy.

1. Company Information

Legal Name: VirtuaBroker Corp.

Operating Name: VirtuaBroker

Address: Pedro I Pons 9-11, Barcelona, Spain 08034

Website: www.virtuabroker.ca

VirtuaBroker Corp. is registered as a Money Services Business (MSB) with the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) under registration number C100001081.

2. Information We Collect

We may collect and process the following categories of information:

2.1 Personal Information

Full legal name

Date of birth

Nationality and residency

Government-issued identification

Residential address

Email address

Telephone number

Banking and payment information

Wallet addresses and blockchain transaction data

Employment or business information

Tax identification information

Source of funds documentation

2.2 Technical and Usage Information

We may automatically collect:

IP address

Browser type and device identifiers

Operating system

Login activity

Access timestamps

Cookies and tracking technologies

Geolocation data

Usage analytics and interaction data

2.3 Compliance and Verification Information

To comply with AML, KYC, sanctions screening, fraud prevention, and regulatory obligations, we may collect:

Identity verification documents

Selfies or biometric verification

Risk and fraud indicators

Transaction history

Sanctions and politically exposed person (PEP) screening results

Enhanced due diligence documentation

3. Legal Basis for Processing

We process personal information based on one or more of the following legal grounds:

Your consent;

Performance of contractual obligations;

Compliance with legal and regulatory obligations;

Fraud prevention and security;

Legitimate business interests;

Protection of rights, users, and the financial system.

4. How We Use Information

We may use your information to:

Provide and maintain our Services;

Process transactions and payments;

Verify identity and conduct KYC procedures;

Detect, prevent, and investigate fraud or illegal activities;

Comply with AML/CTF and regulatory obligations;

Communicate with you regarding your account or transactions;

Improve platform performance and user experience;

Conduct analytics and operational research;

Provide customer support;

Enforce our Terms and Conditions;

Protect the integrity and security of the Platform.

5. Cookies and Tracking Technologies

We use cookies, pixels, analytics tools, and similar technologies to:

Authenticate users;

Remember preferences;

Analyze platform traffic and performance;

Improve security;

Deliver a personalized experience.

You may disable cookies through your browser settings; however, some functionality of the Services may be limited.

6. Sharing of Information

We may share information with:

Banking and payment partners;

Liquidity providers;

Blockchain analytics providers;

Identity verification providers;

Fraud prevention and compliance vendors;

Legal, regulatory, and governmental authorities;

Professional advisors and auditors;

Cloud hosting and infrastructure providers.

We do not sell personal information to third parties.

Information may be disclosed where required by law, court order, regulatory request, or to protect the rights and security of VirtuaBroker and its users.

7. International Data Transfers

We intend to transfer the collected information we obtain from you to recipients in countries other than the country in which the information has been originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information.

The collected information may be transferred to a state outside the European Economic Area (“EEA”) or Canada. For such transfers we use standard contract clauses or other suitable safeguard to permit data transfers to other countries and ensure that such information will be afforded the same level of protection. Only when required it may be accessed by the courts, law enforcement and national security authorities.

8. Data Retention

We retain personal information only as long as necessary for:

Providing the Services;

Compliance with legal and regulatory obligations;

Fraud prevention and dispute resolution;

Recordkeeping requirements under applicable financial regulations.

Certain information may be retained after account closure where legally required.

9. Data Security

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect your information against:

Unauthorized access;

Loss or destruction;

Misuse;

Alteration;

Disclosure.

Security measures may include:

Encryption;

Multi-factor authentication;

Access controls;

Transaction monitoring;

Secure infrastructure environments.

However, no transmission or storage system can be guaranteed 100% secure.

10. Blockchain and Public Ledger Risks

Transactions involving virtual currencies may be recorded on public blockchains that are outside VirtuaBroker’s control.

Blockchain transactions may be:

Publicly accessible;

Irreversible;

Permanently recorded.

Users acknowledge the inherent transparency and risks associated with blockchain technology.

11. Your Rights

Depending on your jurisdiction, you may have rights including:

Access to your personal data;

Correction of inaccurate data;

Deletion of personal information;

Restriction of processing;

Data portability;

Withdrawal of consent;

Objection to processing;

Complaint to a supervisory authority.

Requests may be submitted to: privacy@virtuabroker.ca

We may require identity verification before processing requests.

12. Marketing Communications

We may send service-related communications and, where permitted, promotional materials.

You may opt out of marketing communications at any time through unsubscribe links or by contacting us directly.

Operational and compliance-related notices may still be sent even if you opt out of marketing.

13. Third-Party Services and Links

Our Services may contain links or integrations with third-party platforms, applications, or websites.

VirtuaBroker is not responsible for:

Third-party privacy practices;

External websites;

Blockchain network operations;

Third-party service security.

Users should review third-party privacy policies independently.

14. Children’s Privacy

Our Services are not intended for individuals under the age of 18.

We do not knowingly collect information from minors. If we become aware that personal information has been collected from a minor, we will take appropriate steps to delete such information.

15. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time.