SUMMARY

This privacy notice (“Privacy Notice”) applies to the various features of the FX Connect services (“Services”) made available through this website or any other application or platform you utilise to access the Services (this “Platform”) and is applicable to any users of the FX Connect Platform globally as required under Markets in Financial Instruments Directive (“MiFID II”). This Privacy Notice applies to any personal data (“personal data”) we may collect from you through this Platform, independent of the device (i.e., mobile, computer) used to access this Platform. We may also collect information that tells us what you do on the Platform or the Service, such as functions utilised, the time of day you access the Service, in each case, without telling us who you are. Any information collected about you may be associated with other identifying information that we have about you or that is publicly available from other sources. If the information collected is about you or relates to you, or is combined with such information, State Street (as defined below) will treat it as personal data.

When you visit our Platform we want you to feel confident that we are committed to maintaining the privacy of your personal data. This Privacy Notice explains how we collect, use, process, and disclose your information across the Platform.

By accessing this Platform, you agree to the terms of this Privacy Notice as they may be amended from time to time, and to State Street’s collection, use, processing and disclosure of your information as described below. State Street may change this Privacy Notice at any time without prior notice to you. Any changes or updates will be effective immediately upon posting to the Platform. The effective date of this Privacy Notice is indicated in the final paragraph hereof.

 

DATA CONTROLLER

When this Privacy Notice mentions “operator” “we,” “us,” or “our,” it refers to the State Street company that is responsible for your information under this Privacy Notice.

State Street Bank and Trust Company with a principal place of business at 1 Lincoln Street, Boston Massachusetts 02111 (“State Street Bank”) provides the Services to users in Hong Kong and Australia and acts as the data controller for information of users in those jurisdictions. FX Connect, LLC with a principal place of business at 1 Lincoln Street, Boston Massachusetts 02111 (“FXC LLC”) provides the Services to users in all other jurisdictions and acts as the data controller for information of users in those jurisdictions, (collectively "“State Street").

 

INFORMATION COLLECTED

Information you provide for your use of the Platform

We collect information you share with us when you access the Platform or use certain features of the Services available via the Platform, including:

  • Account Information. When you sign up to the Services we require certain information such as your name, job title, work phone number, email address, and national client identifier.
  • Profile Information. To use certain features within the Platform and identify the best Service features for your needs, we may also ask you to complete a profile, which may include your address, phone number, and email address.
  • Employment Information. We collect your information in relation to your employment/trading status (including your office location) when accessing the Platform Services to process and report trades.
  • Communications with other Platform users. When you communicate with other authorised traders, members, we collect information about your communication and any information you choose to provide.
  • Other Information. You may otherwise choose to provide us information when you form, conduct a search, update or add information to your platform profile, respond to communications, enter into transactions, or use other features of FX Connect.

Information we automatically collect from your use of the Platform

  • Usage Information. We collect information about your interactions with the other traders using chat functionality, if any, made available on the Platform, as well as the pages or other content you view, your searches, trades you have made, and other actions on the Platform.
  • Location Information. When you use certain features we may collect different types of information about your general location (e.g. IP address).
  • IP address/Unique Identifiers. We collect your IP address and information regarding the computer or mobile device used to access this Platform, such as its operating system, unique identifier and model name, as well as its user configurations and settings to help diagnose any problems with our servers and to administer, operate and develop our Platform as well as to help facilitate communications which you have elected to receive from us.
  • Cookies and Similar Technologies. We may use cookies and other similar automated technologies, in order to provide better service, facilitate your use of the Services, store online preferences, enhance security, as well as analysing platform traffic, usage trends and patterns. Additionally while on our Platform you may visit other sites and encounter Cookies or other automated technologies there. You can find more information about cookies at: allaboutcookies.org and www.youronlinechoices.eu. For a video about cookies visit www.google.co.uk/goodtoknow/data-on-the-web/cookies.  There are four types of cookies explained below:
    • Strictly necessary cookies. These cookies are essential in order to enable you to move around a site and use its features, such as accessing secure areas of a site. Without these cookies, services you have asked for cannot be provided.
    • Performance Cookies. These cookies collect information about how visitors use a site, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don't collect information that identifies a visitor. All information these cookies collect is anonymous and is only used to improve how a site works.
    • Functionality cookies. These cookies allow a site to remember choices you make (such as your user name, language or the region you are in) and provide enhanced, more personal features. For instance, a site may be able to provide you with local information by storing in a cookie the region in which you are currently located. These cookies can also be used to remember changes you have made to text size, font and other parts of web pages that you can customise. They may also be used to provide services you have asked for such as watching a video or commenting on a blog.
      These cookies cannot track your browsing activity on other websites. They don’t gather any information about you that could be used for online advertising on other sites or remembering where you’ve been on the Internet outside of a site.
    • Targeting cookies. These cookies are used to deliver online advertisements on other websites that are more relevant to you and your interests. They are also used to limit the number of times you see such advertisements as well as help measure the effectiveness of the advertising campaign. They are usually placed by advertising networks with a site operator’s permission. They remember that you have visited a site and this information is shared with other organisations such as advertisers. Quite often they will be linked to site functionality provided by the other organisation.

'Do not track' disclosure

Do Not Track ("DNT") is a technology standard that is currently under development that will allow you to restrict tracking when browsing from site to site on the internet. When you choose to turn on the DNT setting in browsers that support this feature, the browser sends an automated browser signal to the web sites and other web services (such as analytics services, advertising networks, and social platforms) you encounter while browsing to prohibit tracking. At this time, the Platform does not recognise automated browser signals regarding tracking mechanisms, such as “do not track” requests.

Sensitive personal data

State Street recognises that certain jurisdictions have enacted laws that require higher protection of certain sensitive personal data. "Sensitive personal data" includes categories of personal data identified by the European Economic Area ("EEA") and other privacy laws as requiring special treatment. This may include personal identity numbers, racial or ethnic origin, political opinions, religious, philosophical or other similar beliefs, membership of a trade union or profession or trade association, physical or mental health, biometric or genetic data, sexual life or criminal record (including suspected criminal activities). As a general rule, State Street does not require such sensitive personal data from you.

In the limited cases where we do seek to collect such information, we will seek to do so in accordance with applicable privacy law requirements. If you choose to provide us with unsolicited sensitive personal data, you consent to us using the information, subject to applicable law as described in this Privacy Notice.

 

HOW WE USE INFORMATION WE COLLECT

We use, store, and process information about you to provide, understand, improve, and develop the Platform, and to maintain a secure environment. We use the information we collect for the following purposes:

  • verify or authenticate information or identifications provided by you;
  • verify that you qualify for use of the Service;
  • inform you about changes to the Service;
  • determine usage trends in order to make improvements to the Service;
  • conduct checks against databases and other information sources (including for KYC/AML purposes);
  • detect and prevent fraud, spam, abuse, security incidents, and other harmful activity;
  • conduct investigations and risk assessments;
  • operate our business in a prudent manner in accordance with industry standards and applicable law including compliance with our legal and regulatory obligations; and
  • resolve any disputes with any of our users and enforce our agreements with third parties.

We also may use this information on an aggregated level to perform statistical analyses and to maintain a database of our members.

 

SHARING & DISCLOSURE

We will share your profile information and the information provided by you to the following organisations and relevant regulatory bodies as per your subscriber Agreement.

Service providers

We use a variety of third party service providers to help us provide services related to the Platform. Service providers may be located inside or outside of the EEA. For example, service providers may help us: (i) verify or authenticate your identification, (ii) check information against public databases, (iii) assist us with background checks, fraud prevention, and risk assessment, or (iv) provide technical or maintenance services to State Street. These providers have limited access to your information to perform these tasks on our behalf, and are contractually obligated to use it in a manner consistent with this Privacy Notice.

Regulatory and Legal

State Street may disclose your information to courts, law enforcement or governmental authorities, regulators, self-regulatory bodies (holding relevant jurisdiction) or authorised third parties, if and to the extent we are required to do so by law or if such disclosure is reasonably necessary: (i) to comply with legal process and to respond to claims asserted against State Street, (ii) to respond to verified requests relating to a criminal investigation or alleged or suspected illegal activity, regulatory requests any other activity that may expose us, you, or any other FX Connect MTF Member to legal liability, (iii) to enforce and administer our terms of use or other agreements with Members, (iv) for fraud investigation and prevention, risk assessment, user support, platform development and debugging purposes.

We will attempt to notify users about these requests unless: (i) providing notice is prohibited by the legal process itself, by court order we receive, or by applicable law, or (ii) we believe that providing notice would be ineffective, create or increase a risk of fraud upon State Street, its employees the MTF platform or its other users (collectively, “Risk Scenarios”). In instances where we comply with legal requests without notice for these reasons, we will attempt to notify that Member about the request after the fact if we determine in good faith that we are no longer legally prohibited from doing so and that no Risk Scenarios apply.

Corporate affiliates /Operating globally

To help us provide and maintain the Platform, we may share your information within our corporate family of companies that are related by common ownership or control. These related entities are covered under this Privacy Notice.

Personal data we collect may be transferred internationally throughout the world, based on business need or to comply with applicable laws, to countries which may not have the same data protection laws as the country in which you reside. This is based on (a) where it is held, received or stored by you or us, (b) from where it is accessed by you or us, or (c) through which it passes. When such transfers take place, State Street group takes measures and has in place internal policies and procedures in place to provide an appropriate level of privacy and data protection.

By providing your information to State Street in the course of your access and use of the Platform, you consent and authorise us to transfer, store, and process your information within the EEA and outside of the EEA for the purposes described in this Privacy Notice.

In addition, we may share personal data and other data collected through the Service with a successor entity in the event of a merger, acquisition or similar transaction.

 

INFORMATION RETENTION AND DELETION

State Street retains your information while your account remains active, unless you request deactivation or deletion of your information or account. However, State Street will retain certain information about you as required by law, including without limitation State Street’s MiFID II record keeping obligations, or other purposes as described within your subscriber Agreement even if you request deactivation or deletion of your account.

 

OTHER IMPORTANT INFORMATION

Security

We are continuously implementing and updating administrative, technical, and physical security measures to help protect your information against unauthorised access, loss, destruction, or alteration. We use security measures, in compliance with applicable laws, to protect personal data from unauthorised access or use. Yet you should understand that the open nature of the Internet is such that information and personal data may flow, without security measures, over networks connecting you to our systems and may be accessed and used by people other than those for whom the data is intended.

To safeguard against unauthorised access to personal data by third parties, all electronic personal data held by State Street is maintained on systems protected by secure network architectures that contain firewalls and intrusion detection devices. The servers holding personal data are “backed up” (i.e., recorded) on a regular basis in an effort to avoid any inadvertent erasure or destruction of such personal data and are stored in facilities with appropriate security and fire detection and response systems.

Analysing your communications

We may review, scan, or analyse your communications on the platform for fraud prevention, risk assessment, regulatory compliance, investigation, product development, research, and customer support purposes. In some cases, we may also scan, review, or analyse messages to debug, improve the platform. We use automated methods where reasonably possible. However, occasionally we may need to manually review some communications, such as for fraud investigations and user support, or to assess and improve the functionality of these automated tools.

Your rights

As a person who provides State Street with personal data, you may enquire as to the nature of the personal data stored at and/or processed by State Street. You will be provided reasonable access to your personal data held by State Street and, where appropriate, with the ability to review and correct inaccuracies. State Street will cooperate in providing such access. All such requests for access may be made by sending a request in writing to privacy@fxconnect.com.

To help protect your privacy and provide security, State Street takes reasonable steps to verify your identity before granting access to information. State Street shall respond to such reasonable requests made by you within such time period as required under applicable law after your identity has been confirmed and you have clarified the specific personal data that you require. If you demonstrate that the purpose for which the personal data is being processed is no longer legal or appropriate, the personal data will be deleted, unless the law or applicable data retention requirements require otherwise.

Contact

If you have questions, comments or complaints about this Privacy Notice, or about how your data is processed, please contact privacy@fxconnect.com.

 

EFFECTIVE DATE: 15 December 2017