Privacy Policy

Last updated: 1 January 2026

1. Who we are

For the purposes of data protection law, the controller of your personal data is Tarim, located at Park Row 230, LS1 5AT Leeds, GB. You can contact us at [email protected]. This Policy applies to personal data processed through our website, our platform, and our communications with you.

2. Personal data we collect

We may collect the following categories of personal data:

• Identity and contact data, such as your name, email address, telephone number and postal address.
• Account data, such as your username, password hash, language preferences and security settings.
• Verification data, where required to meet legal obligations, such as identity documents and proof of address.
• Usage data, such as log files, pages viewed, feature interactions and device and browser information.
• Transaction data, such as subscription payments, configuration of trading tools and records of activity on the platform.

We do not intentionally collect special category data. Please do not send us sensitive information unless we specifically request it.

3. How we use your personal data

We use personal data to create and manage your account, provide and improve the Platform, process payments, respond to enquiries, send service messages, detect and prevent fraud and misuse, maintain security, comply with anti-money laundering and sanctions obligations, and meet our legal and regulatory duties. Where you have agreed, we may also send marketing communications, which you can withdraw at any time.

4. Lawful bases

Our processing relies on one or more of the following lawful bases: performance of a contract with you; compliance with legal obligations; our legitimate interests in running and securing a safe platform, provided these are not overridden by your rights; and your consent, where we ask for it specifically, such as for certain marketing or optional cookies.

5. Sharing your data

We do not sell your personal data. We may share it with trusted service providers who process data on our behalf, including hosting, analytics, payment processing, customer support and identity verification providers. These providers are bound by written contracts and may only act on our instructions. We may also disclose data where required by law, by a court or by a competent authority, or to protect the rights, property or safety of Tarim, our users or others.

6. International transfers

Some of our service providers may process data outside the United Kingdom. Where this happens, we ensure that appropriate safeguards are in place, such as UK-approved international data transfer agreements or adequacy regulations, in line with UK GDPR requirements.

7. Retention

We keep personal data only for as long as necessary for the purposes described in this Policy. Account data is generally retained for the life of your account and for a period afterwards to address legal, tax, accounting and dispute matters. Verification and anti-money laundering records may be retained for longer where required by law. When data is no longer needed, we securely delete or anonymise it.

8. Your rights

Under UK data protection law you have the right to access your personal data, to have inaccurate data rectified, to request erasure in certain circumstances, to restrict or object to processing, to request data portability, and to withdraw consent at any time where processing is based on consent. You may also object to direct marketing. To exercise these rights, email [email protected]. We may need to verify your identity before responding. We will normally respond within one month.

9. Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration and disclosure. These include encryption in transit, access controls, least-privilege policies and regular security reviews. No method of transmission or storage is completely secure, and you are responsible for keeping your login credentials confidential.

10. Cookies

We use cookies and similar technologies to operate the Platform, remember preferences and understand how the website is used. Strictly necessary cookies are used without consent. Other cookies are set only where you have agreed to them, and you can manage your preferences through your browser settings or the consent controls we provide.

11. Children

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so that we can delete it.

12. Complaints

If you have concerns about how we handle your personal data, please contact us first so that we can try to resolve them. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.

13. Changes to this Policy

We may update this Privacy Policy to reflect changes in our practices or the law. We will publish the revised version on this page and update the "last updated" date. For material changes, we will provide additional notice where appropriate.

14. Contact

For any questions about this Privacy Policy or our data practices, contact Tarim at [email protected] or by post at Park Row 230, LS1 5AT Leeds, GB.