Privacy Policy

Your personal data and assets are our highest priority. We're fully committed to protecting them.

Summit Finthor collects and stores data that's essential to your trading practice. How we collect and store this information is detailed in our Privacy Policy below.

Our approach is founded on these core principles:

• To ensure complete transparency about how we collect and store your personal information:

We're committed to transparency about how we collect and process your data, so you can make informed decisions. Our clear guidelines and streamlined processes ensure your information is handled responsibly. This policy outlines the specific methods we use, giving you concrete visibility into data practices. You remain in control.

We'll keep you informed promptly whenever you need to know something important. Transparency is core to how we operate.

Our knowledgeable team is always available to answer any questions you may have about our processes and compliance with applicable laws in Canada. Please reach out to us at info@summit-finthor.com.

• We do not use your personal data for any purpose other than what is outlined in our Privacy Policy.

We may process your personal data to operate Summit Finthor services, connect you with third-party trading platforms, maintain and improve our website functionality, protect our rights, and meet regulatory and legal obligations. We also use this data to support the administrative and business functions necessary to deliver the services we provide to you.

To provide you with better services tailored to your preferences and needs, Summit Finthor uses personal data.

• To access essential tools that help protect your personal data and safeguard your rights:

You can contact us at any time to access, update, or delete your personal data. We also support requests to transfer your information to you or a designated third party. We're committed to helping you exercise your privacy rights and maintain control over your data.

• Safeguard your personal information:

Our security systems meet the highest banking-level standards. While we cannot guarantee 100% protection, we remain committed to continuously upgrading our infrastructure and strengthening our safeguards to maintain the best possible security for your account.

We maintain a comprehensive privacy policy and employ industry-leading security systems to protect your information.

1. The Scope?

This policy outlines our procedures for collecting, processing, and sharing personal data.

Our privacy policy applies to all individuals who can be identified or are identifiable. This includes any person whom we can identify—or who could be identified—through data you've shared with us or data we can access and combine.

The processing of data, as outlined in our Privacy Policy, refers to how we store, manage, and organize your personal information.

We do not collect information from anyone under 18, and we do not allow users under 18 to use our platform. If we discover that a user or any information belongs to someone under 18, we will delete it immediately.

What Personal Data Do We Store?

When you register with us, we collect the personal information needed to provide you with our services. If required, we may ask you to verify account ownership or provide additional details. We also gather and analyze data about how you use our platform and our partners' services to continuously improve and maintain the quality of our offerings.

3. You're never obligated to share your personal information with the company.

While providing your information is entirely voluntary, withholding it may limit our ability to deliver certain services and could restrict your access to our platform.

4. What personal data do we collect? When you visit our website, we may collect the following personal information:

We don't collect personally identifying information. However, we do gather data about your account activity, IP address, and access timestamps. To support maintenance, security, and customer service, we retain system crash reports, browser details, and device information associated with your account. We also track the language settings on your account.

We collect and retain only the personal information you consent to share when connecting with a third-party trading platform through our service.

The personal information you've shared with third-party platforms may include your full name, address, phone number, and email address.

5. Why does the company need my personal information, and is it legal for them to collect it?

Your personal information is collected, stored, and processed by the company solely for the purposes outlined in this Policy. All data handling and processing complies with applicable laws in Canada.

The company can only handle, process, and transmit your data in accordance with applicable laws in Canada. The legal basis for these activities is as follows:

• By submitting your information, you consent to Summit Finthor storing and processing your personal data. You authorize us to share your data with our third-party trading platform partners as needed. You acknowledge that you have agreed to the processing of your personal data for the purposes outlined.
• To improve our services, establish or defend legal claims, and pursue legitimate business interests, we may need to store and process your personal data.
• To meet legal requirements, we process your data accordingly.

If you'd like to learn more about how the company handles data processing, please feel free to contact us by email.

Below you'll find the specific uses of your personal data and the legal basis for each.

6. Sharing Your Personal Information with Third Parties

To store and process IP addresses, conduct user surveys and analysis, and provide related services, the company may share anonymized personal data with third-party service providers.

When you request it, we may share your personal data with third-party service providers, including digital trading platforms. Their use of your information will be governed by their own privacy policies.

To better serve you and improve our service offerings, we may share your personal information with our affiliates and partner companies.

We may disclose your data to relevant legal and regulatory authorities as required by law or to protect the rights and assets of Summit Finthor, our partners, and other third parties.

In the event of a critical business transaction—such as a company sale, investment pursuit, or loan application—we may share relevant data in a legal and appropriate manner. This also applies in cases of company merger, restructuring, consolidation, or bankruptcy, as required by law.

7. Cookies and Third-Party Services

We may use cookies and similar tracking technologies for site analytics and advertising purposes, in accordance with applicable law and industry standards.

Cookies are small pieces of code stored on your device when you visit our website. We use them to collect information about your browsing behaviour and preferences in order to personalize your experience and remember your settings. This helps us tailor our services to better meet your needs and gather analytics data to improve our website performance.

We use two main types of cookies on our site. Session cookies are temporary and exist only during your browsing session—they're automatically deleted when you close your browser. Persistent cookies, on the other hand, remain stored on your device even after you leave. These allow us to recognize you as a returning visitor and enhance your experience on the site.

Types of cookies:

Cookies are used as needed, in accordance with their intended purpose.

Cookies have been cleared or disabled

If you want to delete or block cookies, you can do so through your browser's settings. Follow the links below for step-by-step instructions on how to manage cookies with the most popular browsers.

• firefox
• Microsoft Edge
• Google Chrome
• safari

Disabling cookies may prevent certain features and functionality from working as expected.

ONLINE TRACKING NOTICE

Your personal data will be retained for as long as necessary to fulfil the purposes outlined in this policy. We may also retain it for longer periods as required by applicable laws, regulations, and our company policies.

Your personal data may be shared with third-party trading platforms at your request and discretion for an initial 12-month period. After this period expires, your data will continue to be shared for an additional 12 months, provided you give your consent to extend the arrangement.

We regularly review all personal data to determine whether it remains necessary for our operations.

9. Transfers of Personal Data to Third Countries or International Organizations

When necessary to provide services and ensure security, your personal data may be transferred to third countries and international organizations using robust security protocols. We maintain the highest standards of data protection to safeguard your information and guarantee access to legal remedies and rights in all circumstances.

Within the EEA (European Economic Area), all residents benefit from comprehensive data protection and privacy safeguards.

• All data transfers operate under EU legal jurisdiction and authority, in compliance with standard data protection protocols outlined in Article 45(3) of Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 (GDPR).
• All data transfers between public entities and authorities are conducted in accordance with Article 46(2) and are legally binding and enforceable.
• The European Commission's Standard Contractual Clauses, as outlined in Article 46(2)(c) of the GDPR, establish the conditions for data transfers outside the EU. Our data transfers comply with these clauses. You can review the full text at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

For more information about the specific security measures Summit Finthor uses to protect your personal data during international transfers, please contact us at info@wealthwaydigital.uk.

10. Personal Data Protection

Your personal data is protected using industry-leading technical and organizational safeguards that follow best-practice standards. These measures are designed to prevent unauthorized access, accidental loss, destruction, or alteration of your information.

While we maintain the highest standards of data protection in accordance with applicable laws, we cannot guarantee absolute protection against all possible risks. We are not liable for any unauthorized disclosure or incidental damage to your personal data, including circumstances beyond our control such as transmission errors, unauthorized third-party access, or similar events.

If we receive legally binding requests from regulators or legal authorities, we may be required to disclose your personal data to them. Once your information is shared in response to such legal requirements, we have no control over how those authorities handle, store, or protect it.

While we employ industry-standard security measures, data transmitted over the internet—including personal information—carries inherent risks and cannot be guaranteed as completely secure. Summit Finthor cannot warrant the absolute security of any information sent online.

11. Third-party website links

This website contains links to third-party applications and websites that are not affiliated with or controlled by our company. Please be aware that our privacy policy does not apply to these external sites. Third parties have their own data collection and privacy practices, and we are not responsible for their activities. Please use these links at your own discretion.

Before sharing any personal information with a company or service, take time to review their privacy policy on their website. Make sure their data collection, usage, and processing practices align with your preferences and priorities. Always provide your personal data directly to the service provider.

12. Policy Amendments

We reserve the right to update or modify this policy at any time. We'll notify you of any changes through our website and other relevant channels. The updated privacy policy will be posted on the website and will take effect immediately upon publication, unless otherwise stated.

Your Personal Data Rights

You maintain full control and final say over your personal data, including the ability to verify its accuracy, correct errors, and choose to delete or restrict how we process your information.

On this page, residents of the EEA will find information relevant to their region:

Your personal data is protected under the rights outlined below. You can exercise these rights at any time by emailing the address provided.

Accessing Your Rights

If the personal information you've provided is accurate, you can access it at any time. Your data is stored securely with us and remains verifiable whenever needed.

You can request your personal data at any time for verification purposes, and we'll provide it to you in electronic format. If you request additional copies beyond the initial one, a reasonable fee may apply.

The company respects legal rights and privacy protections while ensuring that personal data access does not infringe on the rights and freedoms of others. We reserve the right to restrict or deny access to personal information when necessary to protect these interests.

Right to Correct Errors

You can correct any errors or inaccuracies in your personal data yourself, or the Company can make these corrections on your behalf to ensure your information is processed properly.

Erasure Rights

You have the right to request deletion of your personal data in the following circumstances: 1) If your personal data has been processed without your consent or beyond legal boundaries. 2) Upon your request, provided the Company has no legal obligation to retain that data. 3) If you withdraw consent to our data processing, even where it is lawful and serves our legitimate interests or those of a third-party provider. 4) If we are legally required to delete your data.

The right to deletion may not apply if you're subject to legal obligations under EU law or the laws of any EU member state. Additionally, we cannot delete data if it's necessary to exercise or defend against legal claims.

Right to Restrict Data Processing

You have the right to request that we limit the processing of your personal information if you believe it contains inaccuracies.

When you request that your personal data usage be restricted, we will delete it unless one of the following applies: 1) deletion is prevented by applicable law in the European Union or a Member State; 2) we retain it with your consent if needed to defend or pursue legal claims; or 3) deletion would infringe on the rights of another individual.

Your Right to Data Portability

You have the right to access and review any personal data you've provided, provided you consented to its collection and processing through automated systems.

You have the right to request that your personal data be transferred to another company or organization, provided this is technically feasible. This request does not affect your right to deletion or your existing data protections. However, this right cannot be exercised if doing so would infringe on the rights or freedoms of another individual.

Right to Challenge Data Processing

Regardless of the Company's right to pursue legitimate interests—whether its own or those of a third-party service provider—you have the right to object to the processing of your personal data and request that it stop. However, this right does not apply if there is a compelling legal reason to continue processing, such as defending against or pursuing legal claims. In such circumstances, we may continue processing your personal data as necessary.

You may request at any time that your personal data not be used for direct marketing purposes.

Right to Withdraw or Decline Consent

You have the right to withdraw your consent to our processing of your personal data at any time, with immediate effect where applicable. Please note that this withdrawal does not apply retroactively to any processing that occurred before you withdrew your consent.

If you are dissatisfied for any reason, you have the right to lodge a complaint with any relevant legal, regulatory, or supervisory authority.

If you believe your rights and freedoms have been violated in relation to your personal data, regulatory and supervisory authorities in European Union Member States are available to assist you. You have the right to lodge a complaint with these authorities at any time.

Section 13 outlines circumstances where your personal data rights may be limited under European Union law or the laws of EU Member States.

When we receive your request for access to your personal data, we'll provide you with the information you've requested as outlined in Section 13 of this policy. We may extend this timeframe by up to two months, depending on request volume and complexity. If an extension is needed, we'll notify you within one month of receiving your request.

Requested information will be provided to you electronically at no cost, except where prohibited by law or as outlined in Section 13. We reserve the right to charge a reasonable fee or decline requests that are frivolous, excessive, or repetitive.

We reserve the right to request additional proof of identity if we have any reasonable doubt about who is requesting personal data, in order to protect your privacy and ensure security.