Privacy

Who is the controller

The controller of your data is the owner of RCM Trader Hub. You can write to them at:

Privacy contact

[email protected]

What data we process

Your RCM Trader Hub account

• Your email address, which is your username.
• Your password. We do not store it as it is: we store a value calculated from it that cannot be reversed, so not even we can read it.
• Your sign-up date, your invitation code and, if another user invited you, who it was.
• If you turn on two-step verification, its secret key, which is stored encrypted.
• The browsers and devices you sign in from, stored as encrypted identifiers with the date. They are used to remember your device if you ask us to and to alert you if someone signs in from a new one.

Your MetaTrader 5 accounts

• The name you give each account, its number, your broker’s server and its role (master, follower or trade only).
• Each account’s password, always encrypted. It is only decrypted at the moment of connecting to your broker.
• Your copy and risk settings: multipliers, percentages, maximum volume, symbol filters…
• The trading data read from your accounts: balance, open trades, history and results, to show you your performance.

What you do on the web

• A log of the orders you place from the web (open, modify, close or cancel): date, account, order, result and IP address. It is the record of what was done and who did it, in case there is a problem or a claim.
• Your IP address, also to limit failed sign-in attempts and to show it to you in new-device sign-in alerts.
• What you save on the web: price alerts, chart drawings and levels, your scripts and indicators.
• If you publish an indicator for the community, it is shown with the author name you choose. Your email is never shown.
• If you turn on notifications on your phone or computer, the subscription address your browser generates so we can send them to you.

Payments

• The billing details you give us and the history of your payments and invoices.
• Your card details are handled directly by the payment platform. We never see or store them.

Acceptance of the terms

• When you accepted the terms, the privacy policy and the risk disclosure, which version you accepted and from which IP address.

If you write to us

• Your messages and what you tell us in them, so we can reply.

We do not ask for your name, address, phone number or ID document to use the service, except for the details needed to issue an invoice.

Why we use it and on what legal basis

We will only send you marketing emails (news, offers) if you give us separate permission, and always with an unsubscribe link. We do not build marketing profiles or make automated decisions about you. Trade copying is automatic, but it only follows the settings you choose.

How long we keep it

• While you have an account: all the data needed to provide the service.
• When you delete a MetaTrader account from the web: its encrypted password and its settings are deleted immediately.
• When you delete your RCM Trader Hub account: your MetaTrader accounts, their passwords, your settings, your alerts, your drawings and your scripts are deleted immediately. We only keep, blocked and not used for anything else, what the law requires us to keep:
  • Invoices and payment data: for the periods set by tax and commercial law (up to 6 years).
  • The order log and the record of acceptance of the terms: up to 5 years, the period in which a claim can be made.
• Backups: deleted data also disappears from backups within 30 days at most.

Who we share it with

We do not sell or pass on your data to anyone. It is only processed, on our behalf and under contract, by the providers we need for the service to work:

Your broker: to connect your accounts, the platform sends the account number and password you give us to your broker’s servers, just as MetaTrader 5 would on your computer. Your broker processes your data as an independent controller, under its own privacy policy.

We may also provide data to the authorities when required by law.

Transfers outside the European Union

Some providers, such as Cloudflare, may process data in the United States. In those cases, the transfer is protected by the EU-US Data Privacy Framework or by the standard contractual clauses approved by the European Commission.

How we protect your data

• The whole website runs over an encrypted connection (https).
• MetaTrader passwords and two-step verification keys are stored encrypted.
• Web sign-in passwords are stored as a value that cannot be reversed.
• Two-step verification to sign in and an extra check to trade from the web.
• A limit on failed attempts and an email alert when someone signs in from a new device.
• Each user can only see their own accounts.

No system is infallible. If there is ever a security breach affecting your data, we will let you know and report it to the Spanish Data Protection Agency (AEPD) when the law requires it.

Your rights

You can ask us at any time for:

• Access: to know what data of yours we hold.
• Rectification: to correct anything that is wrong.
• Erasure: to delete it. You can delete your account yourself from Settings.
• Objection and restriction: to stop using it for a specific purpose or to block it.
• Portability: to receive it in a format you can take to another service.
• Withdrawal of consent where you have given it, for example by turning off notifications.

Email us at [email protected] from your account’s email address. We will reply within one month at most. If you cannot sign in to your account, you can also ask us to delete it at that address.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.

Minors

RCM Trader Hub is only for people aged 18 or over. If we find that an account belongs to a minor, we will delete it.

Changes to this policy

If we change anything significant, we will notify you by email or on the web before it takes effect. The version and date of the last update are always shown at the top.