Privacy Policy

This policy describes the personal information IDEAL FOREX handles when you use idlfx.com, buy a licence or subscription, contact support or use the trading tools. It states what we hold, why, who it may be shared with, how long it is kept and what choices you have.

Information we hold

Account information. Your name, email address, timezone preference and a password, which is stored only as a one-way hash and is never readable by us.
Order and licence records. The products purchased, amounts, currency, dates, invoice details, order status, issued licence keys, activation records and download logs. These exist so that a licence dispute can be settled from a record rather than from memory.
Support correspondence. Messages you send through the contact form or a support ticket, including anything you choose to attach.
Tool inputs. Where you submit values to a calculator, the inputs and the result may be processed to produce the answer. Do not enter personal information about third parties, account credentials or anything you would not want repeated in correspondence.
Technical records. Log entries needed to operate the service securely, which may include a hashed rather than raw form of an identifier where one is required for abuse prevention.

What we do not hold

Card payment details are never stored by us. Card payments are taken on the payment provider's own hosted checkout page. We receive confirmation that a payment was made, together with the reference needed to match it to an order; we do not receive, see or retain card numbers, expiry dates or security codes.

We do not hold your broker trading password and never request it. No form, message template or support script asks for it. Where a verification of third-party activity genuinely requires access, only the read-only investor password is ever involved; it is requested for that specific purpose, is never used as a login to our services, and is not retained as an authentication credential once the check is complete.

We do not hold client investment capital, and there is no wallet, balance or deposit function on this site.

Purposes and lawful basis

Performing a contract: issuing the licence or subscription you paid for, delivering downloads and maintaining activation limits.
Legal obligation: keeping transaction and accounting records for the period tax and company law require.
Legitimate interests: securing accounts, preventing abuse and fraud, and handling support enquiries.
Consent: for marketing email, which is sought separately, is never assumed, and can be withdrawn at any time without affecting a licence you already hold.

Sharing

We do not sell personal information, and we do not rent or trade customer lists. Information is disclosed only to the extent necessary to operate the service: our hosting and infrastructure providers, our payment provider for the checkout, our email provider for transactional messages, and advisers or authorities where disclosure is required by law. Each processes a limited set of data for a defined purpose under their own obligations.

Retention

The principle is that data is kept only as long as its purpose requires. Account and profile data is kept while the account is open. Order, invoice and licence records are retained after closure for as long as accounting and tax law requires, because they evidence a transaction and the permissions granted under it. Support correspondence is kept for a limited period so that an older case can be reopened accurately. Marketing consent records are kept while they remain relevant. Data whose purpose has expired is deleted or anonymised.

Your rights

You can ask us to confirm what we hold about you, to provide a copy of it, to correct anything inaccurate, to delete it where no legal obligation requires us to keep it, to restrict or object to particular processing, and to withdraw marketing consent. Requests are made through the contact form from the email address on the account, so that the request can be matched to the record it concerns. Where a request cannot be met in full — for instance a transaction record that accounting law requires us to retain — we will say which part is retained and on what basis.

Cookies and local storage

The site uses the minimum storage needed to function: a session identifier for signed-in areas, a CSRF token for forms, and a small local preference entry so that your chosen light or dark theme is remembered between visits. Theme preference is stored locally and is not sent to us for analysis. Where optional services such as fonts or analytics are loaded from a third party, that party may receive limited technical information about the request, and any such addition is disclosed here before it is enabled.

Security

Passwords are hashed, access to licence and payment records is authorised per request rather than per page, administrative changes are logged, and transport is over HTTPS. No system is unconditionally secure; if you believe your account has been accessed without permission, contact us immediately so we can act on it.

Controlling this policy

[Owner to confirm before launch: the data-controller name, the postal address for written requests and the email address or role handling privacy and data-protection questions, together with the jurisdiction whose law governs this policy.]

Changes

Where this policy changes materially, the updated version is published at this address with its effective date. Continued use of the service after that date is governed by the version then published.