Privacy Policy

Last updated: 9 July 2026

Ze Broker is a trading name operated by Atlantis Corporates, having its registered office at 88-90 Hatton Garden, London, Holborn, EC1N 8PG, United Kingdom (the “Company”, “we”, “us” or “our”). This Privacy Policy explains how we collect, use, disclose, transfer, retain and safeguard your personal data when you access or use the Platform. We act as data controller within the meaning of the retained EU General Data Protection Regulation as it forms part of the law of England and Wales (the “UK GDPR”) and the Data Protection Act 2018.

1. Scope

This Policy applies to personal data we process about visitors, registered users, and representatives of corporate users. It should be read together with our Cookie Policy and Terms of Service.

2. Categories of Personal Data We Collect

  • Identity and verification data: full name, date and place of birth, nationality, gender, government-issued identification numbers and documents, proof of address, photographs, video and biometric verification data, and source-of-funds and source-of-wealth information.
  • Contact data: email address, telephone number and postal address.
  • Financial and transactional data: wallet addresses, balances, deposits, withdrawals, orders, transaction history and counterparties.
  • Technical and usage data: IP address, device and browser identifiers, operating system, log data, and interactions with the Platform, collected including through cookies and similar technologies.
  • Communications data: the content of your communications with us, including support tickets and correspondence.

3. How We Collect Personal Data

We collect personal data directly from you (for example when you register, verify your identity or transact), automatically (for example through cookies, logs and device data), and from third parties (for example identity-verification providers, sanctions and fraud-prevention databases, blockchain analytics providers and public sources).

4. Purposes of Processing and Legal Bases

We process your personal data to: (a) create and administer your Account and provide the Services (legal basis: performance of a contract); (b) verify your identity and comply with anti-money-laundering, counter-terrorist-financing, sanctions, tax-reporting and other legal obligations (legal basis: compliance with a legal obligation); (c) prevent, detect and investigate fraud, abuse, security incidents and prohibited conduct, and to protect and enforce our rights (legal basis: our legitimate interests); (d) operate, maintain, secure and improve the Platform and for analytics (legitimate interests); (e) communicate with you and provide support (contract and legitimate interests); and (f) where applicable, send marketing communications (consent, which you may withdraw at any time).

5. Automated Decision-Making and Profiling

We may use automated tools to screen transactions and detect fraud, money laundering and sanctions exposure. Where any such processing produces legal or similarly significant effects concerning you, we implement suitable measures to safeguard your rights, including, where required, the ability to obtain human intervention and to contest the decision.

6. Cookies and Similar Technologies

We use cookies and similar technologies as described in our Cookie Policy.

7. Recipients and Disclosure of Personal Data

We may disclose personal data to: identity-verification, fraud-prevention and compliance providers; connected exchange, custody and liquidity partners; cloud, hosting, analytics and communications providers; payment processors; professional advisers, auditors and insurers; potential or actual purchasers in connection with a corporate transaction; and competent regulatory, tax, law-enforcement or judicial authorities where required or permitted by Applicable Law. We do not sell your personal data.

8. International Transfers

Where we transfer personal data outside the United Kingdom, we implement appropriate safeguards, such as transfers to jurisdictions subject to UK adequacy regulations, or the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with any additional measures required to ensure an adequate level of protection.

9. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with our legal, regulatory, accounting and reporting obligations. Identity-verification and transaction records are retained for at least five (5) years following the end of our business relationship or the date of the relevant transaction, as required by applicable anti-money-laundering law, and may be retained longer where necessary to establish, exercise or defend legal claims.

10. Your Rights

Subject to Applicable Law and to our legal and regulatory obligations, you have the right to: be informed about our processing; access your personal data; request rectification of inaccurate data; request erasure; restrict processing; object to processing (including to direct marketing); data portability; and withdraw consent where processing is based on consent. Certain rights may be limited where we are required by law to retain data (for example for anti-money-laundering purposes) or where an exemption applies. To exercise your rights, contact us at the address below. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

11. Marketing

Where you have consented, or where otherwise permitted by law, we may send you marketing communications about our products and services. You may opt out at any time using the unsubscribe mechanism provided or by contacting us.

12. Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage, including encryption, access controls, network security and monitoring. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Personal Data Breaches

We maintain procedures to detect, investigate and respond to personal data breaches and, where required by Applicable Law, will notify the relevant supervisory authority and affected individuals.

14. Children

The Services are not directed to, and may not be used by, persons under 18 years of age. We do not knowingly collect personal data from children.

15. Third-Party Links

The Platform may contain links to third-party websites or services that are not operated by us. This Policy does not apply to those third parties, and we are not responsible for their privacy practices.

16. Changes to this Policy

We may update this Policy from time to time. The revised version takes effect upon posting on the Platform, and, where the change is material, we will provide additional notice.

17. Contact and Data Controller

Data Controller: Atlantis Corporates, 88-90 Hatton Garden, London, Holborn, EC1N 8PG, United Kingdom. Email: privacy@zebroker.com. In the event of any conflict between the English version of this Policy and a translation, the English version prevails.