Privacy Policy

Trading 212 is committed to the protection of your personal data and we do not access or use it for any purpose other than providing, maintaining and improving our services and as otherwise required by law. In order to open and maintain client accounts, we obtain and hold personal information. This policy outlines how we manage such information to ensure we meet our obligations to respect our clients’ privacy and that all such information remains confidential. We are bound by the terms of the General Data Protection Regulation 2016/ 679 (GDPR) and any applicable data protection law.

Information for Trading 212

This Privacy Policy applies to the data processing activities of any entity within Trading 212 Group Limited (‘‘Trading 212’’). The two main legal entities within the Trading 212 Group are:

1) Trading 212 UK Ltd.
Phone: +44 203 769 98 97
Email: info@trading212.com
Address: 107 Cheapside
London EC2V 6DN

Trading 212 UK Ltd. is a company registered in England and Wales (Register number 8590005). Trading 212 UK Ltd. is authorised and regulated by the Financial Conduct Authority (Register number 609146).

2) Trading 212 Ltd.
Phone: +359 800 46049
Email: info@trading212.com
Address: 3 Lachezar Stanchev Str.
Litex Tower, floor 10
Sofia 1797, Bulgaria

Trading 212 Ltd. is registered in Bulgaria (company number 201659500). Trading 212 Ltd. is authorised and regulated by the Financial Supervision Commission (FSC) (Register number RG-03-0237).

What sort of information do we need?

When you access our Website at www.trading212.com, our Trading 212 platform, Trading 212’ product page in the Apple App Store or Google Play Store (together with the ‘‘Website’’), connect to, sign up to, participate in, create an account for, make individual operations within or otherwise use our services, we may collect personal data about you. We also process the personal data that we received from you as part of the contractual relationship that we have with you or for the purposes of legitimate interests pursued by Trading 212. We also process data that we have legitimately received from publicly available sources.

1. In the course of opening an account for you, we need to collect personal information from you to enable us to establish your identity. To do this, we will request some personal data which includes your full name, country of residence, your address, date of birth, nationality, contact details, email address, phone number.
2. In order to prevent fraud, we may collect information about your financial status (i.e. income and savings). To facilitate your funding and withdraw requests, we may process your IBAN details and other payment processing information as requested by the respective payment services providers.
3. As a regulated investment firm, we are obliged by law to identify every client by his or her ID card, driving licence or passport and documents that can be used as a proof of address (e.g. utility bill, bank statement). Pursuant to applicable laws, use additional online electronic verification tools that might request, among other things further details, documents, photo and video evidence from yourself. It is also for your own security to have a proper identification upon opening an account with Trading 212.
4. To assess the appropriateness of our services to your circumstances and experience and to assess whether you may qualify as a professional or retail (non-professional) client, we may ask for additional information such as, but not limited to, trading experience, employment details, knowledge and experience in financial services and products.

We will request this information from you through our application form, and also use our own records and information from other sources for compliance with legal and regulatory obligations.

The processing and the storage of your personal data is necessary to provide you the services described in the Trading 212 Client Agreement and Share Dealing Service Terms of Business and to comply with our regulatory obligations. If you choose not to provide some of the requested information to us, we may be forced not to enter into an agreement with you or to refuse the performance of an existing agreement and consequently terminate it as we will not be able to fulfil our contractual and regulatory duties.

We keep the information as up to date as possible, and will change any details, such as your address, promptly when you inform us that they have changed.

Personal data that may be processed by Trading 212 comprise as well any type of electronic communications such as letters, emails, chat messages, telephone conversations, tax identification number and any related tax information, any personal information resulting from the KYC/AML checks carried out by Trading 212 pursuant to the applicable legislation relating to the fight against money laundering and terrorist financing.

Your use of the Website and related mobile applications and online services involves the automated collection of certain types of information, some of which may be considered personal information. This information includes: IP address, browser type and operating system.

In addition, the Website uses a range of cookies to improve and personalise your experience. More information about these can be found in our Cookies Policy.

Why do we need this information and on what legal basis is the data processed?

Lawfulness of processing

We will process your personal data (including collect, use, store and transfer, if applicable):

1. for the performance of the Trading 212 Client Agreement and/or the Share Dealing Service Terms of Business (together referred to as the ‘‘Agreement’’) concluded between you as a client and Trading 212 and for the provision of the services described in the Agreement or accessed through the Trading 212 platform (the ‘‘Services’’);
2. to take steps at your request prior to entering into an Agreement or for opening a demo account for you;
3. for compliance with legal and regulatory obligations to which Trading 212 is subject (including but not limited to the obligations arising under the MIFID 2 regulation, anti-мoney laundering and countering terrorist financing regulatory obligations, any applicable tax legislation etc.) Examples of such regulatory obligations include, among others: reporting obligations to the FCA and the FSC; providing information to financial crime authorities of suspicious money-laundering transactions or in the context of financial criminal proceedings; providing information to tax authorities. Please note that in order to meet some of the above requirements we may use automated decision making and profiling, whereas you may request human intervention, however you will not be able to object to such processing.
4. In case the processing of personal data is necessary for the purposes of the legitimate interests pursued by Trading 212 - for example, in case we are obliged to provide a reference about you to a public authority or agency in order to comply with a legal obligation, to send you surveys for analytical and statistical purposes, as well as to ensure that we provide you with the best trading services and information we can and to continue improving our products in your best interest.
5. Within the scope of your consent – for example, for marketing and promotional purposes. If you have granted us consent to process your personal data for marketing purposes, processing will only take place in accordance with the purposes set out in the declaration of consent and to the extent agreed therein. Any consent given may be revoked at any time by you with future effect.

Purposes

Trading 212 will process your personal data for the purposes of:

1. providing the Services requested by you and carried out in relation to the concluded Agreement, including, among others, verify your identity, open and manage your account. This may include third parties carrying out identity checks on our behalf. Further, processing of data includes processing your deposit and withdraw requests, managing client relationships by means of electronic, telephone or chat communication, entering into and executing transactions with financial instruments.
2. opening a demo account with us or having chat or email communication;
3. conducting a risk assessment as prescribed by applicable legal provisions by collecting and archiving required documentary evidence regarding your identity; conducting a risk management control, data analysis and global supervision of your ongoing needs and enhancing the services offered to you;
4. improving and personalising our Services to enhance your trading experience by providing you with market information which we believe may be relevant to you and send you important account and Services related data by different communication channels, including surveys, in-app notifications, platform messages and emails we think would be of interest to you.
5. preventing misuse and fraud, demonstrating business transactions and communications; managing transactions surveillance and monitoring and complying with reporting obligations; managing risks, disputes, complaints, litigation or in the context of prosecution;
6. marketing communications with you about updates to our products and services and informing you about any promotions offered by us, as long as it is in our legitimate interest or you have consented to receive such communications and unless you choose to opt-out of them. You can choose to opt-out of receiving such communications at any time by contacting us using the contact details set out in this Policy. We can continue to offer you the Services without this additional service.

Who are the recipients of your personal data?

Your personal data is received and processed by those employees of Trading 212 that need it for the execution of contractual, legal and regulatory obligations. Further, we may disclose, to the extent we deem such disclosure or transmission is necessary for satisfying the purposes set out above, to the following recipients:

1. Other companies within the Trading 212 Group. This data may be transferred in order to allow us to provide a full service to you, where other companies within Trading 212 Group perform components of the full service offering such as financial, IT maintenance or support services;
2. Any lawyers, external auditors or advisors, professional consultants, credit reference agencies, notaries, bailiffs, as well as any courts, regulatory, governmental, administrative or other official bodies as agreed or may be required by law, where such disclosure is necessary (i) to comply with any applicable law or regulation; (ii) to enforce applicable terms and conditions or policies; (iii) to protect the security or integrity of our services; and (iv) to protect our rights and interests;
3. third-party service providers that provide IT services, advisory and consultancy services, research, identity verification checks, payment processing services, insurance or other services to Trading 212, which are only authorised to process your personal data strictly for the purposes of providing these services and in accordance with our instructions. If applicable, we will enter with such third-party service providers into the relevant contractual agreements or the standard data protection clauses that would be required under the GDPR to ensure compliance with our instructions;
4. third parties as part of mergers and acquisitions, provided that the prospective buyer or seller agree to respect your personal data in a manner consistent with our Privacy Policy

We will require any entity to whom we disclose your information or who may obtain it on our behalf to ensure its confidentiality, and to handle it in line with the legitimate purpose for which they are allowed to access it and in accordance with the GDPR. We will not share or sell your information with third parties for their own independent marketing or business purposes without your consent.

Transferring Information Internationally

The personal data that we collect from you may be transferred to and stored at a destination outside the EEA, including at destinations that are or aren’t subject to a decision by the European Commission establishing an adequate level of protection of personal data. It can be shared with other companies within the Trading 212 Group, processed by staff working for us or for one of our suppliers, located outside the EEA. Such personnel may, for example, be involved in the execution of our support services. We will take all reasonable necessary steps to ensure that your personal data is treated securely and in accordance with this Privacy Policy and have adopted appropriate safeguards to protect it.

How long will your data be stored?

We will process your personal data for the entire duration of the Agreement you have concluded with us and for a period of five years after the termination of the Agreement to comply with the applicable anti-money laundering legislation and legal safe-keeping obligations. Further, any personal data will not be retained for longer than the time necessary for satisfying the purposes of its processing, subject to the general statutory limitation periods and the mentioned retention period where the applicable laws require that the personal data is retained for a certain period after the termination of our business relationship with you.

What are your rights regarding your personal data processing?

You have the right to:

1. access and obtain information about your personal data – you have the right to request what information (if any) we process for you and if so, provide you with information containing your personal data and a copy of that personal data undergoing processing. To request information, we will need to verify your identity. If you require additional copies, we may need to charge a reasonable administration fee for requests that we deem are manifestly unfounded. Upon receiving a request from you and/or upon the receipt of the applicable fee, we will acknowledge your request and respond to you within one month as from filing your request.
2. rectify any factual inaccuracies or incompleteness with respect to your personal data - If the personal data we hold about you is inaccurate or incomplete, you may ask from us to correct it. Upon receiving such a request from you, we will acknowledge it and respond to you within one month as from filing your request. If we have shared your personal information with others, we will let them know about the rectification where possible.
3. request deletion of your personal data - you can ask us to delete or remove your personal data in cases where we no longer need it. However, please note that such request will be satisfied provided that we have no legal obligation to retain such data and will be subject to any retention periods we are required to comply with in accordance with applicable laws and regulations as specified in section ‘’How long will your data be stored’’ above.
4. request restriction of processing - you can ask us to restrict the processing of your personal data in certain circumstances such as where you contest the accuracy of that personal information, for a period enabling Trading 212 to verify the accuracy of your personal data or in case you deem the processing is unlawful. Such objection may not impede us from storing your personal information though.
5. object to the processing of personal data by Trading 212 – you can require from us to terminate the processing of your personal data, and we will comply with such request in cases where your personal data is processed for the purposes of direct marketing or research (if applicable) or if we are relying on our own legitimate interests to process your data except if we can demonstrate compelling legal grounds for the processing.
6. request portability of your personal data - you have the right, when applicable, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit those data to another entity (data controller) of your choice when this is technically possible.
7. lodge a complaint with a supervisory authority - you have the right to lodge a complaint regarding our processing of your personal data with your supervisory authority.

Please contact us using the contact details provided below to make a request in respect of your rights. We will use commercially reasonable efforts to respond to your request within 30 days of receiving such request. If we cannot honour your request within the 30-day period, we will let you know the reasons why and when we expect to be able to fulfil your request.

How do we manage and protect your personal data?

We put a lot of efforts and apply the highest technical and organisational standards to ensure that your personal data is secured and kept confidential. Any personal data that you provide to us is stored on secure servers, and we use rigorous procedures to protect against loss, misuse, unauthorised access, alteration, disclosure, or destruction of your personal data. We protect your personal information by maintaining physical, electronic, and procedural safeguards in compliance with the applicable laws and regulations. Part of the measures that we apply to provide a high level of security in terms of personal data management include, among others:

1. Pseudonymisation – we process your personal data in such a manner that it can no longer be attributed to a specific person without the use of additional information which additional information is kept separately and is subject to specific technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person;
2. Encryption – we apply cryptographic methods which convert certain information or data into a code to make it unreadable for unauthorized users;
3. Minimisation – the personal data we demand from you is adequate, relevant and only limited to what is necessary in relation to the purposes for which such data is processed;
4. Strict internal control on access to your personal data – access to your personal data is allowed only to those of our employees who need such verification to properly exercise their professional duties;
5. Penetration testing – we apply an authorised simulated attack on a certain computer system, performed to evaluate the security of such system; Regular scanning and penetration testing is used to identify potential security vulnerabilities and apply the relevant remedies to rectify them;
6. Ensuring ongoing application of integrity, confidentiality and education of all our employees.

We maintain security and incident response plans in the event of a physical or technical incident to handle this in a timely manner and limit any negative effect of such incident. Although we work hard to protect your personal data, we cannot guarantee that our safeguards will prevent every unauthorised attempt to access, use or disclose personal data.

Please recognise that you play a vital role in protecting your own personal data. When registering with our services, it is important to choose a password of sufficient length and complexity, to not reveal this password to any third parties, and to immediately notify us if you become aware of any unauthorised access to or use of your account. If you believe that any of your account login details have been or might have been exposed, you can change your password at any time through our Website, as well as immediately contact our customer service. Given the nature of communications and information processing technology, we cannot guarantee that information, during transmission through the Internet, will be absolutely safe from intrusion by others.

How will we store your personal data?

Your information will be held on our secure computer systems. We have in place systems and procedures to prevent unauthorised access, improper modification or disclosure, misuse or loss of information.
We need to hold your information for some time after you have provided it to us, even if we no longer have a contractual relationship with you. Once we consider that such information is no longer needed, we will destroy it.

How to contact us and how to complain?

If you have any questions with regard to your rights or the present policy or if you consider that we have failed to respect your confidentiality, you may contact us by:

Phone: +44 203 769 98 97
Email: info@trading212.com
Address: Trading 212 UK Ltd.
107 Cheapside
London EC2V 6DN

or

Phone: +359 800 46049
Email: info@trading212.com
Address: 3 Lachezar Stanchev Str.
Litex Tower, floor 10
Sofia 1756, Bulgaria

We inform you that we use video surveillance in our offices and if you visit any of our office premises, you may be subject to video recording. We are also obliged by law to record all our telephone conversations with clients.

Trading 212 Data protection officer
You may also contact our Data Protection Officer about any request you have related to your personal data:
Email: dpo@trading212.com

If you are not satisfied with our response to any complaint with regard to your personal data, you have the right to lodge a complaint with the respective supervisory authority, namely:
If you are a client of Trading 212 UK Ltd.: the Information Commissioner’s Office (ICO) at https://ico.org.uk/concerns/ or by phone on +44 1625 545 745.
If you are a client of Trading 212 Ltd.: Commission for personal data protection at https://www.cpdp.bg/en/index.php?p=pages&aid=5
1592 Sofia, 2, Prof. Tsvetan Lazarov blvd.,
Email: kzld@cpdp.bg

Linking to Other Websites

If you access links on the Website to third party websites which are not owned by Trading 212, or if you access the Website through links from other websites, please be aware that these websites have their own privacy policies. We do not accept any responsibility or liability for these privacy policies. You should check and review these privacy policies before you submit any personal data to these websites.

Open Banking

We use a tool provided by TrueLayer Limited (www.truelayer.com) ("TrueLayer") that allows you to send information on your payment accounts to us and other service providers. In order to use our services, you will be asked to agree to their Terms of Service (https://truelayer.com/enduser_tos/) and enter your payment account details with TrueLayer or, for Open Banking connections, you will be redirected to your bank by TrueLayer in order to authenticate yourself. The Terms of Service set out the terms on which you agree to TrueLayer accessing information on your payment accounts for the purposes of transmitting that information to us. We use a tool provided by TrueLayer to initiate payments from your payment account. In order to use our services, you will be asked to consent to the payment via TrueLayer and TrueLayer's terms of service (https://truelayer.com/enduser_tos/) will apply to the payment initiation. TrueLayer's Terms of Service set out the terms on which you agree to TrueLayer initiating a payment from your payment account. TrueLayer is subject to UK and EU data protection laws and is required to treat your data in accordance with those laws, as well as the TrueLayer's Terms of Service and TrueLayer's Privacy Policy (https://truelayer.com/privacy/). TrueLayer is authorised by the UK Financial Conduct Authority under the Payment Services Regulations 2017 to provide account information services and payment initiation services (Firm Reference Number: 793171 ).

Direct Debit

We use GoCardless to process your Direct Debit payments. More information on how GoCardless processes your personal data and your data protection rights, including your right to object, is available at gocardless.com/legal/privacy

Are children allowed to use our services?

The services offered by Trading 212 are not allowed to be used by any person under the age of 18. We do not knowingly collect personal information from children under the age of 18 without the consent of the child's parent or guardian. If you learn that anyone younger than 18 has unlawfully provided us with personal data, please contact us, and we will take steps to delete such information.

Changes to This Privacy Policy

We may change this Privacy Policy from time to time by posting the updated version on our Website. Laws, regulations and industry standards evolve, which may make those changes necessary, or we may make changes to our business. We advise you to review this page regularly to stay informed and to make sure that you are happy with any changes. If the changes are significant, we will provide you with a more prominent notice such as an email notification or through the Services. If you disagree with the changes to this Privacy Policy, you should discontinue your use of the Website or related Services. If we change this Privacy Policy in a way that will affect how we use your personal data, we will advise you of the choices you may have as a result of those changes.