Privacy Policy

At Marula Capstead, protecting and responsibly handling your personal information is a top priority. We process data transparently, for clearly defined purposes, and in accordance with applicable data protection laws. This Privacy Policy explains what information we collect, why we collect it, how long we retain it, and the measures we take to keep it secure.

1. Data Controller

The operator of the Marula Capstead website and platform acts as the controller responsible for processing your personal data. Relevant contact information and additional company details can be found on this website. If you have any privacy-related questions, you may contact our data protection team.

2. Information We Collect

We only collect and process information necessary to provide our services, comply with legal obligations, and maintain the secure operation of the platform. This may include:

Identity information: first name, last name, and date of birth for age and identity verification purposes.
Contact information: email address, telephone number (where provided), country of residence, and, where applicable, postal address.
Account and transaction information: payment details, deposits, withdrawals, and transaction history.
Technical and usage information: IP address, browser type, device details, access times, and system log data.
Verification documentation: identification documents, proof of address, or other materials required for KYC and AML compliance procedures.

We generally do not collect special categories of personal data, such as health information or religious beliefs, unless legally required or explicitly authorized by you.

3. How Information Is Collected

Your information may be collected through several secure channels:

Directly from you, for example during registration, profile updates, document verification, or when contacting support.
Automatically through cookies, server logs, analytics tools, and device information while you use the platform.
From trusted third parties, such as payment providers, identity verification services, or social login providers when you choose to use them.

4. Purposes of Processing

We process your personal information only for legitimate and clearly defined purposes:

Creating, managing, and maintaining your user account and access to platform features.
Processing and securing deposits, withdrawals, and payment-related activities.
Providing customer support and responding to inquiries.
Complying with legal and regulatory obligations, including KYC, AML, and tax-related requirements.
Maintaining platform security and preventing fraud, abuse, or unauthorized access.
Improving platform performance, functionality, and user experience.
Providing marketing communications and updates where you have given explicit consent.

5. Legal Basis for Processing

Performance of a contract or steps taken prior to entering into a contract.
Compliance with legal obligations, including anti-money laundering and regulatory requirements.
Legitimate business interests, such as maintaining platform security, reliability, and operational stability.
Your explicit consent, for example when receiving marketing communications or using optional platform features.

6. Sharing of Information

Your information is shared only when necessary and exclusively with carefully selected service providers and partners:

Payment service providers and banking institutions for transaction processing.
Specialized providers assisting with identity verification and compliance checks.
Technology and cloud service providers operating under appropriate data processing agreements.
Analytics and security service providers that, where possible, utilize anonymized or pseudonymized information.
Professional advisors such as legal or tax consultants where required.
Regulatory authorities, courts, or law enforcement agencies when legally obligated.

We do not sell, rent, or otherwise transfer your personal information to third parties for commercial purposes.

7. International Data Transfers

Certain service providers, including cloud hosting or analytics partners, may operate outside your jurisdiction. Whenever international data transfers occur, we implement appropriate safeguards such as standard contractual clauses or other recognized legal mechanisms to ensure an adequate level of data protection.

8. Data Security

We implement comprehensive technical and organizational measures to protect your information:

Encrypted data transmission using modern security protocols such as TLS 1.3+.
Strong encryption of sensitive information at rest using technologies such as AES-256.
Regular security assessments, penetration testing, and independent reviews.
Continuous monitoring for suspicious activities and potential security threats.
Strict access controls and role-based permissions for authorized personnel.
Segregated safeguarding of client funds through regulated financial partners.

Although no security system can guarantee absolute protection, we continuously work to minimize risks and maintain a high level of security.

9. Data Retention

Personal information is retained only for as long as necessary to fulfill the purposes outlined in this Policy or to satisfy legal requirements:

For the duration of your active account and contractual relationship with us.
For additional periods required by tax, regulatory, or legal obligations.
Until consent is withdrawn where processing is based solely on your consent.

When information is no longer required, it is securely deleted or permanently anonymized.

10. Your Rights

Subject to applicable law, you may exercise the following rights regarding your personal information:

Request access to the information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your information where legally permissible.
Request restriction of processing under certain circumstances.
Receive your information in a structured, commonly used, and machine-readable format.
Withdraw previously granted consent at any time.
Submit a complaint to a competent data protection authority.

11. Cookies and Similar Technologies

We use cookies and similar technologies to ensure platform functionality, analyze usage patterns, and improve user experience. Essential cookies are always active, while analytics and marketing cookies require your consent. Additional details can be found in our Cookie Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time due to legal, regulatory, or operational changes. The most recent version will always be available on the website. Where significant changes occur, we may notify you by email or through platform notifications.

13. Privacy Contact Information

If you have any questions regarding privacy, this Policy, or the exercise of your rights, please contact us via email at [email protected] or through the website's contact form. We will review your request and respond as promptly as possible.

By using Marula Capstead, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

Thank you for your trust. Protecting your information and respecting your privacy will always remain a core commitment of Marula Capstead.