引言
N S Capital (Global) Limited ("we", "us" or "our") operates northstonecapital.net and provides the services described on this website. This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit our website, open a demo or live account, or otherwise interact with our services.
N S Capital (Global) Limited, incorporated on 22 April 2015 (Company No. C 74156), is based in Malta with its registered address at Level 4, W Business Centre, Triq Dun Karm, Birkirkara BKR9033, Malta, and is regulated by the Malta Financial Services Authority under the Investments Services Act to provide investment services (view licence: #).
For the purposes of data protection law, N S Capital (Global) Limited acts as controller of your personal data in respect of the website, onboarding, account relationship, shared systems and related services. We apply GDPR-grade standards as a baseline where required by applicable law.
This policy should be read together with our Cookie Policy and the Terms of Service that govern your account. If you do not agree with the way we handle personal data as described here, you should not use our services.
我们收集的信息
当您注册、验证身份、为账户入金、进行交易或联系客服时，我们会收集您直接向我们提供的信息。这包括身份和联系数据（全名、电子邮件地址、电话号码、邮政地址、出生日期、国籍、居住国和税务居民身份所在地），以及在您使用真实资金交易前我们依法必须取得的验证文件，例如政府签发的身份证件、地址证明，以及（如有使用）通过我们的身份验证服务商处理的验证照片。
由于我们是受监管的金融服务公司，我们还会收集财务及适当性信息：您的就业状况、您拟用于交易的资金及财富来源、收入和净资产的大致区间、您以往的交易经验，以及用于向账户入金和出金的支付详情。账户开立后，我们会完整记录您的交易活动，包括订单、成交、持仓与平仓、账户余额、入金和出金。
当您使用网站或交易平台时，我们会自动收集技术数据：IP 地址、设备和浏览器类型、操作系统、语言设置、浏览的页面、时间戳、根据您的 IP 地址推算的大致位置，以及下文“Cookie 与跟踪”一节所述的 Cookie 或类似标识符。我们还会保留与您之间的通信记录，包括客服聊天、电子邮件，以及在适用监管规定要求的情况下，与您的账户或订单有关的电话通话录音。
最后，我们会从我们被要求或有权使用的第三方处获取关于您的信息：身份验证和欺诈防范服务商、制裁名单及政治公众人物筛查服务、支付服务提供商，以及（在允许的情况下）公开可得的来源。如果您仅开立模拟账户，我们收集的数据范围较小，通常为您的姓名、电子邮件地址和电话号码，以及您使用平台的技术数据。
我们如何使用您的信息
我们仅在具备合法依据的情况下处理个人数据，且就每项处理目的依赖以下其中一项依据。
为履行我们与您订立的合同，我们使用您的数据开立和管理您的账户、验证您的身份、执行和结算您的订单、处理入金和出金、提供交易平台并回应您的客服请求。没有这些处理，我们根本无法提供服务。
为遵守我们的法律义务，我们使用您的数据执行“了解你的客户”核查、反洗钱和反恐怖融资筛查、制裁核查、适当性评估、向我们运营实体的监管机构进行交易报告和监管报告、法定记录保存，以及在相关监管机构的规则要求时对通信进行录制。这些义务适用于整个集团，且不能应您的要求予以豁免。
基于我们的合法利益，我们使用个人数据保障平台安全并侦测欺诈和滥用行为、监测和改进我们的服务表现、生成汇总和去标识化的分析数据，以及确立、行使或抗辩法律权利主张。在依赖合法利益时，我们会将其与您的权利进行权衡，您可以按“您的权利”一节所述提出反对。在征得您同意的情况下，我们会向您发送有关我们产品和服务的直接营销信息；您可以随时撤回该同意，且不影响撤回前处理的合法性。North Stone Capital 不提供投资建议，我们也不会使用您的个人数据生成个人投资推荐。我们的身份验证和欺诈筛查流程的部分环节是自动化的；在法律赋予您对完全基于自动化处理作出的决定要求人工复核的权利时，您可以通过 privacy@northstonecapital.net 提出该请求。
信息共享
We do not sell personal data. We share it only as described in this policy and under contractual or legal safeguards.
Within our business, personal data may be shared where necessary to operate shared systems, complete onboarding, provide support, administer accounts, meet compliance obligations and manage risk.
We use carefully selected service providers that process data on our behalf and only on documented instructions: identity-verification and screening providers, payment providers and banking partners, cloud hosting and IT infrastructure suppliers, communications and customer-support tools, and analytics providers. Each is contractually bound by confidentiality and security obligations consistent with this policy.
We may disclose personal data to the Malta Financial Services Authority, financial-intelligence units, tax authorities, external auditors, professional advisers, law-enforcement agencies or courts where required by applicable law, regulation or legal process, or where necessary to protect the rights, property or safety of our clients, our business or others. If we are involved in a merger, acquisition, restructuring or asset sale, personal data may transfer to the counterparty under confidentiality obligations, and we will notify you of any resulting controller change where required.
数据安全
我们实施旨在保护个人数据免遭未经授权的访问、篡改、披露、丢失或破坏的技术和组织措施。这些措施包括对传输中的数据和静态存储的敏感记录进行加密、实行基于角色的访问控制以使员工仅能查看其职责所需的数据、在内部系统上启用多因素身份验证、网络隔离、持续的日志记录和监控、对服务提供商进行尽职调查、定期开展员工培训以及成文的事件响应程序。
如果发生可能对您的权利造成风险的个人数据泄露事件，我们将通知主管监督机构，并在风险较高时直接通知您，且在任何情况下均遵守适用法律规定的时限。
任何互联网传输或电子存储方式都不是完全安全的，我们无法保证绝对的安全。您也应尽到自己的一份责任：妥善保管您的账户凭据，启用我们提供的安全功能，如怀疑您的账户遭到未经授权的访问，请立即联系 support@northstonecapital.net。
数据保留
We keep personal data for as long as your relationship with us lasts and afterwards for as long as we are required or permitted to keep it. The governing periods come primarily from anti-money-laundering, financial-services, tax, accounting, dispute-resolution and regulatory-recordkeeping obligations that apply to N S Capital (Global) Limited.
In practice, this means identity, account and transaction records are commonly kept for several years after account closure or the final transaction, while website analytics, support correspondence and marketing preferences may have shorter retention periods. Where a complaint, investigation, litigation hold or regulatory inquiry is open, relevant records may be retained until it is finally resolved.
When retention is no longer necessary, we delete, anonymise or securely archive the data according to our retention schedule and technical capabilities.
您的权利
Depending on your country of residence and the law applicable to your relationship with N S Capital (Global) Limited, you may have rights over your personal data. Where GDPR or similar standards apply, these may include the right of access, rectification, erasure, restriction, objection, portability and withdrawal of consent.
These rights are not absolute. Financial-services, AML/CTF, tax, sanctions, fraud-prevention, legal-claims and regulatory-recordkeeping obligations may require us to keep or process certain data even where you ask us to delete or restrict it. Where we cannot comply fully, we will explain the reason unless legally prevented from doing so.
To exercise your rights, contact privacy@northstonecapital.net. We may ask you to verify your identity before acting on a request.
儿童隐私
我们的网站和服务面向成年人，并非针对任何 18 岁以下人士。我们不会有意收集未成年人的个人数据，我们的开户流程包含强制性的出生日期验证和身份验证，正是为了确保任何 18 岁以下人士都无法开立真实交易账户。
如果您认为有 18 岁以下人士向我们提供了个人数据，请联系 privacy@northstonecapital.net。如经确认我们持有从未成年人处收集的数据，我们将注销任何相关账户并删除该等数据，但法律要求我们保留该事件记录的情形除外。
国际数据传输
N S Capital (Global) Limited is based in Malta and uses service providers that may store or process data in other countries. Your personal data may therefore be transferred to, and maintained in, jurisdictions outside your country of residence.
Where personal data is transferred internationally, we use appropriate safeguards where required, such as contractual protections, transfer-impact assessments and vendor-security reviews. We select providers based on operational need, security posture and their ability to meet applicable privacy and financial-services obligations.
By using the website and services, you acknowledge that international processing may be necessary to provide account, platform, payment, support, compliance and security functions.
本隐私政策的变更
我们会定期审查本隐私政策，并在我们的处理活动、集团架构或法律发生变化时予以更新。本页面发布的版本即为现行有效版本，每次更新均以政策旁标注的生效日期予以标识。
如果我们作出重大变更，例如为新的目的处理数据、与新类别的接收方共享数据或变更您的签约实体，我们将在变更生效前通过电子邮件，或通过网站或交易平台上的醒目通知，提前向您发出通知。我们建议您定期查阅本页面；在更新版本生效后您继续使用我们的服务，即构成对更新后政策的知悉确认。任何更新均不会减损您根据适用数据保护法享有的权利。
联系我们
Questions, requests and complaints about this Privacy Policy or about how we handle your personal data should be addressed to privacy@northstonecapital.net. This mailbox is monitored by the team responsible for data protection and is the fastest way to exercise the rights described in this policy.
You can also write to us at N S Capital (Global) Limited, Level 4, W Business Centre, Triq Dun Karm, Birkirkara BKR9033, Malta. For general account or platform questions unrelated to privacy, contact support@northstonecapital.net.
If you are dissatisfied with our response to a privacy concern, you may have the right to complain to the relevant data-protection supervisory authority. We would appreciate the opportunity to resolve the matter directly first.