Privacy Policy

Last updated: August 25, 2026.

1. Data Controller

The controller of personal data is CroFx (hereinafter: "CroFx", "we"), contact email: info@crofxtrading.com.

2. What Data We Collect

• Data you provide directly: name, username, email address, payment information (processed by our payment processor — we do not store card numbers), messages and communication via Discord or the contact form.
• Data collected automatically: IP address, device and browser type, pages you visit and time spent on them (via cookies and similar technologies — see our Cookie Policy).

3. Purpose and Legal Basis of Processing

• Performance of a contract (Art. 6(1)(b) GDPR) — creating and managing your user account, billing for membership, access to educational content and the Discord community.
• Legitimate interest (Art. 6(1)(f) GDPR) — improving the website, traffic analytics, preventing misuse.
• Consent (Art. 6(1)(a) GDPR) — sending marketing communications (newsletter), optional cookies.
• Legal obligation (Art. 6(1)(c) GDPR) — maintaining accounting and tax records.

4. Sharing Data with Third Parties

We may share your data with service providers who help us operate, such as:

• payment service providers (processing subscriptions);
• Discord (for access to the community — also subject to Discord's own privacy policy);
• hosting and infrastructure providers (e.g., Netlify, Supabase);
• Google Analytics (website traffic analytics);
• Meta (Facebook/Instagram), for marketing advertising purposes.

We do not sell personal data to third parties for marketing purposes.

5. Retention Period

We retain data for as long as necessary for the purpose for which it was collected, or in accordance with statutory retention periods (e.g., accounting records). After membership ends, account data is deleted or anonymized within a reasonable period, unless there is a legal obligation to retain it longer.

6. Your Rights

In accordance with the GDPR, you have the right to:

• access your personal data;
• correct inaccurate data;
• erasure of data ("the right to be forgotten");
• restrict processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Requests may be sent to info@crofxtrading.com. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

7. Data Security

We take reasonable technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

8. Changes to This Policy

We may update this policy from time to time. The date of the last update is shown at the top of the page.

9. Contact

For any questions regarding the protection of personal data, contact us at: info@crofxtrading.com.