Draft for legal and operational approval. Prepared in the name of Valor Financial (Mauritius) Ltd. It is not in force and does not activate accounts, services or promotions. The specific conditions and controls described must be validated before publication and contracting.
Trade America is the trading name of Valor Financial (Mauritius) Ltd.
- Mauritius registration
- C121829
- FSC licence · Asset management
- C113012533
- Head office address
- 5th Floor, The CORE Building, No.62, ICT Avenue, Cybercity, Ebene, Mauritius
In this document 10 sections
01 Controller and scope
This draft identifies Valor Financial (Mauritius) Ltd as controller for processing it carries out in the Trade America context, subject to validation of its role in each service. It covers browsing, communications and, where actually contracted with the Company, data needed for account services. Mauritius’s Data Protection Act 2017 and other applicable laws govern that processing; Brazil’s LGPD will be observed where it applies. The same rules are not assumed to apply to every visitor.
02 Browsing and contact
When you access a website, its infrastructure may process IP address, date, time and technical browser data to deliver pages and protect the service. The corporate contact form only prepares a message in your email application: name, email, subject and message are sent only when you complete sending. The form does not create an account or store those fields on the site. Received messages are then processed within the Company’s support environment.
03 Account data and purposes
For a contracted service, the Company may need identification, birth date, residence, nationality, tax details, authority to act, beneficial owners, experience, objectives and financial information proportionate to that service. Evidence of ownership, source of funds and transaction history may be needed for verification, contractual performance, fraud prevention and legal obligations. Actual fields, providers and procedures must be disclosed during onboarding before collection. Do not send KYC documents through the corporate contact form.
04 Grounds and choices
Each purpose requires a valid ground: requested pre-contract steps, contractual performance, legal obligation, consent or a properly assessed legitimate interest, as applicable. Marketing consent must be separate and revocable; refusing it must not block public content. Identification and statutory retention obligations do not depend on accepting advertising. Where information is necessary for a service, the consequence of not providing it must be explained.
05 Preferences, academy and AI tools
The site stores theme, privacy preferences and lesson progress in your browser, as described in the cookie policy. This version does not load third-party audience analytics or advertising. Intelligence Lab uses fictional scenarios and local rules: it does not send inputs to external models, query accounts or execute orders. Before a real AI integration, the transmitted data, purpose, recipients, locations, retention and applicable controls must be disclosed.
06 Recipients and international transfers
Sharing must be limited to what is necessary with contracted hosting, support, identification, payment, custody or execution providers where those services exist and apply. Authorities may receive data where legally required or justified. Actual providers and countries must be identified in the service information; generic categories do not replace that inventory. International transfers require assessment and an appropriate legal mechanism, including Mauritius rules and, where applicable, ANPD requirements. General acceptance of terms does not replace these safeguards.
07 Retention and deletion
Data must be retained only as long as necessary for its purpose, legal duties and the protection of rights. Records subject to AML law have specific periods; the AML policy describes the applicable retention rule and its starting point. Support records, logs and backups require a documented schedule and deletion or anonymisation at expiry, unless legally preserved. The operational schedule and providers still require validation before this draft takes effect. An erasure request does not remove records that must lawfully be retained.
08 Rights and requests
Subject to applicable law, you may request confirmation and access, correction, erasure, restriction, objection, withdrawal of consent and portability where provided. You may also request information and challenge solely automated decisions with significant effects as permitted by law. The Company may proportionately verify identity and explain any lawful restriction. Requests must be handled within the applicable deadline without excessive data demands or obstructing access to the competent authority. Withdrawing consent does not invalidate earlier lawful processing.
09 Security, incidents and minors
Security measures must be proportionate to the data and risk, with restricted access, credential protection, access records, supplier management and incident response. No measure eliminates risk. Incidents must be assessed, contained and notified to recipients required by law within applicable deadlines. Account services are not directed at persons under 18 or without contractual capacity; access to educational content does not authorise trading.
10 Contact and authorities
Send requests through the contact channel shown in this document with the subject “Privacy”, describing the request without passwords or unnecessary documents. Correspondence may also be addressed to the privacy function at the Company’s head office. The responsible person and operational channel must be confirmed before publication. You may approach Mauritius’s Data Protection Office and, where competent, ANPD or another applicable authority. Material policy changes must be versioned and dated.
Official references
Sources consulted for this version. Check current texts and procedures before applying them.
Company contact
Valor Financial (Mauritius) Ltd
Trading name: Trade America