Pages
Privacy Policy
SHARK Futures - Privacy Policy
Effective Date: March 26, 2026
Protecting your personal information is important to us. This Privacy Policy describes how UAB Propfirms (company registration number 307586597), registered in the Republic of Lithuania, European Union, operating as SHARK Futures ("we," "us," or "our"), collects, uses, stores, and discloses personal information through our website (https://sharkfutures.com) and all related services (the "Services").
As an EU-registered entity, we comply with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), the Lithuanian Law on Legal Protection of Personal Data, and all applicable data protection legislation.
Please read this Privacy Policy carefully before using our Services. By using the Services, you agree to be bound by this Privacy Policy. If you do not agree, your right to access or use the Services is terminated.
Data Controller:
UAB Propfirms
Registration No.: 307586597
Antano Tumeno g. 4, LT-01110, Vilnius, Lithuania
Email: support@sharkfutures.com
Information You Provide Directly
Contact & Identity Information: Full name, date of birth, email address, phone number, postal address, nationality, country of residence
Account Information: Username, encrypted password, account preferences, profile data
KYC / Verification Data: Government-issued ID (passport, national ID, driver's license), proof of address documents, selfie/photo for verification, additional compliance documents
Payment Information: Billing address, payment method details. We do not directly store full card numbers - these are handled by our third-party payment processors Paysagi
Communications: Support tickets, live chat transcripts, email correspondence, contact form submissions
Trading Data: Trading activity, account balances, performance metrics, challenge results, payout history
Information Collected Automatically
Device Information: IP address, browser type/version, operating system, device type, unique device identifiers
Usage Data: Pages visited, time on pages, click patterns, referral URLs, visit timestamps, search queries
Location Data: Approximate location from IP address
Cookie Data: See our Cookie Policy for full details
Information From Third Parties
Payment Processors: Transaction confirmations and billing data
KYC Providers: Identity verification results Veriff and Riseworks
Analytics Providers: Aggregated usage data (e.g., Google Analytics)
Affiliate Partners: Referral and attribution data
Trading Platform Providers: Account and performance data from Volumetrica, Quantower, ATAS
Purpose | Legal Basis
|---|---|
Account creation and service delivery | Performance of a contract (Art. 6(1)(b))
Payment processing | Performance of a contract (Art. 6(1)(b))
KYC/AML compliance | Legal obligation (Art. 6(1)(c))
Fraud prevention and platform security | Legitimate interest (Art. 6(1)(f))
Customer support | Performance of a contract (Art. 6(1)(b))
Marketing communications | Consent (Art. 6(1)(a))
Analytics and service improvement | Legitimate interest (Art. 6(1)(f))
Legal claims and dispute resolution | Legitimate interest (Art. 6(1)(f))
Tax and accounting records | Legal obligation (Art. 6(1)(c))
We use your personal data to:
Provide Services: Create accounts, manage evaluations and funded accounts, process payouts
Process Payments: Handle fees, subscriptions, resets, and payout disbursements
Verify Identity: KYC checks, fraud prevention, AML compliance
Communicate: Respond to support inquiries, send account notifications, transaction confirmations, service updates
Marketing: With your consent, send promotional offers, newsletters, feature updates. You may opt out at any time
Improve Services: Analyze usage, diagnose technical issues, develop features, optimize experience
Security: Detect and prevent fraud, abuse, unauthorized access
Compliance: Meet regulatory requirements, respond to lawful authority requests, establish or defend legal claims
Service Providers (acting as data processors under GDPR):
Payment processors (Paysagi)
Payout partner (Rise)
Trading platforms (Volumetrica, Quantower, ATAS)
Data feed provider (DxFeed)
KYC/identity verification provider Veriff and Riseworks
Cloud hosting and IT infrastructure
Email marketing (Klaviyo)
Customer support tools (Intercom)
Analytics (Google Analytics)
All processors are bound by Data Processing Agreements (DPAs) and may only process data on our instructions per GDPR Article 28.
Legal and Regulatory: When required by law, court order, or regulatory authority, or to protect rights, prevent fraud, or comply with legal obligations. This includes reporting to the Financial Crime Investigation Service of Lithuania (FNTT).
Business Transfers: In a merger, acquisition, or sale, your data may transfer to the successor entity under the same protections.
With Your Consent: When you explicitly agree.
Your data may be transferred outside the European Economic Area (EEA), including to the United States (payout partner Rise, analytics providers, etc.).
When transferring data outside the EEA, we ensure protection through:
EU Standard Contractual Clauses (SCCs) per European Commission decisions
Adequacy decisions where applicable
Other safeguards per GDPR Articles 46-49
Data Type | Retention Period
|---|---|
Account data | Duration of account + 5 years after closure
KYC documents | 5 years after account closure (AML requirement per Lithuanian law)
Transaction records | 10 years (Lithuanian accounting/tax obligations)
Marketing consent records | Duration of consent + 3 years
Support tickets | 3 years after resolution
Cookie data | See Cookie Policy
Server/access logs | 12 months
Trading performance data | Duration of account + 3 years
After retention periods, data is securely deleted or anonymized.
As a data subject in the EU, you have the right to:
a. Access (Art. 15) - Request a copy of your personal data
b. Rectification (Art. 16) - Correct inaccurate or incomplete data
c. Erasure (Art. 17) - Request deletion ("right to be forgotten"), subject to legal retention requirements
d. Restrict Processing (Art. 18) - Limit processing in certain circumstances
e. Data Portability (Art. 20) - Receive your data in a structured, machine-readable format
f. Object (Art. 21) - Object to processing based on legitimate interests, including direct marketing
g. Withdraw Consent (Art. 7(3)) - Withdraw consent at any time without affecting prior processing
h. Automated Decision-Making (Art. 22) - Not be subject to solely automated decisions with legal effects
To exercise your rights: Email support@sharkfutures.com with subject "Data Rights Request"
We respond within 30 days per GDPR. We may verify your identity before processing.
Supervisory Authority: You may lodge a complaint with:
State Data Protection Inspectorate of Lithuania (VDAI)
L. Sapiegos g. 17, LT-10312 Vilnius
https://vdai.lrv.lt | ada@ada.lt
We implement appropriate technical and organizational measures per GDPR Article 32:
Encryption in transit (TLS/SSL) and at rest
Access controls and role-based permissions
Regular security assessments
Employee data protection training
Incident response and breach notification procedures (per GDPR Articles 33-34)
No method of transmission or storage is 100% secure. We cannot guarantee absolute security but take all reasonable measures.
Our Services are not for individuals under 18. We do not knowingly collect data from minors. If we discover such data, we will delete it promptly.
Our Services are not for individuals under 18. We do not knowingly collect data from minors. If we discover such data, we will delete it promptly.
We may update this Policy periodically. Changes will be posted with an updated effective date. For material changes, we will notify you via email or prominent website notice.
Data Controller:
UAB Propfirms
Registration No.: 307586597
Antano Tumeno g. 4, LT-01110, Vilnius, Lithuania
Email: support@sharkfutures.com
Internal Data Protection Officer appointed. Contact: support@sharkfutures.com
*© 2026 UAB Propfirms. All rights reserved.*