What we collect,and why we hold it.

This Privacy Policy explains how Bradbury Capital Ltd trading as Get Funded Now (GFN) collects, uses, shares, stores and protects personal information when you use https://getfundednow.com, the GFN trader portal, GFN trading programs, support channels, marketing communications and related services.

For data-protection purposes, the controller is Bradbury Capital Ltd (Company No. 17102934). Our business/contact address is 6 Harrier Way, Exeter, EX2 7HU, United Kingdom. Privacy questions and rights requests can be sent to [email protected].

Where a third-party provider acts as an independent controller for part of a service, that provider's own privacy notice also applies to its processing.

• Identity and contact data: name, email address, telephone number, date of birth, country, residential address and account/profile details.
• KYC and verification data: government-issued identification, proof of address, nationality/citizenship, date of birth, verification images or selfies, verification results and information used to screen for fraud, sanctions or eligibility. Veriff may process facial images and biometric-related verification data under its own privacy terms and applicable law.
• Order and payment data: program purchased, account size, add-ons, price, discount code, transaction identifiers, payment status, billing details and limited payment-method metadata. GFN does not need to store full card credentials where payments are handled by a payment processor or merchant-of-record provider.
• Trading and account data: simulated trades, positions, instruments, order times, account balance/equity, drawdown, profit targets, consistency metrics, payout history, breaches, account status and platform identifiers.
• Security and technical data: IP address, approximate location derived from IP, device and browser information, operating system, login times, network information, cookies, identifiers, authentication events and security logs.
• Communications and support data: emails, chat messages, contact forms, support tickets, call notes, screenshots, screen recordings and other information you submit when asking for help or disputing an account decision.
• Marketing, affiliate and referral data: consent choices, campaign engagement, referral source, affiliate attribution, promotional-code usage and communication preferences.
• Website and analytics data: pages viewed, links clicked, session information, cookie identifiers and interaction data collected through analytics or advertising technologies where permitted.

We collect information directly from you when you register, buy a program, trade, request a payout, complete KYC, contact Support or interact with GFN communications. We also collect information automatically from websites, dashboards and trading systems, and receive information from service providers such as Veriff, payment processors, trading-platform providers, fraud-prevention services, analytics providers and affiliates.

For 1 Step and 2 Step programs, GFN may require KYC after the Evaluation is passed and before a simulated Funded Account is issued. GFN may also require KYC for Instant Funding, before a payout or whenever additional verification is reasonably required. KYC is currently carried out using Veriff.

GFN may compare the verified name, date of birth, nationality, address and other identity information with order and payment details, the Funded Trader Agreement, payout details and account information. We also use IP and login-location information to identify unusual location changes, account sharing, unauthorised account management, fraud, coordinated trading and attempts to evade jurisdiction restrictions.

Normal travel and ordinary use of different internet connections can occur. Location or IP differences are assessed in context and may lead to a request for further verification rather than an automatic adverse decision.

GFN uses cookies and similar technologies to operate the website, maintain sessions, protect accounts, remember preferences, understand website performance and, where permitted, measure or personalise marketing. Technologies may be provided by analytics, advertising, customer-communication and fraud-prevention partners.

Strictly necessary cookies may be used without optional consent where permitted because they are required for security, checkout or core website functionality. Analytics and advertising cookies are used only where a lawful basis exists and consent is obtained where required. You can use the website cookie controls and browser settings to manage non-essential cookies.

• To create, authenticate, secure and administer customer profiles and simulated trading accounts.
• To accept orders, process payments, issue credentials, administer add-ons, prevent duplicate or fraudulent purchases and handle billing enquiries.
• To provide Instant Funding, 1 Step and 2 Step programs and calculate account objectives, breaches, progression, payouts and scaling eligibility.
• To verify identity using Veriff, perform KYC/AML and sanctions checks, verify jurisdiction eligibility and ensure that the purchaser, trader, verified person and payout recipient match.
• To detect account sharing, third-party account management, duplicate profiles, coordinated or prohibited trading, payment fraud, security incidents and abuse of the simulated environment.
• To respond to customer support requests, investigate technical complaints, trading disputes and payout requests, and maintain evidence of decisions.
• To send service notices, account updates, security alerts and other communications necessary to perform the contract.
• To send marketing communications where permitted, manage affiliate/referral relationships and measure campaign performance.
• To improve products, analytics, risk controls, fraud-detection methods and customer experience using personal data or aggregated/anonymised data as appropriate.
• To establish, exercise or defend legal claims, respond to lawful requests, comply with tax/accounting obligations and protect the rights, property and safety of GFN, customers and third parties.

Where UK GDPR or a similar law applies, GFN relies on one or more of the following legal bases: performance of a contract or steps requested before contract; compliance with a legal obligation; legitimate interests such as service security, fraud prevention, account integrity, customer support, business analytics and legal claims; consent for activities such as optional cookies or certain marketing; and other lawful bases available under applicable data-protection law.

Where Veriff or another provider processes biometric or other specially protected information, that processing is handled under the legal basis and safeguards applicable to that provider and the relevant jurisdiction. GFN seeks to receive only the information reasonably necessary to make verification and compliance decisions.

GFN uses identity, nationality, residence, payment and location information to enforce legal and risk restrictions. At a minimum, GFN does not provide services to persons who have any current citizenship or nationality of Iran, North Korea (DPRK), Myanmar, the Russian Federation or Belarus. GFN also restricts persons resident in or accessing the service from those countries and from occupied/non-government-controlled Ukrainian territories including Crimea and occupied parts of Donetsk, Luhansk, Zaporizhzhia and Kherson.

GFN may also screen customers against applicable sanctions lists and may restrict additional persons or jurisdictions where required by law, a payment or platform provider, or GFN's compliance risk policy. Records may be retained as necessary to demonstrate and enforce these controls.

GFN may share personal information only where reasonably necessary for the purposes in this Policy, including with:

• Veriff and other identity, KYC, sanctions or fraud-prevention providers.
• Payment processors, card networks, banks, merchants of record and payout providers.
• Trading-platform, market-data, hosting, cloud, cybersecurity, communications and customer-support providers.
• Analytics, advertising and marketing service providers where the relevant consent or other lawful basis exists.
• Affiliates or referral partners to the limited extent required to attribute legitimate referrals or calculate commissions.
• Professional advisers, insurers, auditors, accountants, lawyers and dispute-resolution providers.
• Regulators, law-enforcement bodies, courts, tax authorities, sanctions authorities or other persons where disclosure is legally required or reasonably necessary to protect rights and prevent fraud.
• A purchaser, investor or successor in connection with a genuine restructuring, financing, sale or transfer of all or part of the business, subject to appropriate confidentiality and data-protection safeguards.

GFN does not sell personal data for money. Aggregated or anonymised information that no longer identifies an individual may be used or shared for analytics, research, service development and legitimate commercial purposes.

GFN uses reasonable technical and organisational controls designed to protect personal data against unauthorised access, alteration, disclosure, accidental loss and misuse. Controls may include access restrictions, authentication, encryption in transit or at rest where appropriate, logging, provider due diligence, backups and incident-response processes.

No online system can be guaranteed completely secure. Customers are responsible for protecting their passwords and devices and should notify GFN promptly if they suspect unauthorised access.

GFN and its providers may process data in countries outside the United Kingdom or the country where you live. Where data-protection law requires safeguards for an international transfer, GFN may rely on an adequacy decision, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses, contractual safeguards, consent where lawful, or another approved transfer mechanism.

GFN keeps personal data for no longer than reasonably necessary for the purposes for which it was collected, including the life of the customer relationship and periods needed for fraud prevention, chargebacks, KYC/compliance, accounting, tax, dispute resolution and legal claims. Retention periods can differ by category and provider.

When information is no longer required, GFN will delete, anonymise or securely isolate it where reasonably practicable, subject to backups, legal holds and mandatory retention requirements.

Depending on where you live and the law that applies, you may have rights to request access to personal data; correct inaccurate data; request deletion; restrict processing; receive portable data; object to processing based on legitimate interests or direct marketing; withdraw consent; and receive information about significant automated decisions. These rights are subject to legal exceptions and identity verification.

UK users may complain to the UK Information Commissioner's Office (ICO). EEA, EU and Swiss users may also have the right to complain to the relevant local supervisory authority. You do not have to pay a fee to exercise ordinary privacy rights, although excessive or manifestly unfounded requests may be handled as permitted by law.

Residents of other jurisdictions, including the United Arab Emirates, India, California, Nevada and other U.S. states or countries with privacy legislation, may have additional rights such as access, correction, deletion, portability, opt-out of certain targeted advertising or profiling, limitation of use of sensitive information, or appeal of a privacy decision. GFN will honour applicable rights where the relevant law applies to our processing.

GFN does not discriminate against a customer for exercising a privacy right. We may need to verify identity and authority before completing a request. An authorised agent may act for you where applicable law permits and required evidence is provided.

You can unsubscribe from marketing emails using the unsubscribe link in the message or by contacting GFN. Service, security, billing, compliance and account communications may still be sent where necessary to operate your account or comply with law.

Cookie and advertising choices can be managed through the cookie controls made available on the website and, where supported, through browser or device privacy settings.

GFN services are for adults aged 18 or over. We do not knowingly provide trading programs to children. If we learn that personal information has been collected from a person who is not eligible because of age, we may close the account and delete or restrict the information subject to legal retention requirements.

GFN websites may link to third-party websites, social platforms or services. GFN is not responsible for the privacy practices of a third party. Review that provider's privacy notice before submitting information directly to it.

GFN may preserve or disclose information where reasonably necessary to comply with law, enforce agreements, investigate fraud or prohibited activity, respond to a valid legal process, protect GFN or another person, or complete a genuine corporate transaction. GFN will assess requests and disclose only what is appropriate in the circumstances.

This Policy is intended to operate consistently with UK data-protection law, including the UK GDPR and Data Protection Act 2018 where applicable, while also recognising mandatory privacy rights that may apply to customers in other jurisdictions. Contractual disputes about GFN services are dealt with under the Terms & Conditions; privacy complaints remain subject to the rights and regulators provided by applicable data-protection law.

GFN may update this Policy when products, providers, laws or data practices change. The current version will be posted on the website with an updated date. Where a change is material and law requires notice or consent, GFN will provide it through an appropriate channel.