1. Introduction
    Focus Markets LLC, trading as DNA Markets (“the Company”) is incorporated in Saint Vincent and the Grenadines with
    number 356 LLC 2020 and registered address at Euro House, Richmond Hill Road, Kingstown, St. Vincent and the
    Grenadines, P.O Box 2897. DNA Markets offers financial and commodity-based derivative instruments and other
    securities.
  2. General
    The Company understands the importance of maintaining the confidentiality and privacy of its Client’s information.
    By entrusting the Company with confidential information, we would like to assure our Clients of the Company’s
    commitment to keep such information private. The Company has taken measurable steps to protect the
    confidentiality, security and integrity of the Clients’ information.
    The Company shall not disclose to a third party, any of its Clients’ confidential information unless required to do so
    by a regulatory authority of a competent jurisdiction; such disclosure shall occur on a ‘need-to-know’ basis, unless
    otherwise instructed by a regulatory authority. Under such circumstances, the Company shall expressly inform the
    third party regarding the confidential nature of the information.
    Any personal information is treated as confidential and may be shared only within the Company, by its employees
    and affiliates for business purposes, as permitted by the applicable law of Saint Vincent and the Grenadines. The
    information may be disclosed to third parties, such as the Company Partners and Affiliates for business purposes
    only, such as, but not limited to, servicing Client accounts and informing Clients about new products and services. Our
    Company Partners, Affiliates, and Business Introducers maintain the privacy of your information to the same extent
    the Company does in accordance with this policy. Information may also be provided to non-affiliated companies,
    providing professional, legal, and accounting services. Non-affiliated companies that assist the Company in providing
    services to you are required to maintain the confidentiality of such information and to use your personal information
    only in the course of providing such services for the purposes that the Company dictates and within the ambit of the
    applicable law.
    The Company will not sell or give away your name, mailing address, phone number, email address or any other
    information to anyone. The Company will use various security measures to protect your information from
    unauthorised users.
    The policy sets out the procedures and methods used by the Company to collect, use and manage personal
    information from its visitors, potential and active clients through the Company’s website.
    The policy forms part of the Client’s agreement, namely, the Terms and Conditions Agreement with the Company,
    thus the Client is also bound by the terms of this policy, as set out herein.
  3. Personal Information
    In order to receive more information, register for a demo account, open a trading account with the Company or for
    any other business relationship, the Client is requested to complete an application form, accessible via the Company’s
    website.
    The Client, by completing the application form and providing their personal information, enables the Company to
    evaluate the application and to comply with law and regulations.
    The personal Data collected by the Company may include, but not limited to:
    (a) Personal information the Clients provide on their applications and other form, such as name, address, date of
    birth, social security number and occupation;
    (b) Financial information such as income, assets, financial investment experience;
    (c) Documents provided by the Clients to enable the Company to verify the Clients’ identity, such as passport,
    DNA MARKETS | PRIVACY POLICY | WWW.DNAMARKETS.COM | 2
    PRIVACY POLICY
    utility bill, bank statements or in certain situations the Clients’ company’s incorporation documents.
    The Company may collect the Client’s personal information directly from the Client (in their respective completed
    Account Opening Application Form or other way) or from other persons including, for example, credit reference
    agencies, fraud prevention agencies, banks, other financial institutions, third authentication service providers and
    providers of public registers. This information included, but it is not limited to personal details such as name, address,
    date of birth, contact details, payment details, including credit card, debit card and bank account details and other
    necessary financial information.
    The Company may also collect the Clients’ information in regard to the use of the Company’s website(s) such as pages
    visited, frequency, duration of visit and trading activities.
    From time to time, the Company may also request further information to help the Company improve its services to
    its Clients under the Client Agreement, as the case may be, or comply with Applicable Regulations.
    The Company is obliged to keep the Clients’ personal data on record for a period of seven (7) years which is calculated
    after the execution of the transactions or the termination of the business relationship of the Clients.
  4. Contacting You
    The Company may, for the purpose of administration, from time to time, contact the Client(s) by telephone, e-mail,
    fax or post.
    If the Client(s) agree, we or any of our Affiliates of the Company or any other company in the Company’s group may
    make contact from time to time, by telephone, e-mail, fax or post for marketing purposed to bring to the Client’s
    attention products or services that may be of interest to the Client(s) to conduct market research.
  5. General Requirements for Data Processing
    (a) Data processing means collection, recording, arrangement, storage, alteration, disclosing, consultation,
    extraction, use, transmission, cross-use transferring or granting access to third parties, interconnecting,
    closure, deletion or destruction of data, or several of the aforementioned operations, regardless of the manner
    in which they are performed or the means used.
    (b) The Company shall compile a list and documentation of means used in data processing and shall keep records
    of data processing. The list of means used in data processing shall include the name, type and number of the
    equipment and the name of the manufacturer of the equipment; the name and number of the license of the
    software used and the name of the software manufacturer; the location of the documentation of the software
    used.
    (c) Persons engaged in the processing of data shall process data only for authorised purposes under the
    established conditions and according to the instructions and orders received, and they shall maintain the
    confidentiality of data which has become known to them in the course of performance of their duties and which
    are not intended for public use. Such confidentiality requirement continues after termination of the
    employment or service relationship with the Company.
    (d) Unauthorised processing of data (including recording, alteration, deletion, reading, copying, transmission),
    unauthorised transportation of records and any other unauthorised use of data (not prescribed by official
    duties) shall be prohibited.
    (e) The Company shall implement adequate and sufficient measures to ensure that every data processing
    operation leaves a trace, which would afterwards enable identification of the person who performed the
    operation, the nature and time of the operation and any other relevant facts, including when, by whom and
    which data were recorded, altered or deleted, or when, by whom and which data in the data processing system
    were accessed, as well as information on any transmissions of data. A possibility for restoring the content of
    DNA MARKETS | PRIVACY POLICY | WWW.DNAMARKETS.COM | 3
    PRIVACY POLICY
    data before modifications shall be available when any modifications are made in data or documents.
    (f) Every user of database shall be issued personal means of authentication, enabling them to use the database.
    The access password for electronic databases shall be changed at least once a quarter. The use of any means
    of automatic entry of passwords shall be prohibited. A user of the data processing system shall not have access
    to data, which are not required for authorised data processing and the performance of duties of that particular
    user.
    (g) Adequate security measures, including encryption of data if necessary, shall be implemented upon
    transmission of data by means of data communication equipment or in the transport of records.
    (h) The manager or an employee of the Company shall rely on justified expectation that data submitted by persons
    who submit data are correct. The manager or an employee of The Company shall, from time to time, verify the
    accuracy of data in the database(s) by requesting the data subject to check the data and, if necessary, make
    corrections or confirm the accuracy of data.
    (i) Any incomplete or incorrect data known to the manager or an employee of the Company shall be closed, and
    any necessary measures shall be taken promptly to supplement and correct the data in question. Upon a
    request of a data subject, the manager or an employee of the Company shall correct any incorrect data on the
    data subject in the database if the data subject notifies the manager or employee of the Company of the
    inaccuracy of the data on the data subject and submits correct data; the incorrect data shall be stored with the
    correct data and with a note indicating in which period the incorrect data were used.
    (j) If the accuracy of data is in dispute, the data in question shall be closed until confirmation of accuracy of the
    data or determination of correct data. Third persons who provided or received the data shall be promptly
    notified of any corrections made in data if it is technically feasible and does not lead to disproportionate
    expenses.
    (k) Automatic decisions of the data processing system, without participation of the data subject, shall be permitted
    only on the conditions and pursuant to procedures specified by law.
  6. Rights of the Data Subject
    (a) The data subject shall have the right to withdraw at any time the consent for the processing of personal data,
    in which case the Company shall cease processing the data to the corresponding extent.
    (b) Every person has the right to access data concerning themselves, which are collected in databases, unless this
    right is restricted by law. Decisions on granting or withholding authorisations for access to data and issuing
    copies of data shall be made by the executive manager of the Company.
    (c) Upon request of the data subject, the Company shall notify the data subject of the data, which is available on
    the data subject in the database, and the sources of such data, the purpose of data processing and any third
    parties or categories of third parties that have received authorisation for data transmission, as well as any other
    facts of which the owner (processor) of the database is required to notify the data subject, unless the right of
    the data subject to receive information is restricted by law. The data shall be issued by using the method
    requested by the data subject, if possible, within five business days from the receipt of the respective request.
    (d) In the cases specified by law, data shall be released to third parties with a statutory right to request and receive
    such data. In all other cases, data shall be released to third parties only if the data subject has granted a
    respective consent.
    (e) Authorised persons may review, on site in the Company, the documents on the establishment of databases
    and any other documents pertaining to the databases.
  7. Data Collected in Databases
    DNA MARKETS | PRIVACY POLICY | WWW.DNAMARKETS.COM | 4
    PRIVACY POLICY
    (a) The Company may collect in databases any publicly available data or any data voluntarily submitted by data
    subjects. Only data necessary for the provision of service to the clients and/or for the performance of
    operations requested by the clients may be requested from the clients.
    (b) The Company shall collect and process the clients’ data to the extent, which is necessary for the achievement
    of specified objectives (provision of services), and in a manner, which is designed for the specific purpose.
    Unnecessary data shall be deleted or destroyed at once. Use of data in any other manner than previously
    agreed is permitted only with a respective consent of the data subject or on the conditions specified by law.
    (c) The managers and employees of the Company shall register and preserve the data and documents associated
    with the provision of services, including:
  1. Cookies
    When using the Company’s Website, we may use cookies to collect information. A cookie is a small data file that is
    stored on the Clients’ computer, for the purpose of making it easier for them to navigate the Website by for example;
    remembering their IDs, passwords and viewing preferences, thus allowing them to visit member-only areas of the
    Website without logging in again. The Clients can set their web browser to inform them when cookies are enabled, or
    to disable cookies. If the Clients do not wish to receive cookies, most web browsers will permit them to decline/disable
    cookies and in most cases will still allow them complete access to our Site.
  2. Tracking Systems
    Tracking systems used on the Company’s Website(s) may collect data detailing the pages you have accessed, how you
    discovered this site, the frequency of visits etc.; this information is obtained in order to improve the content of the
    Company’s website and may also be used to contact the Clients, through any appropriate means and providing the
    Clients with any information the Company believes to be useful to them.
  3. Security
    Your information is stored on our secure servers. We have procedures in place regarding how to safeguard and use
    your information, for example by requesting the Company’s affiliates and/or employees to maintain the confidentiality
    of the Client’s information.
    DNA MARKETS | PRIVACY POLICY | WWW.DNAMARKETS.COM | 5
    PRIVACY POLICY
    The privacy and confidentiality of the Clients personal information is of fundamental importance to the Company. The
    Company takes all appropriate security measures to protect against unauthorised access to or unauthorised
    alteration, disclosure or destruction of data and personal information.
    The Company restrict access to personal information to employees who need to know the specific information in
    order to operate, develop or improve our services. These individuals are bound by confidentiality and will be subject
    to penalties if they fail to meet these obligations.
    While the Company will use all reasonable efforts to safeguard your information, the Client understands and
    acknowledges that the use of internet is not entirely secure and for this reason the Company does not guarantee the
    security or integrity of any personal data transferred from the Client or to the Client via the internet.
  4. Right of Access
    You as a natural personal have the right to obtain a copy of any personal information which we hold about you and
    to advise us of any perceived inaccuracy.
    To make a request, the Client is asked to contact the Company, verifying his identity and specifying the requested
    information. The Company may charge an administrative fee.
  5. Legal Disclaimer
    The Company reserves the right to disclose the Clients’ personally identifiable information as required by rules and
    regulations and when the Company believes that disclosure is necessary to protect their rights and/or to comply with
    a judicial proceeding, court order, or legal process served. The Company will not be liable for misuse or loss of personal
    information resulting from cookies on the Company’s Website(s) that the Company does not have access to or control
    over. The Company will not be liable for unlawful or unauthorised use of your personal information due to misuse or
    misplacement of your passwords, negligent or malicious.
  6. Amendment/Review
    The Company will not be obliged to notify its Clients individually of changes, other than substantial material changes
    to the policy. Thus, the Clients should refer to the Company’s website for the latest and most up to date version of the
    Policy, which will be applicable from the date of publication on the web