1. Introduction
Metro Shares Limited (“we,” “us,” or “our”) is committed to protecting the personal data of our users, investors, partners, and employees. This Data Protection Policy outlines our principles, responsibilities, and procedures in handling personal data to ensure transparency, accountability, and compliance with applicable data protection laws and regulations.
2. Scope
This Policy applies to all personal data collected, stored, processed, or transmitted by Metro Shares Limited, whether electronically or in hard copy, in connection with our operations, platform usage, services, or communications.
3. Legal Basis for Processing
We collect and process personal data under the following legal bases:
-
Consent – When you voluntarily provide information or agree to receive marketing communications.
-
Contractual Necessity – When data is required to fulfill a contractual obligation (e.g., processing investments).
-
Legal Obligations – For compliance with financial, regulatory, or tax requirements.
-
Legitimate Interests – To improve our services, enhance user experience, or prevent fraud, where these interests are not overridden by your rights.
4. Categories of Personal Data We Collect
We may collect the following types of personal data:
-
Identification Details – Full name, ID/passport number, nationality.
-
Contact Information – Email address, phone number, residential address.
-
Financial Data – Bank account details, investment history, payment information.
-
KYC/AML Documentation – Proof of identity, proof of address, tax identification.
-
Usage Data – Login times, device information, IP addresses, and platform activity.
5. Purpose of Data Collection
We use your personal data for the following purposes:
-
To onboard users and verify identity (KYC/AML compliance).
-
To facilitate investment transactions and ROI distributions.
-
To manage user accounts and customer service inquiries.
-
To meet regulatory and legal obligations.
-
To improve platform functionality, security, and analytics.
-
To send notifications, updates, or promotional materials (with your consent).
6. Data Storage and Security
We implement appropriate technical and organizational measures to safeguard personal data, including:
-
Encryption of sensitive data during transmission and at rest.
-
Access Controls ensuring only authorized personnel can access data.
-
Firewalls & Intrusion Detection to protect against cyber threats.
-
Regular Audits & Penetration Testing to ensure system integrity.
Personal data is stored on secure servers, and backups are performed regularly. We retain data only as long as necessary to fulfill the purposes outlined in this Policy or to comply with legal requirements.
7. Data Sharing and Disclosure
We do not sell your personal data. We may share your data with:
-
Regulatory Authorities to meet legal or compliance obligations.
-
Third-Party Service Providers (e.g., payment processors, KYC verification partners) under strict confidentiality agreements.
-
Legal Entities or Advisors when necessary to exercise or defend legal claims.
All third-party processors must adhere to data protection standards consistent with this Policy.
8. International Data Transfers
If personal data is transferred to a country outside your jurisdiction, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, in accordance with applicable data protection laws.
9. Data Subject Rights
You have the following rights regarding your personal data:
-
Right to Access – Request a copy of your data.
-
Right to Rectification – Correct inaccurate or incomplete data.
-
Right to Erasure – Request deletion of data under certain circumstances.
-
Right to Restriction – Limit the processing of your data.
-
Right to Object – Object to processing based on legitimate interests or direct marketing.
-
Right to Data Portability – Receive your data in a structured, machine-readable format.
-
Right to Withdraw Consent – Withdraw previously given consent at any time.
To exercise your rights, please email us at support@metrosharesltd.com.
10. Data Breach Notification
In the event of a data breach that may result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities within the timeframes required by law.
11. Policy Updates
We may revise this Data Protection Policy to reflect changes in law, regulations, or our data practices. We will notify users of significant changes via email or platform notifications.
12. Contact Us
For questions, concerns, or data protection requests, please contact:
Data Protection Officer
📧 Email: support@metrosharesltd.com
🌐 Website: www.metrosharesltd.com