Your Privacy
Matters

We collect information that you provide directly when you register an account, complete identity verification, deposit funds, contact our support team or otherwise interact with our services. This typically includes your full name, date of birth, residential address, country of residence, government-issued identification, tax identification number, banking and payment details, employment status and source of funds. We also collect information automatically when you visit our platform — including IP address, device identifiers, browser type, operating system, referring URLs, pages viewed, session duration and interaction events. This data is gathered through cookies, server logs and similar technologies.

We use personal data to operate, maintain and improve our trading platform, process deposits and withdrawals, execute orders, comply with applicable regulations, prevent fraud, perform anti-money-laundering (AML) and know-your-customer (KYC) checks, communicate with you about your account and provide customer support. We may also use aggregated and de-identified data for analytics, product development, market research and risk modelling. Where required by law, we will obtain your explicit consent before processing data for marketing or other optional purposes.

MIRO applies industry-standard administrative, technical and physical safeguards to protect personal data against unauthorized access, alteration, disclosure or destruction. These include TLS 1.3 transport encryption, AES-256 encryption at rest, hardware security modules for key custody, mandatory multi-factor authentication on internal systems and continuous security monitoring with 24/7 incident response. While we apply strong protections, no system is entirely free of risk. You are responsible for keeping your account credentials confidential and notifying us immediately if you suspect unauthorized access to your account.

We do not sell personal data. We share information only with carefully selected partners who provide services on our behalf — including payment processors, KYC and identity-verification providers, cloud infrastructure providers, professional advisors, auditors, regulators and law-enforcement authorities where legally required. All third parties operate under contractual obligations that restrict the processing of your data to the purposes for which it was disclosed and require them to maintain appropriate security and confidentiality standards.

We use cookies and similar technologies to operate the platform, remember your preferences, authenticate sessions, analyze usage patterns and deliver relevant content. You can control cookies through your browser settings or our cookie preference center. For full details please refer to our Cookie Policy.

Depending on your country of residence, you may have the right to access, correct, update, port or delete personal data we hold about you, restrict or object to certain processing activities, withdraw a previously given consent or lodge a complaint with a supervisory authority. To exercise any of these rights please contact us at [email protected]. We may need to verify your identity before fulfilling certain requests, and we will respond within the timeframes required by applicable law (typically within 30 days).

MIRO is a global business and may transfer personal data to countries outside your country of residence — including the United Kingdom, the European Economic Area, the United States and other jurisdictions where our service providers operate. When we transfer data across borders we apply appropriate safeguards such as Standard Contractual Clauses, adequacy decisions or other legally recognized mechanisms to ensure your data continues to receive a comparable level of protection.

We retain personal data only for as long as necessary to provide our services, comply with legal and regulatory obligations (including AML record-keeping requirements which may extend up to seven years after account closure), resolve disputes and enforce our agreements. When data is no longer required we either delete it or irreversibly anonymize it.

MIRO Investments does not knowingly provide services to or collect information from individuals under the age of 18. If we become aware that we have collected personal data from a minor we will delete it promptly. Parents or guardians who believe a minor has provided personal data should contact us immediately.

We may update this Privacy Policy periodically to reflect changes in our practices, services or legal requirements. The most recent version is always available on this page and the Last Updated date at the top will reflect when material changes were made. We encourage you to review this page from time to time.

For questions about this Privacy Policy or how we handle personal data, please contact our Data Protection Officer at [email protected] or write to MIRO Investments Ltd., 1 Bishops Square, London E1 6AD, United Kingdom.