Privacy Policy
This consolidated legal document includes the Privacy Policy, Cookie Policy, GDPR Addendum, and Data Processing Agreement. It governs the processing of personal data by FUTURA LTD ("Company", "we", "us", "our"), a company incorporated in the British Virgin Islands under registration number 2108366, with its registered address at First Floor, Mandar House, Johnsons Ghut, P.O. Box 3257, Road Town, Tortola, British Virgin Islands.
1. INTRODUCTION
It contains:
- (i) Privacy Policy;
- (ii) Cookie Policy;
- (iii) GDPR Compatibility Addendum for EU/EEA users;
- (iv) Data Processing Agreement (DPA), forming Part IV of this document.
We reserve the right to amend or update this Policy at any time. Changes will be posted with an updated “Last Updated” date, and continued use of our Services after changes constitutes acceptance. Users are encouraged to review this Policy periodically.
2. COMPANY INFORMATION
| Company Name | FUTURA LTD |
| Jurisdiction | British Virgin Islands |
| Registration Number | 2108366 |
| Registered Address | First Floor, Mandar House, Johnsons Ghut, P.O. Box 3257, Road Town, Tortola, British Virgin Islands |
| Privacy Contact | support@fututa-mining.com |
3. CATEGORIES OF PERSONAL DATA
We collect the following categories of personal data depending on engagement:
- Identification Data: name, date of birth, nationality, identification documents (passport or equivalent), residency information.
- Contact Data: address, email, phone number, communication details.
- Account/MLM Data: username, hashed passwords, network structure (including referral/upline/downline relationships), rank, and performance metrics.
- Financial/Transactional Data: bank details, payouts, transfers, invoices, purchase history.
- Technical Data: IP address, device identifiers, browser data, cookies, access logs.
- Communication Data: emails, messages, support tickets.
- KYC/AML Data: identity verification documents, screening results where required by law or internal compliance procedures.
We collect personal data when users register, log in, make transactions, interact with the platform, or communicate with us. We may also automatically collect technical data such as browser type, operating system, usage patterns, and device information.
4. LEGAL BASIS FOR PROCESSING
Processing is carried out in accordance with applicable laws of the British Virgin Islands and, where applicable, the General Data Protection Regulation (EU) 2016/679 (GDPR). Where GDPR applies, processing occurs under:
- Contractual necessity: to provide access, manage accounts, and deliver services.
- Legal obligations: including compliance with applicable financial, tax, and regulatory requirements.
- Legitimate interests: including fraud prevention, platform security, analytics, and operational management.
- Consent: including marketing communications and optional processing activities.
5. DATA SHARING AND INTERNATIONAL TRANSFERS
We may disclose personal data to:
- Hosting and cloud infrastructure providers.
- Payment processors, banks, and accounting providers.
- Analytics, marketing, and cybersecurity vendors.
- Professional advisors (lawyers, auditors, consultants).
- Regulatory authorities when required by law.
- Affiliates or group companies where operationally required.
International transfers may occur due to the global nature of our services. Where GDPR applies, such transfers are safeguarded through:
- Standard Contractual Clauses (SCCs);
- Transfers to jurisdictions recognized as adequate by the European Commission;
- Other appropriate safeguards.
6. DATA RETENTION
Data is retained only as required for legal, contractual, operational, and compliance purposes, after which it is securely deleted or anonymized.
7. DATA SUBJECT RIGHTS
Where GDPR applies, individuals may request:
- Access to their personal data;
- Correction of inaccurate data;
- Deletion of personal data;
- Restriction of processing;
- Data portability;
- Objection to processing;
- Withdrawal of consent.
Requests may be submitted via the contact details provided.
8. SECURITY MEASURES
The Company implements technical and organizational measures including:
- Encryption of data in transit and at rest.
- Access control and least-privilege authorization.
- Logging and monitoring.
- Periodic security assessments.
- Secure hosting and backup measures.
Sensitive data such as KYC/AML files is treated with heightened security.
9. COOKIE POLICY
The platform uses:
- Essential cookies for authentication and security.
- Functional cookies for preferences.
- Analytics cookies (subject to consent where required).
- Third-party cookies where applicable.
Users may manage non-essential cookies through browser settings.
10. GDPR COMPATIBILITY ADDENDUM
For EU/EEA users:
Processing is justified under Articles 6–9 GDPR, including contractual necessity, legal obligations, legitimate interests, and explicit consent. GDPR rights include access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Transfers outside the EU rely on Standard Contractual Clauses or equivalent safeguards. Users may lodge complaints with a competent supervisory authority.
11. PART IV – DATA PROCESSING AGREEMENT (DPA)
This DPA forms an integral part of the Company’s service terms and applies where the Company acts as a data processor on behalf of a client (“Controller”).
- Definitions: Terms such as Personal Data, Processing, Controller, Processor, and Sub-Processor follow GDPR definitions.
- Subject Matter: Processing relates to provision of platform services and related support functions.
- Duration: Processing continues for the term of the Controller’s agreement with the Company.
- Nature and Purpose: Processing includes storage, transmission, organization, and operational handling of personal data.
- Types of Data: Identification, contact, account, transactional, and technical data.
- Obligations of Processor: Process data only on documented instructions of Controller, ensure confidentiality via binding agreements, implement appropriate technical and organizational security measures, assist Controller with data subject requests and incident notification, and maintain records of processing activities as applicable.
- Sub-Processors: Processor may use sub-processors subject to appropriate contractual safeguards and obligations.
- International Transfers: Transfers follow Controller instructions and applicable legal safeguards.
- Security Incidents: Processor notifies Controller without undue delay upon confirming a personal data breach.
- Return or Deletion of Data: Upon termination, Processor deletes or returns all personal data unless retention is required by law.
- Audits: Processor provides documentation or access reasonably required for compliance verification.
12. GOVERNING LAW
This Policy and DPA shall be governed by the laws of the British Virgin Islands.
All inquiries, rights requests, and DPA-related matters shall be directed to: support@fututa-mining.com.
