Privacy

Privacy Policy

Effective date: March 31, 2026 · Last updated: October 10, 2026

CurrencyBlazer ("we," "us," or "our") is committed to protecting the privacy of our clients, website visitors, and users of our benchmarking and analysis services. This Privacy Policy explains what data we collect, how we use it, how long we retain it, and your rights under applicable data protection laws including GDPR and CCPA.

1. Data Controller

CurrencyBlazer is the data controller for personal data processed through our website and services. For questions about data processing, contact us at client-inquiry@currencyblazer.com.

2. Data We Collect

2.1 Information You Provide

Data Type	Purpose	Retention
Business contact details you send us (name, business email, company)	Responding to your inquiry, contracting, report delivery	Duration of engagement + 24 months (inquiries that do not proceed: 24 months from last contact)
Engagement details (FX providers used, approximate annual volume, currency corridors)	Scoping and configuring the analysis	Duration of engagement + 24 months
FX transaction data (raw export file)	Benchmark analysis and report generation	Deleted within 30 days of upload
Working analytical copy of transaction data	Completing the report and any Monitoring the client has ordered	Deleted within 90 days of the end of the engagement or Monitoring term, whichever is later
Anonymised aggregate statistics (date, currency pair, volume band, spread, industry, size band — no client identity)	Methodology validation and peer comparison under the Verified Standard	Retained; cannot be linked back to a client

2.2 Automatically Collected Data

Our website has no forms, no accounts, and no analytics scripts. Our hosting provider keeps standard server logs (such as IP address, browser type, pages requested, and referring URL) for security and reliability. We do not use this data for advertising or profiling.

2.3 Data We Do Not Collect

We do not collect, request, or store: bank account numbers, credit card information, personal financial records, Social Security or tax identification numbers, or personal data beyond business contact details and the transaction records a client chooses to provide.

3. How We Use Your Data

We use the data we collect for the following purposes:

• Service delivery: Processing your transaction data against independent mid-market reference rates to generate your analysis report
• Communication: Delivering your report, responding to inquiries, and providing service updates
• Methodology and peer comparison: Adding each engagement's anonymised result to an aggregate reference population, used to validate the methodology and, once a peer group is large enough that no single company can be inferred, to state where a client sits among comparable companies. Aggregate figures never carry client identity
• Legal compliance: Meeting our obligations under applicable laws and regulations

We do not sell, rent, or trade your personal data to any third party. We do not use your data for advertising, profiling, or automated decision-making.

4. Transaction Data Processing

Your FX transaction data receives the highest level of protection:

• Minimisation: We ask only for the fields the analysis needs (date, pair, direction, notional, rate, provider). Any personal information that arrives within transaction records is removed before analysis
• Separation: Each client's data is held and processed separately, in a per-engagement workspace, and is never co-mingled with any other client's identifiable data. Only anonymised aggregate results (see Section 3) are combined across engagements
• Retention: Raw transaction files are deleted within 30 days of upload; any working analytical copy is deleted within 90 days of the end of the engagement or Monitoring term, whichever is later, as set out in the engagement agreement. Anonymised aggregate statistics are retained
• No provider sharing: Your transaction data is never shared with any FX provider, financial institution, or third party under any circumstances

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS) for all data transfers
• Encryption at rest on all systems that store client data
• Access strictly limited on a least-privilege basis. CurrencyBlazer is deliberately small: client transaction data is accessible only to the lead analyst named in the engagement agreement, and to no one else
• Review of system configuration and third-party dependencies before each engagement
• Defined retention periods, with deletion enforced on a scheduled basis

6. Third-Party Data Processing

We use a limited number of third-party services to deliver our services. No client transaction data is shared with any FX provider, financial institution, or advertising network. A detailed sub-processor list, including data access scope and jurisdiction, is provided to clients under the engagement agreement and on request under NDA.

7. Your Rights

7.1 Under GDPR (EU/UK Residents)

You have the right to: access your personal data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, and object to processing. To exercise any of these rights, email client-inquiry@currencyblazer.com. We will respond within 30 days.

7.2 Under CCPA (California Residents)

You have the right to: know what personal information we collect, request deletion, opt out of the sale of personal information (we do not sell personal information), and non-discrimination for exercising your rights. To submit a request, email client-inquiry@currencyblazer.com.

8. Cookies

Our website does not set cookies. We do not use advertising cookies, tracking pixels, or analytics cookies, which is why there is no cookie banner.

9. International Transfers

CurrencyBlazer, Inc. is a United States company and processes data in the United States. Where personal data is transferred from the UK or EU, we use Standard Contractual Clauses (SCCs) or an equivalent mechanism as required under GDPR. Sub-processor locations are listed in the engagement documentation.

10. Children's Privacy

Our Services are designed for business use and are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to active clients and posted on this page. Your continued use of our Services after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions, data access requests, or complaints:

CurrencyBlazer — Privacy
Email: client-inquiry@currencyblazer.com
Web: currencyblazer.com

---

This Privacy Policy was last reviewed and updated on October 10, 2026.