FX SERM (fx-serm.com) — Last updated: info@fx-serm.com

 

This Privacy Policy describes how FX SERM («we,» «us,» or «our»), operating through fx-serm.com, collects, uses, stores, and protects personal information provided by visitors and clients through this website and our services. By using this website or engaging our services, you agree to the practices described in this Policy.

 

1. Who We Are

FX SERM is a boutique online reputation management (ORM) and search engine reputation management (SERM) agency specializing in services for Forex brokers, FinTech companies, Crypto exchanges, and high-risk digital brands. Our services are provided by Ivan Finman and the FX SERM team, operating from Poland and Cyprus. For privacy matters, contact us at:  info@fx-serm.com.

 

2. Information We Collect

Information you provide directly:

Name, email address, company name, job title, phone number, and any other information you submit through contact forms, inquiry forms, or direct email communications. Project-specific information you share during onboarding and service delivery. Payment information processed through third-party payment processors (we do not store payment card details directly).

 

Information collected automatically:

IP address, browser type, operating system, referring URL, pages visited, and time spent on pages. This information is collected through standard web server logs and analytics tools. We use Google Analytics for website analytics. Google Analytics data is processed subject to Google privacy terms.

 

Cookies:

This website uses cookies for functionality, analytics, and user experience purposes. Essential cookies are necessary for the website to function. Analytics cookies (Google Analytics) help us understand how visitors use the website. You can control cookie settings through your browser. Disabling cookies may affect website functionality.

 

3. How We Use Your Information

To respond to inquiries and provide the services you have requested. To communicate about your project, deliver reports, and coordinate ongoing work. To send service-related communications (not marketing without your consent). To improve our website and understand how visitors use it. To comply with legal obligations. We do not sell, rent, or trade your personal information to third parties. We do not use your information for purposes unrelated to the services you have engaged or inquired about.

 

4. Legal Basis for Processing (GDPR)

For individuals in the European Economic Area, our legal basis for processing personal data includes: contract performance (processing necessary to deliver services you have engaged), legitimate interests (website analytics, fraud prevention, service improvement), legal obligation (compliance with applicable law), and consent (where we request it explicitly, such as for marketing communications). You have the right to withdraw consent at any time where consent is the legal basis.

 

5. Data Retention

We retain personal information for as long as necessary to deliver services, maintain business records, and comply with legal obligations. Client project data is retained for a minimum of three years after project completion. Inquiry data from non-converting prospects is retained for up to twelve months. Analytics data is subject to Google Analytics retention settings, which we have configured for a maximum of fourteen months.

 

6. Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or destruction. Project data is stored in Google Workspace (Google Drive, Google Docs) under access controls. Client communications are handled via email with standard TLS encryption. All team members and contractors are bound by confidentiality obligations. We cannot guarantee absolute security of data transmitted over the internet, but we take all reasonable precautions.

 

7. Third-Party Services

We use the following third-party services in the course of our operations: Google Workspace (Google Drive, Gmail) for project management and communication. Google Analytics for website analytics. Payment processors for billing. Make.com for workflow automation. Each third party processes data subject to their own privacy policies. We select service providers that meet appropriate data protection standards.

 

8. International Data Transfers

Our operations span Poland, Cyprus, and the broader EU. We use Google Workspace, which may process data on servers outside your country of residence. Google operates under Standard Contractual Clauses for international data transfers from the EEA. If you are located outside the EU, please note that your data may be processed in countries with different data protection standards than your jurisdiction.

 

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data: access (request a copy of data we hold about you), rectification (request correction of inaccurate data), erasure (request deletion of your data in certain circumstances), restriction (request we restrict processing in certain circumstances), portability (receive your data in a machine-readable format), objection (object to processing based on legitimate interests). To exercise any of these rights, contact us at  info@fx-serm.com. We will respond within 30 days. If you are in the EU, you have the right to lodge a complaint with your national data protection authority.

 

10. Confidentiality and NDA

All FX SERM client engagements are covered by non-disclosure agreements by default. Client identity, project details, and work product are treated as confidential. We do not reference client names or project specifics in any public-facing content without explicit written permission. This is a core operating principle of our agency.

 

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify active clients of material changes by email. The current version is always available at fx-serm.com/privacy-policy. The date at the top of this document indicates when it was last updated.

 

12. Contact

For privacy-related questions, data subject requests, or general inquiries: info@fx-serm.com | fx-serm.com.com/contact