Privacy policy

1. Data controller

Bullfy Ltd., a company incorporated under the laws of Saint Lucia with registration number 2025-00353 and registered office at Ground Floor, The Sotheby Building, Rodney Bay, Gros-Islet, Saint Lucia, is the controller of the personal data described in this policy. The company maintains an operational office at Damac Business Tower, Business Bay, United Arab Emirates.

For any matter concerning your personal data, write to support@bullfy.com with "Data protection" in the subject line.

2. Scope

This policy covers the bullfyfunded.com website and the funding programmes contracted through it: Bull One, Bull Prime and Bull Titan. Account management, payments and identity verification take place in the client dashboard at dashboard.bullfy.com. This policy does not cover third-party websites you may reach from links published here, which are governed by their own policies.

3. What data we handle

Browsing the website. The site uses no analytics, advertising or tracking cookies, and carries no third-party pixels or tags for those purposes. We do not build browsing profiles and we do not share your activity on the site with advertising networks. Our hosting provider logs technical connection data — including IP address and browser type — for the sole purpose of serving the pages and protecting the infrastructure against abuse.

Conversational assistant. If you use the voice or text assistant available on the site, the content of your messages — and, in voice mode, the audio of what you say — is sent to the providers that generate the reply. Bullfy does not keep those conversations on its own servers. We recommend you do not give the assistant personal data, credentials or financial information: use the client dashboard or the support address for that.

Buying a programme and verifying your identity. Buying a funding programme and verifying your identity take place in the client dashboard. In that process we handle the identifying and contact details you provide on the sign-up form together with the documentation required by Bullfy’s AML and KYC Policy: personal identification document and proof of address.

Trading and evaluation. We handle the data arising from your use of evaluation and funded accounts: the full trading history, the risk and trading-consistency metrics required by the Rules Manual, product payments, withdrawal requests and profit splits, communications with support and any documentation you send us in the course of a claim.

4. Why we handle your data

• To deliver the credentials for the account you purchased and manage your evaluation.
• To verify compliance with the Rules Manual, including loss limits, minimum trading days, trading consistency and prohibited trading conduct.
• To verify your identity and meet anti-money-laundering and counter-terrorist-financing obligations.
• To check that your country of residence is not among the restricted territories.
• To process product payments, withdrawal requests and profit splits.
• To handle enquiries, incidents and claims, including reviews of decisions taken on an account.
• To detect and prevent fraud, third-party use of an account and links between accounts.
• To comply with legal requirements and with requests from the competent authorities.

5. Legal basis

We handle your data to perform the contract you enter into with Bullfy Ltd. when you buy a funding programme, to meet the legal obligations binding on us in relation to anti-money laundering and record keeping, and to pursue the company’s legitimate interest in verifying compliance with the programme rules and protecting the platform against fraud.

6. Cookies and local storage

The site stores a single preference in your browser: the language you have chosen. It is not an identifier, it cannot be used to recognise you on other sites, and you can remove it at any time by clearing the site data in your browser. We use no analytics or advertising cookies, which is why the site shows no cookie consent banner.

7. Providers involved

To deliver the service we rely on providers that handle data on Bullfy’s behalf and solely on our instructions: the website hosting provider, the providers of the conversational assistant — Anthropic for text replies and ElevenLabs for voice — the payment gateways that process product purchases and withdrawals, the identity verification providers and the providers of the trading platform that hosts your accounts. We do not sell your personal data and we do not pass it to third parties for advertising purposes.

We disclose data to the competent authorities and to regulators where the law requires it, in particular when filing suspicious activity reports.

8. International transfers

Bullfy Ltd. is incorporated in Saint Lucia and maintains an operational office in the United Arab Emirates. The providers named in the previous section may handle data from other countries. In those cases we require the provider to maintain security and confidentiality measures equivalent to those described in this policy.

9. How long we keep your data

Identification and verification documents, account files, business correspondence and transaction records are kept for a minimum of five (5) years from the end of the business relationship or from completion of the transaction, in line with Bullfy’s AML and KYC Policy. Trading history is also kept for as long as it is needed to verify the consistency between phases required by the Rules Manual. After those periods the data is deleted, unless another legal obligation or the defence of a claim requires us to keep it for longer.

10. Security

Data is stored securely and access is restricted to authorised personnel. Your account credentials are personal and non-transferable: sharing them breaches Rule 08 of the Rules Manual, whether or not anyone else actually uses them. Bullfy will never ask you for your password by email, by phone or through the site’s assistant.

11. Your rights

You may request access to your personal data, its correction where it is inaccurate, its deletion, the restriction of its processing and a copy of the data you have provided to us. Write to support@bullfy.com from the email address linked to your account, or use the messaging system in the client dashboard; we may ask you to prove your identity before acting on the request.

Deletion does not extend to documentation we are required to keep for the minimum five-year period set out in section 9, nor to the trading history needed to verify compliance with the programme while the account remains active.

12. Minors

Bullfy’s programmes are for adults only. We do not open accounts for minors and we do not knowingly handle their data. If we find that an account has been opened by a minor, we will close it.

13. Changes to this policy

We may update this policy to reflect changes in the services, in our providers or in the applicable regulations. The version in force is always the one published on this page. This policy is governed by the laws of Saint Lucia.