Privacy Policy

• Justmindsettrade is an educational platform — not a broker, investment adviser, or financial-services provider. We do not hold client funds or execute trades. If you enable Auto Sync, we import your trading data into your private journal with your consent.
• We act as a data controller under Thailand's PDPA (B.E. 2562) and comply with GDPR/UK GDPR to the extent required by law (GDPR-lite) for EU/UK users.
• We collect only data necessary to provide the Platform. Published analytics are de-identified aggregates only — never individual-level data.
• You have rights to access, correct, erase, restrict, port, and object — contact us at privacy@justmindsettrade.com.
• Privacy contact: privacy@justmindsettrade.com  ·  General: support@justmindsettrade.com
• The Service is intended for users aged 20+ in Thailand (or age of majority in your jurisdiction). Not directed at children under 13.
• Related documents: Terms of Use  ·  Cookie Policy  ·  Risk Disclosure

This is a plain-language summary. The legally binding provisions are the full sections below.

1. 01 Who We Are & Scope
2. 02 Controller & Contact Details
3. 03 Data We Collect
4. 04 Purposes & Legal Bases
5. 05 Cookies & Similar Technologies
6. 06 Aggregated Insights & Public Dashboards
7. 07 Sharing & Disclosure
8. 08 International Transfers
9. 09 Retention
10. 10 Security & Data Breach Response
11. 11 Your Rights & How to Exercise Them
12. 12 Marketing Communications & Preferences
13. 13 Children & Minors
14. 14 Third-Party Links & Content
15. 15 Automated Decision-Making
16. 16 Changes to This Policy
17. 17 Complaints & Supervisory Authority Contacts
18. 18 Language & Order of Precedence

Who We Are & Scope

Justmindsettrade ("we", "us", "our") operates the website and tools at https://justmindsettrade.com (the "Platform"). For data-protection purposes, we act as a data controller under Thailand's Personal Data Protection Act B.E. 2562 (PDPA). Where applicable to users located in the EU/UK, we also comply with the GDPR/UK GDPR to the extent required by law (GDPR-lite).

The Platform provides educational content and analytics tools. We are not a broker, investment adviser, deposit taker, or financial-services provider, and we do not receive or hold client funds.

This Policy explains what data we collect, our legal bases, how we use and share it, retention, international transfers, your rights and how to exercise them, cookies/trackers, security, and updates. Please also review our Terms of Use and Cookie Policy. If you do not agree with this Policy, please do not use the Services.

Controller & Contact Details

Justmindsettrade

• Privacy contact: privacy@justmindsettrade.com
• General contact: support@justmindsettrade.com

Effective date: 2025-08-16 (last updated: 2025-08-16). Response time for Data-Subject Requests (DSR): within 30 days.

Data We Collect

We collect only the data necessary to provide and improve the Platform. If you enable Auto Sync, we import data from your connected broker account to power your journal and analytics (see item 4 below); we do not execute trades or move funds. Some data are provided directly by you, some are collected automatically when you use the Platform, and some may come from third parties that support our Services.

• Account & profile: email, password (stored hashed), display name/full name (optional), country of residence, 20+ age confirmation.
• Contact & support: messages, attachments, and details you submit via forms or email.
• Learning/community inputs: comments, feedback, user-generated content (UGC).
• Verification (if applicable): phone for OTP, trading account ID for IB/partner verification.
• Data Subject Requests (DSR): information provided to verify and fulfill your privacy requests.

• Usage & device logs: IP address, timestamps, pages viewed, referrer, approximate location derived from IP, browser/OS/device information, crash/diagnostic logs.
• Cookies/trackers: session tokens, authentication state, and analytics events. See our Cookie Policy for details and choices.

• Variables you type to run a calculation (e.g., instrument, leverage, Entry/TP/SL values, risk %, lot size).
• For analytics, we may store rounded/bucketed versions (e.g., price buckets, lot-size buckets, time buckets) and use them only in de-identified, aggregated form as described in "Aggregated Insights & Public Dashboards".

• What we import: if you connect a broker/trading account via Auto Sync, we may import trading data such as your trade history, open and closed positions, account balance/equity, and performance metrics.
• Why: to provide your private Performance Journal, analytics, and behavioral feedback. This data is private to your account and is not published (see §6).
• What we do not do: we do not place, modify, or execute trades or orders on your behalf, and we do not deposit, withdraw, or move your funds.
• Your control: Auto Sync is optional and consent-based. You can disconnect at any time; see §9 for retention and §11 for your rights.

• Service providers (processors) that host, deliver email, provide analytics, security/anti-abuse, or content delivery (CDN).
• Market data providers (e.g., options/price feeds) used to enrich educational analytics.
• Broker/IB partners (if you request verification of partner status) — no financial transaction data is received.

We do not intentionally collect special-category/sensitive data (e.g., national ID numbers, bank details, health, biometric, race, religion, political opinions). Please do not submit such data. If limited processing is legally necessary, we will process only what is needed, process with your explicit consent, and delete within our retention period.

Note on cookies/analytics: Some events are collected via cookies or similar technologies to keep you signed in and to improve the Service. Manage your choices in our Cookie Policy.

Purposes & Legal Bases

We process personal data only for the purposes below and under the corresponding legal bases. The Platform provides educational content and analytics tools — we do not provide investment advice, execute trades, or hold client funds.

Examples: account creation, authentication, session management, essential cookies, customer support.
Legal bases: performance of a contract; legitimate interests in running a reliable service; legal obligations for security/logging.

Examples: running calculators/simulations (e.g., Lot Size), saving preferences, showing the content you request, and — where you enable Auto Sync — importing your broker trading data (e.g., trade history, positions, balance/equity, performance) to power your private Performance Journal, analytics, and behavioral feedback. We do not execute trades or move funds.
Legal bases: performance of a contract (to provide the features you request); your consent for connecting a broker account via Auto Sync (withdrawable at any time by disconnecting); legitimate interests.

Examples: de-identified, aggregated statistics (e.g., entry/exit distributions, Momentum Globe) built from rounded/bucketed inputs and usage events.
Legal basis: legitimate interests with privacy safeguards (k-anonymity thresholds, value/time bucketing, no linkage to accounts/emails/IPs).
Choice: you may object/opt out via email to privacy@justmindsettrade.com. We will action your request within 30 days after successful identity verification.

Service/transactional messages: security notices, changes to terms, support replies. Legal bases: performance of a contract; legitimate interests.
Marketing/newsletters: only if you opt in, or where permitted by law with a clear opt-out. Legal basis: consent (withdrawable at any time) or legitimate interests where permitted; opt out via the unsubscribe link in emails or by contacting privacy@justmindsettrade.com.

Examples: monitoring, rate-limiting, fraud/abuse detection, incident response and audits.
Legal bases: legal obligations to implement appropriate security measures; legitimate interests in protecting users and our service.

Examples: responding to Data-Subject Requests (DSR), record-keeping, enforcing or defending legal claims.
Legal bases: legal obligations; legitimate interests.

Examples: transfers to service providers outside your country using recognized safeguards (e.g., standard contractual clauses/appropriate measures).
Legal bases: performance of a contract; legitimate interests; legal obligations.

We do not intentionally collect special-category/sensitive data. If limited processing becomes necessary (e.g., to verify a DSR), we will request only what is needed, rely on explicit consent or another lawful basis, and delete it within our retention periods.

Note for EU/UK users: non-essential cookies and marketing emails are based on your consent; manage choices in the Cookie Policy and, until Privacy Settings is available, email us as above.

Cookies & Similar Technologies

We use cookies and similar technologies (e.g., HTTP cookies, localStorage, SDKs, pixels — collectively, "cookies") to operate the Platform, keep you signed in, remember preferences, improve the Service, and protect security. We do not use cookies to store sensitive personal data.

• Strictly necessary — session/authentication, CSRF, load balancing, consent status. Legal bases: performance of a contract; legitimate interests.
• Functionality — remember your language/theme and other preferences. Legal bases: legitimate interests or consent where required.
• Analytics (non-essential) — measure usage and build de-identified aggregates for product improvement (see §6). Legal basis: legitimate interests with safeguards; in the EU/UK we rely on consent.
• Marketing (if enabled) — we do not run third-party targeted ads by default; if introduced in the future, they will be used only with your consent.

• Session cookies expire when you close the browser.
• Persistent cookies last up to 13 months for analytics/consent records (or shorter where required).

• Manage choices in our Cookie Policy. If you do not see a settings control yet, you can object/opt out by emailing privacy@justmindsettrade.com (we respond within 30 days after verification).
• You can also block or delete cookies in your browser settings; doing so may impact features that rely on strictly necessary cookies.

We may use service providers to deliver analytics, security, and content delivery (CDN). Details and vendor links are listed in the Cookie Policy.

Where supported and detected, we honor browser signals by disabling non-essential cookies; otherwise use the choices above.

Aggregated Insights & Public Dashboards

• De-identified, aggregated statistics only (e.g., percentage distributions, counts, trends).
• Examples include Momentum Globe and other dashboards that summarize calculation patterns from our tools (e.g., Lot Size) and general usage trends.
• We do not publish individual-level data, account identifiers, IP addresses, emails, or broker trading data.

• Rounding/bucketing: values you enter (e.g., prices, lot size, time) are rounded into buckets (e.g., price/ratio buckets, lot-size buckets, 5–60 minute time buckets).
• De-identification: identifiers are stripped before aggregation; aggregates are computed on event batches, not per user.
• k-anonymity threshold: a cell is published only when ≥ 20 distinct contributing accounts exist in the time window; otherwise it is suppressed or merged.
• Outlier protection: extreme values may be capped or winsorized before aggregation.
• Delay: published views may be delayed by up to 15 minutes and refreshed periodically (from hourly to daily depending on the feature).
• No linkage: aggregates are not linked back to your account, email, device, or IP.

• We do not use your private Auto Sync trading data to build these public aggregates, and we never publish your individual orders, positions, or balances.
• Aggregates are not personalized signals and must not be treated as investment advice.

You can object/opt out of having your new calculation events included in future public aggregates by emailing privacy@justmindsettrade.com. We will process requests within 30 days after successful identity verification. Opt-out applies to new events going forward and does not retroactively alter already-published snapshots.

• Aggregates are educational, may include sampling error, may change when methods or thresholds change, and may lag real-time data.
• We may modify or discontinue dashboards, thresholds, or methodologies at any time to protect privacy or improve quality.

Dashboards and underlying aggregates are our intellectual property. You may not scrape, republish, or commercialize them without prior written permission.

Sharing & Disclosure (Processors & Legal)

We do not sell personal data. We share it only as described below and subject to data-protection laws. Justmindsettrade is an independent educational platform — we are not a broker, market-maker, custodian, or investment adviser, and we do not hold client funds or execute trades.

• We use vetted third-party providers to host the Platform, send service emails, provide security/anti-abuse, analytics (non-essential), and content delivery (CDN).
• Processors act only on our documented instructions under written data-processing terms, must apply appropriate security, and may not use your data for their own purposes.
• Typical categories: hosting/Cloud, email delivery & customer support, analytics/metrics, security & logging, CDN. Details are listed in our Cookie Policy.

• We may list or link to third-party partners (collectively, "Partners") and may receive referral/IB fees if you open an account or trade via our tracking links. This does not affect your costs, spreads, or pricing.
• Listings/links are for educational and disclosure purposes only. They are not rankings, recommendations, endorsements, or solicitations.
• Partners operate independently; there is no agency, joint venture, or control. Your relationship (account opening/closure, KYC/AML checks, trading, deposits/withdrawals, promotions, support) is strictly between you and the Partner.
• Eligibility and any benefits (including rebates) are determined solely by the Partner under its rules and require correct tracking. Tracking may fail due to, without limitation, cookie deletion, ITP/privacy settings, ad blockers, VPN, deep-links/app flows, late/incorrect linking, duplicate/previous accounts, or the Partner's rules. We do not manually backstage or guarantee tracking or payout.
• For verification and reporting only, we may receive limited identifiers (e.g., referral IDs) or de-identified/aggregated trading data from a Partner. We do not receive broker order-level data or account balances from Partners. (This is separate from Auto Sync, where — with your consent — we import data from your own connected account; see §3.)

• We may disclose information where required by law, court order, or competent authority; to protect our rights, users, or the security of the Service; to investigate fraud/abuse; or to enforce our terms.
• In a corporate transaction (e.g., merger, acquisition, or asset transfer), we may transfer data to the successor with appropriate safeguards and notice where required.

When data is transferred outside your country, we use recognized safeguards (e.g., standard contractual clauses or appropriate measures) consistent with applicable law. See §8 for full details.

You must perform your own due diligence and comply with laws in your jurisdiction before using any Partner. We do not mediate disputes between you and a Partner. Please contact the Partner directly for account, promotion, or trade-related issues.

• To the maximum extent permitted by law, Justmindsettrade disclaims liability for any Partner products, services, programs, or promotions and for any direct, indirect, incidental, special, consequential, punitive, or exemplary damages arising from interactions with any Partner.
• Nothing in this section limits liability that cannot be limited under applicable law. We may add, remove, or re-order Partner listings at any time without notice.

We share the minimum necessary information and handle it in accordance with this Privacy Policy. For opt-out choices regarding non-essential analytics/tracking, see the Cookie Policy or email privacy@justmindsettrade.com.

International Transfers

We operate with cloud-based infrastructure and may process personal data outside your country. Aggregated or de-identified data (which are not personal data) may be transferred without restriction.

• Typical recipients are our service providers (processors) for hosting/Cloud, email delivery & support, security/logging, analytics (non-essential), and CDN.
• Primary hosting region: cloud infrastructure — region details available on request. Backups and failover may occur in other regions.
• Limited identifiers for Partner verification/reporting may be transferred to, or received from, Partners located in other countries. Partners act as independent controllers — see their privacy notices.

• Standard Contractual Clauses (SCCs) for EU data (EU Commission Decision 2021/914) and the UK IDTA or the UK Addendum where applicable.
• Contractual data-processing terms, access controls, and audit/assessment of vendors.
• Encryption in transit and at rest, least-privilege access, and data minimization.
• k-anonymity/rounding for published aggregates (no linkage to accounts/emails/IPs).

For transfers from Thailand, we ensure the destination provides adequate personal-data protection measures consistent with Section 28 of the PDPA. Where adequacy is not available, we use appropriate safeguards (e.g., contractual clauses) or another permitted basis (e.g., your explicit consent or performance of a contract).

• Where required, we will ask for consent before using non-essential analytics that involve third-country vendors (e.g., EU/UK cookie consent).
• You may request details of our transfer mechanisms or a copy of the SCCs/UK terms (with confidential parts redacted) by emailing support@justmindsettrade.com.

Processors may not engage sub-processors without our authorization and equivalent safeguards. Partners are responsible for their own onward transfers under their policies.

We may change vendors, regions, or safeguards from time to time. Material changes will be reflected in this Policy and, where required by law, we will provide additional notice.

Retention

We keep personal data only for as long as necessary for the purposes described in this Policy, to comply with law, or to establish/exercise/defend legal claims. Where possible, we aggregate and keep only the non-personal version. When a retention period ends, we delete or irreversibly de-identify data; deletions cascade to backup after the next backup cycle.

• Account & profile data — kept while your account is active and for up to 24 months after the last activity or account closure, then deleted or de-identified (unless a legal hold applies).
• Authentication/session tokens — active session only; long-lived tokens rotate and expire within 90 days.
• Security/audit logs — 12 months (longer if required for incident investigation, fraud prevention, or legal obligations).
• Support emails/tickets — 24 months from resolution.
• Marketing preferences & consent records — for the duration of the relationship and up to 5 years after withdrawal/change to demonstrate compliance; a suppression list (minimal identifiers) is kept as long as needed to honor opt-outs.
• Calculator/input & analytics events (non-essential) — raw events up to 90 days; de-identified aggregated statistics may be kept indefinitely as they are not personal data.
• Cookies/SDK storage — see the Cookie Policy (session cookies expire on browser close; persistent cookies up to 13 months).
• Partner/IB verification & referral identifiers — limited identifiers kept up to 24 months or as required by the Partner's rules.
• Connected trading data (Auto Sync) — trade history and related data imported with your consent, kept while your account is active and for up to 24 months after last activity, account closure, or disconnection — whichever is earliest — then deleted or de-identified (unless a legal hold applies).
• Commercial/accounting records (if any) — retained up to 10 years to comply with applicable accounting/tax rules.
• Data-Subject Requests (DSR) & identity-verification records — up to 5 years to demonstrate compliance.

Encrypted backups are retained for up to 35 days and are not used for routine processing. Items deleted from live systems are removed from backups on the next rotation.

When you request deletion or close your account, we will process the request within 30 days after successful identity verification, subject to legal holds. Aggregated statistics already published are non-personal and are not changed retroactively.

We may retain data longer where required by law (e.g., tax/accounting/AML), to resolve disputes, to prevent fraud/abuse, or to enforce our terms. In such cases we restrict use to those purposes only.

Email privacy@justmindsettrade.com or support@justmindsettrade.com.

Security & Data Breach Response

We take security seriously, but no method is 100% secure. We apply layered controls and the principle of least privilege to protect personal data.

• Encryption — TLS in transit, encryption at rest for production databases and backups.
• Access control — role-based access, least-privilege, MFA for administrators, session timeouts.
• Secure development — code review, dependency scanning, secrets management, configuration-as-code.
• Monitoring & logging — security/audit logs with alerting and rate-limiting to detect abuse.
• Vulnerability management — patching, periodic reviews, and remediation based on risk/impact.
• Backups & DR — encrypted backups and tested restore procedures (see §9).
• Data minimization — collect only what is necessary; use de-identification and aggregation for published statistics (no linkage to accounts/emails/IPs).
• Vendor management — written data-processing terms with processors, security reviews before onboarding, onward-transfer controls.

• Use a strong, unique password and enable MFA if available. Keep your device/browser up to date.
• Do not share your credentials; notify us immediately of any suspected unauthorized access.

• We maintain an incident runbook covering detection, triage, containment, eradication, recovery, and post-incident review.
• If a personal-data breach is likely to risk individuals' rights and freedoms, we will notify the competent authority without undue delay and, where feasible, within 72 hours of becoming aware.
• If the breach is likely to result in a high risk to you, we will also inform affected users without undue delay with practical steps to reduce harm.
• We keep an internal breach register recording facts, effects, and remedial actions in line with our retention policy.

If a processor or Partner experiences an incident affecting your data, we will work with them to assess impact and provide notifications where required by law or contract.

• Email support@justmindsettrade.com with a description, steps to reproduce, and any evidence. Please avoid public disclosure until we confirm remediation.
• If you suspect account compromise, change your password, revoke active sessions, enable MFA, and contact us immediately.

We welcome good-faith vulnerability reports and will not pursue legal action for accidental, non-exploitive testing performed without data exfiltration, disruption, or privacy violations. Please give us reasonable time to fix issues.

Security measures may evolve; we may update this section periodically.

Your Rights & How to Exercise Them (PDPA/GDPR)

These rights apply to personal data we process about you. De-identified/aggregated statistics (e.g., public dashboards) are not personal data and are excluded.

• Access — obtain a copy of your personal data and information about how we process it.
• Rectification — correct inaccurate or incomplete personal data.
• Erasure — request deletion of personal data when it is no longer needed, you withdraw consent, or the processing is unlawful (subject to legal holds).
• Restriction — ask us to restrict processing while we verify accuracy or objections.
• Portability — receive certain personal data you provided to us in a structured, commonly used, machine-readable format (e.g., CSV/JSON), and transmit it to another controller where technically feasible.
• Objection — object to processing based on our legitimate interests (including non-essential analytics); we will honor your objection unless we have compelling legitimate grounds.
• Withdraw consent — withdraw consent at any time where processing is based on consent (e.g., marketing emails, non-essential cookies in the EU/UK).
• Marketing opt-out — unsubscribe via the link in our emails or contact us as below; we keep a minimal "suppression list" to honor opt-outs.
• Complaint — lodge a complaint with your local supervisory authority (e.g., the PDPC in Thailand or an EU/UK data-protection authority).

• Email support@justmindsettrade.com or privacy@justmindsettrade.com.
• Include your name, contact email, the right you wish to exercise, and enough details to help us locate the data. We may request additional information to verify your identity.

• We respond without undue delay and within 30 days after successful identity verification. For complex or high-volume matters we may extend once by up to 30 days and will inform you of the reason.
• Requests are free of charge unless manifestly unfounded or excessive; in such cases we may charge a reasonable fee or refuse to act.

• We may refuse or redact data where disclosure would adversely affect the rights/freedoms of others, reveal trade secrets or confidential information, breach legal privilege, or conflict with law-enforcement, AML/KYC, accounting/tax, or other legal obligations.
• We will explain our decision where legally permitted.

• Portability covers data you provided to us or that arose from your use of the Service (not our derived analytics, risk scores, models, or aggregated statistics).
• Deletion/objection applies to future processing; already published aggregates are non-personal and are not changed retroactively.

If you authorize someone to act on your behalf, we may require proof of authority and additional verification.

Exercising your rights will not result in discriminatory treatment. Some features may be unavailable if we cannot process certain data.

Marketing Communications & Preferences

• We may send product/feature updates, educational content, surveys, promotions, and newsletters about Justmindsettrade.
• Channels can include email, in-app or website banners, push/browser notifications (with your device/browser permission), and — only if you consent — SMS/phone.

• Consent where required (e.g., newsletters, SMS, non-essential cookies for EU/UK users).
• Legitimate interests for our own product/feature updates to existing users, with an easy opt-out at any time.

• Email: click the "unsubscribe" link in any marketing email (effective immediately or within a short period).
• Push/browser notifications: enable/disable in your device or browser settings at any time.
• Or submit a request at privacy@justmindsettrade.com or support@justmindsettrade.com.
• If SMS is enabled, you can reply "STOP" to opt out from that number.

Service/transactional messages necessary to run your account (e.g., security alerts, password resets, changes to terms).

• If you unsubscribe, we keep a minimal "suppression list" (e.g., email hash) solely to ensure we do not contact you again.
• We retain consent and preference records for compliance (see §9).

• We do not sell personal data or share it with third parties for their own direct marketing without your consent.
• If a Partner (e.g., a broker) contacts you, that communication is governed by the Partner's privacy notice — please contact the Partner to manage their preferences.

We may tailor messages based on your interactions with the Platform (e.g., features you use). This does not involve automated decisions producing legal or similarly significant effects. You can object at any time using the choices above.

Children & Minors

• Our Services are intended for individuals who are at least the age of majority in their jurisdiction (in Thailand this is 20 years old).
• If you are under the age of majority where you live, you must obtain verifiable consent from your parent or legal guardian before using the Services or providing any personal data.
• The Services are not directed to children under 13, and we do not knowingly collect personal data from children under 13 anywhere.

• Where consent is required by law (e.g., users under 20 in Thailand, or under the applicable "digital consent" age in the EU/UK — typically 16, but local law may set 13–16), we may request evidence of parental/guardian consent and age (e.g., a short consent form and minimal proof of relationship).
• If consent cannot be verified in a reasonable time, we may suspend or terminate the account and delete any data collected from the minor, subject to legal obligations.

The Platform provides educational content and tools only. It is not a broker, investment adviser, deposit taker, or financial-services provider, and it does not hold client funds or execute trades.

• Parents/guardians can request access, deletion, or account closure for a minor by emailing privacy@justmindsettrade.com.
• We may request additional information to verify your identity and legal guardianship. If we discover we have collected personal data from a child under 13 without consent, we will delete it promptly.

We may use reasonable measures (e.g., date-of-birth confirmation, limited document checks) to verify age/eligibility in order to comply with law and protect users.

If a school or organization invites minors to use the Services, it is responsible for obtaining required consents and for acting as the data controller for such use. Please contact us in advance to discuss appropriate arrangements.

Creating an account with a false age or impersonating another person violates our Terms and may result in account suspension or termination.

Third-Party Links & Content

• The Platform may include links to or embeds from third-party websites and services (e.g., broker/IB partners, market-data providers, analytics tools, social media, app stores).
• These third parties operate independently. We do not control their content, policies, or security, and your use of them is governed by their terms and privacy notices.

Listings or references to third parties are provided for convenience and educational purposes only. They are not rankings, recommendations, investment advice, or a solicitation to use any financial service.

• We may receive referral/IB fees if you open an account or take an action after visiting a partner through our links. See §7 (Sharing & Disclosure) for full details on how this data is handled.
• Partners act as independent controllers of their own data and services. Disputes, account matters, and product support must be handled directly with the partner.

• When you click a partner link, the partner (and we) may use cookies, pixels, UTM parameters, or click IDs for attribution and fraud prevention.
• We share only minimal identifiers needed for attribution (e.g., click ID, campaign code, locale) and do not share your trading orders or balances.
• Manage analytics/marketing cookies in our Cookie Policy or email privacy@justmindsettrade.com.

Embedded widgets (e.g., videos, posts, charts) may allow the third party to collect data via their own cookies or SDKs. Your interactions are governed by that third party's policies and settings.

• Do your own research and ensure compliance with applicable laws and the partner's rules (including eligibility/KYC, fees, rebates, and risk warnings).
• We may add, re-order, or remove third-party links at any time and have no duty to monitor external content.

To the maximum extent permitted by law, we disclaim liability for third-party content, products, services, outages, tracking failures, or losses arising from your dealings with third parties. Nothing here limits your statutory consumer rights.

Automated Decision-Making

ADM means decisions about a person made solely by automated means, without meaningful human involvement, that produce legal effects or similarly significant impacts (e.g., credit denial, employment rejection, account termination without review).

• We do not use ADM to make decisions that produce legal or similarly significant effects about you.
• Our calculators, dashboards, scoring, and simulations are educational tools. They do not execute trades, approve financial services, or take actions on your behalf. Any outputs are informational only.

• Security/anti-abuse: rate-limiting, bot detection, spam filtering, anomaly monitoring.
• Eligibility/age checks: lightweight checks to help us comply with law.
• Personalization/analytics: arranging content, measuring usage, A/B testing, and building de-identified aggregates (see §4 and the Cookie Policy).
• These rely on our legitimate interests or your consent where required (e.g., non-essential cookies for EU/UK users) and do not produce legal or similarly significant effects.

• We will provide clear notice of the logic involved, the legal basis, and the potential consequences.
• You will have the right to request human review, to express your point of view, and to contest the decision, consistent with PDPA/GDPR.

• If an automated control results in a block, hold, or suspension, you may request a manual review by emailing support@justmindsettrade.com.
• We aim to respond without undue delay and within 30 days after verifying your identity.

We do not perform credit scoring, insurance underwriting, employment screening, broker order execution, or other automated decisions that determine your legal rights or financial entitlements.

Changes to This Policy

• Effective date: 2025-08-16. Last updated: 2025-08-16.
• We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, or our data-processing practices. The current version will always be posted here. Prior versions are available on request.

Examples include: new categories of personal data collected; new purposes or legal bases; new categories of recipients; new cross-border transfer destinations; change of data controller/contact; or changes that meaningfully affect your rights.

• We will provide prominent notice (e.g., in-product banner, email, or website notice) before material changes take effect, where feasible, and as required by law.
• If a change requires consent (e.g., using data for a new non-compatible purpose, or enabling new non-essential cookies for EU/UK users), we will request your consent before applying the change.

• Your continued use of the Services after the effective date means you acknowledge the updated Policy.
• If you do not agree, you may discontinue use of the Services and request account deletion or exercise your rights via privacy@justmindsettrade.com.

• Updates to cookie uses will be managed through our consent tools; see the Cookie Policy.
• This Policy should be read together with our Terms of Use.

Complaints & Supervisory Authority Contacts

• If you have a question or concern about privacy, please contact us first — we aim to resolve issues in good faith and as quickly as possible.
• Email support@justmindsettrade.com with a short description of the issue, which rights you wish to exercise, and any relevant details. Do not send passwords or financial information.

• If you are not satisfied with our initial response, you may request an internal review by replying to our email and stating "Appeal" in the subject line.
• We will review and respond without undue delay; our goal is within 30 days after successful identity verification.

You have the right to lodge a complaint with a supervisory authority, without prejudice to any other remedies. You may contact the authority where you live, work, or where the issue occurred.

We can accept complaints in Thai or English. If you contact a foreign authority, follow their instructions, forms, and language requirements.

We will not discriminate against you for making a good-faith complaint or exercising your data-protection rights.

Language & Order of Precedence

• We may provide this Policy in multiple languages for convenience. The authoritative version is the English version, except where a localized version is expressly stated to apply or where local law requires otherwise.
• If there is any inconsistency between translations, the version applicable to your jurisdiction prevails; where no localized version applies, the English version governs.

1. Feature-specific or "just-in-time" privacy notices shown in-product (including consent banners/toggles) govern that specific feature to the extent of any conflict with this Policy.
2. The Cookie Policy and your consent choices in the consent tool prevail for the use of cookies/SDKs/trackers.
3. If you use JMT under an enterprise/organization agreement, any signed data-processing terms (e.g., DPA) with that organization govern for that relationship.
4. For matters relating to personal data, this Privacy Policy prevails over the Terms of Use; for non-privacy contractual matters, the Terms of Use prevail.
5. For services provided by independent partners (e.g., brokers), the partner's own privacy notice governs their processing as an independent controller.

Headings are for convenience only. References to "including" mean "including without limitation."