Privacy Notice

Last updated: 8 December 2025

This page explains how Kraken (via Payward Europe Digital Services Ltd., “PEDSL”) and NinjaTrader work together to provide services to you, and why both privacy notices apply. It is a summary for transparency. For complete details, please read the full notices linked below.

  • Primary contracting entity: You contract with PEDSL (Kraken) for the EU offering.
     
  • Service delivery: Some parts of the service are provided by NinjaTrader. To make the service work, PEDSL shares certain personal data with NinjaTrader.
     
  • Two relevant privacy notices:
     

Who is who

  • “Kraken”, “we”, or “PEDSL” means Payward Europe Digital Services Ltd. (PEDSL), the primary contracting entity for the EU service.
     
  • “NinjaTrader” means NinjaTrader, LLC and certain affiliated entities involved in delivering the platform and related services (for example, NinjaTrader Clearing, LLC for clearing/brokerage functions). Where relevant, NinjaTrader entities act together to provide parts of the service.
     

Why both privacy notices apply

  1. You contract with PEDSL. PEDSL is responsible for the EU offering and will be your primary point of contact for privacy matters relating to Kraken’s services.
     
  2. NinjaTrader helps deliver the service. In order to operate the trading platform and related functions, PEDSL shares some personal data with NinjaTrader. NinjaTrader may also collect certain data directly from you (for example, when you visit NinjaTrader-operated pages, use their apps, or engage with their customer support).
     
  3. Different roles depending on the activity.
     
  • Processor (service provider) role: For activities where NinjaTrader processes PEDSL data on PEDSL’s instructions (e.g., enabling platform functionality for your account), NinjaTrader acts as a processor for PEDSL.
     
  • Independent controller role: For activities where NinjaTrader determines purposes/means on its own (e.g., operating its own websites/apps, security and service integrity, regulatory compliance when applicable), NinjaTrader acts as an independent controller. In those cases, the NinjaTrader Privacy Notice applies.
     

In short: PEDSL remains your primary contracting party and a controller for most account-related processing. NinjaTrader also processes your data to provide the service, sometimes as PEDSL’s processor and sometimes as an independent controller. That’s why both privacy notices are relevant.

International data transfers

NinjaTrader is located outside the EEA in the United States. Where PEDSL shares EU/EEA personal data with NinjaTrader, PEDSL uses European Commission Standard Contractual Clauses (SCCs) to protect your information. NinjaTrader applies equivalent safeguards when it determines transfers in its independent capacity.

Your privacy rights

Under EU/EEA data protection law, you may have the right to request access, rectification, erasure, restriction, objection, data portability, and to withdraw consent (where processing is based on consent). How to exercise:

If your request concerns processing where NinjaTrader acts as PEDSL’s processor, we will coordinate with NinjaTrader to fulfill it.

You also have the right to lodge a complaint with your local data protection authority. Contact details are available via your national DPA’s website.

Security

Both PEDSL and NinjaTrader maintain technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. For details, see the security sections in each privacy notice.