General Information and Introduction
This privacy notice (“Policy”) explains how NinjaTrader Group LLC and its affiliates and subsidiaries NinjaTrader, LLC and NT Technologies, LLC which conduct business under trade names NinjaTrader and NinjaTrader Prop, a (“NinjaTrader’, “we”, “us”, or “our”) processes personal data of individuals located in the United Kingdom (“UK”) and European Economic Area (“EEA”) in accordance with the European Union General Data Protection Regulation (EU GDPR – Regulation (EU) 2016/679) (“GDPR”) and UK Data Protection Act 2018 (“UK GDPR”).
This Policy is written to provide you with a clear description of what personal data NinjaTrader collects; how we use it; with whom we share it; how long we keep it; and your privacy rights. This personal data may be gathered from you both directly, when you complete an application, provide us with documents or information, or respond to an inquiry, as well as indirectly, when you access our websites and trading services, applications, and platforms. If you have any questions, please contact us so that we may help to answer any questions which you may have regarding how and why we use your data.
This Policy supplements our other policies and specific privacy notices and, therefore, should be read in conjunction with our other policies and specific privacy notices. This Policy is not intended to replace or govern any other privacy policies which we may disseminate. While this is our Policy for the UK and EEA, NinjaTrader is a limited liability company formed and organized under the laws of the State of Delaware, United States and maintains its primary place of business in the State of Illinois, United States. If you were, are or become a customer of NinjaTrader, consistent and in conformity with your contract or Customer Agreement with NinjaTrader, your relationship with NinjaTrader remains governed by the laws of the State of Illinois, United States. This notice is provided to comply with the GDPR and UK GDPR. Nothing in this notice limits data subjects’ rights under the GDPR or UK GDPR or the jurisdiction of supervisory authorities in the UK or EEA.
Trading financial products is not suitable for children. Our services are not marketed towards children and we do not knowingly collect data of children under the age of eighteen (18) years old.
NinjaTrader is the controller of any personal information which you provide, directly or indirectly, to us. That means that we decide the purposes and means of the processing of that information and, as a global service provider, we may transfer data abroad in connection with providing services to you. This could include countries outside of the UK and EEA. Where we transfer personal data outside of the UK or EEA, we use adequacy regulations/decisions or Standard Contractual Clauses (SCCs) (and, where required, the UK International Data Transfer Addendum) and implement transfer risk assessments and appropriate technical and organisational measures. NinjaTrader does not and will not sell your personal information.
What Types of Personal Information We Collect:
- Contact Information includes physical address, email, phone numbers (if you applied or apply for an account with NinjaTrader).
- Identification Information may include your full name, copies of identification, date of birth, gender, and marital status, education level (if you applied or apply for an account with NinjaTrader).
- Technical Information includes data related to your use of our website and services. It specifically includes Internet protocol (IP address), browser, browser version and plugins, and system details, cookie ID, and other information related to the devices you use to access our services and settings/technology on those devices.
- Financial Information including net worth, income, banking, and payment information, and credit reporting agencies reports.
- Profile Information including user ID and login information, trading experience, occupation, educational history and product interests.
- Usage Information including information related to how you use our websites, platforms, products, and services. Usage information may also include information pertaining to your trading, use of demo trading accounts, simulated trading accounts, educational videos and learning resources.
- Aggregated Data includes statistical and demographic data that may be derived from your personal information, but aggregated data is not personal data because it does not reveal or disclose your identity in any way.
How We Collect Your Personal Data
- Your personal information may be collected in a variety of ways.
- Direct Interaction. In this case, you voluntarily provide your personal information to us by completing account applications and related forms and documents; phone calls; or sending us documents, including by electronic means, including via email or regular post. This is generally information you provide when applying for an account, onboarding or creating an account, subscribing for or purchasing products, responding to queries, or requesting material or information from us.
- Automated Collection. As you use our website, services, or trading platforms, and through our use of cookies and tracking technologies, we may automatically collect data about you, including technical information described above, as well as web browsing statistics and patterns.
- Third-parties and public information. We may receive information about you from third-parties, such as credit reporting agencies, background check providers, payment agents, and market registrants, such as introducing brokers or foreign brokers. Technical data analysis firms, like Google, may also provide us with personal data regarding you.
How We Use Your Personal Data
We will only use your data as allowed by law. We may, where permitted by law, use your personal information, without your knowledge or consent, if in compliance with the laws. In accordance with legal obligations for and compliance with anti-money laundering laws and for the purpose of fraud prevention and enforcing regulatory required identity theft policies, sanctions screening, and regulatory requests, as well as “know your customer” legal and regulatory requirements, we must confirm your name, address and other information before opening an account for you. As a highly regulated financial institution, we do not rely solely on your consent to collect and use your personal information. Under the GDPR, the legal basis for all our collection and use of personal data are as follows, (in some instances more than one legal basis may apply):
- Performance of a contract with you.
- Necessary to comply with a legal obligation
- Necessary for our legitimate interests (including but not limited to keep records updated, prevent fraud, for provision of administration of services, network security, to run and develop our business services, for marketing development).
Where we rely on legitimate interest, we have conducted a Legitimate Interest Assessment (“LIA”). We also use your personal information to submit trade reporting to exchanges and regulators when or where required by applicable laws, exchange rules and regulatory authorities.
As a potential client or client of ours, we may use your personal information to contact you regarding your account status, responding to your questions, or for marketing purposes.
If you are a client, we may use personal information to process your orders, facilitate payments to and from your account, manage your fees, collect debts, perform risk assessments, investigate complaints, and disclose material we are required to report.
Marketing
We may use Contact, Usage, and Technical information to tailor communications about products and services. Where required, we will obtain consent; otherwise, we rely on legitimate interests with the ability to opt out at any time (see ‘Your rights’). We do not sell personal data. NinjaTrader will not sell your personal information for any reason. We may, however, use your personal information (contact information, usage data, and technical information gathered) to determine what we think may be of interest or helpful to you. This is a way we assess which service, products, or offers may be useful to you.
Disclosure and Why
We may share your personal information with the following parties:
- Auditors. Our auditors and agents for the purpose of completing financial and regulatory audits and reviews, identity verification, credit checks, regulatory compliance reporting, as we deem reasonable or necessary.
- Regulators. The Commodity Futures Trading Commission, National Futures Association and industry regulators, in order to comply with laws, regulations, and rules of the industry.
- Courts, Administrative Judges, and Arbitrators. Courts. administrative judges, arbitrators, and legal authorities when or where required to comply with law, regulations and rules or necessary to enforce our agreements.
- Exchanges. By virtue of your trading on futures or other contract market exchanges, you have consented to the rules of those exchanges and, as such, we may be required to disclose your personal data to those exchanges for clearing and reporting.
- Affiliates. Each NinjaTrader affiliated company may share your personal information with each other in order to service or perform services for your account, including executing orders, generating statements, collecting margin, and providing technical and trade support to you.
- Kraken Group Companies. For intra-group services (e.g., technology, support, compliance) under appropriate intra-group data sharing arrangements. Kraken’s Privacy Notice is available at https://www.kraken.com/en-gb/legal/privacy
- Buyers and Potential Buyers. If NinjaTrader were to sell or entertain the sale of all or part of our business or assets, we may share your personal information with the buyer(s), potential buyer(s), and each of its or their advisors or lenders.
- Third-Party Consultants, and Vendors. Third-parties, who analyze or help improve platform functionality, optimize customer experience, measure effectiveness of marketing initiatives, and otherwise process data, such as cloud hosting providers and IT security vendors, may be provided with your personal information.
- Authorized Parties. We may discuss or share your personal information with those individuals or third-parties to whom you have authorized to receive such information or to whom ask us to provide such information (for example, your attorney, financial advisor, accountant, tax advisor etc…)
We require all third-parties to be respectful and careful with your personal information and to comply with data protection and privacy principles. Some third-parties may reside outside or be located outside of the UK and EEA. Where we transfer personal data outside the UK/EEA, we use adequacy regulations/decisions or Standard Contractual Clauses (SCCs) (and, where required, the UK International Data Transfer Addendum) and implement transfer risk assessments and appropriate technical and organisational measures.
Security
NinjaTrader has security measures in place to help prevent your information from being shared or accessed in an unauthorized manner, lost, or altered. Your personal information is accessible only to authorized employees of NinjaTrader and our authorized agents, as disclosed above, who have a need to know and use your information. With respect to your personal information, we require our employees and agents to be subject to confidentiality requirements. If there is a data breach, we have a written policy governing a proper response, including notification to you and applicable authorities when legally required.
How long do we keep your personal information?
We retain personal data for as long as necessary for the purposes set out in this notice, including meeting regulatory, tax, accounting and AML requirements. For example, we typically retain identity, contact, transaction and financial records for at least five (5) years after an account closes, or longer when or where required due to court, administrative, or regulatory order. We strive to keep your information only as long as necessary to comply with legal and financial reporting and retention requirements, regulatory requirements, and operational needs. Requests to delete your information may be sent to [email protected] for consideration.
Your rights
Generally, subject to regulation and law, under data protection laws, you have the following rights:
- To request access to your personal information and data portability
- To request deletion of your personal information (subject to regulatory retention rules or books and records regulations)
- To object to or restrict processing of your personal information
- To lodge a complaint with the ICO or EEA authorities
- To object to direct marketing
- To request corrections to your personal information (we may need to verify requested changes)
- To withdraw your consent to our collection or use of your personal data at any time, where we rely on consent as the lawful basis for processing (for example, certain marketing communications or optional features).
- Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal, but it may mean we can no longer provide the feature or service that relied on that consent.
You can also opt out of receiving marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us at [email protected]. If you wish to exercise any of these rights, please contact us at [email protected]
We will strive to accommodate reasonable and legal requests within a reasonable amount of time and, generally, in less than one month.
Last updated 05 December 2025