Privacy Policy

Last updated: August 13, 2026

Welcome to BHC Markets Limited's (trading as Pharos Global Investments) Privacy Policy. We believe in being upfront about how we handle your information, so we've created this page to explain exactly how we safeguard your information and respect your digital rights.

At BHC Markets, we handle your data with the same care we'd want for our own information. This policy explains what information we gather, why we need it, and how we put it to use — alongside the additional obligations we carry as an Investment Dealer licensed and regulated by the Financial Services Commission (FSC) of Mauritius (Licence No. 177104).

Personal Information

We may collect personal information about you, including but not limited to:

• Name
• Email address
• Phone number
• Postal address
• Payment information

Usage Data

We may also collect information about how the Service is accessed and used, including:

• Log data (IP address, browser type, pages visited)
• Device information
• Location data
• Cookies and tracking technologies

Information from Third-Party Social Media Services

BHC Markets lets you create an account and log in to our Services with the following third-party services:

• Gmail
• Facebook

If you register or grant us access to a third-party provider, we may collect additional personal data associated with your third-party account. This information might include your name, email address, activities, and contact list. When you grant us access to your third-party account, you are giving BHC Markets permission to use, share, and store your data in a manner consistent with this Privacy Policy.

We use your information to:

We Won't

We share your information only when:

• You give us permission
• We need it from service providers (like payment processors or email services)
• The law requires it
• It's necessary to protect our users or our rights

Your data security is fundamental to our operations. We employ Advanced Encryption Standard to protect data and ensure your information remains scrambled and unreadable to unauthorized parties. Our security team conducts comprehensive assessments, proactively identifying and addressing potential vulnerabilities.

Access to user data within our organization operates on a strict need-to-know basis. Every team member undergoes security training, with their system access regularly audited and adjusted. Our service providers undergo extensive vetting before any partnership begins. We require them to maintain security standards that match or exceed our own, and we regularly audit their compliance.

While we maintain these robust security measures, we recognize that no online service is impenetrable. We strongly recommend that you also take steps to protect your own information — using a strong, unique password, keeping your login credentials confidential, and contacting us immediately if you suspect unauthorized access to your account.

Your data belongs to you, and we've built our systems to reflect this principle. You can:

Our Services are directed at eligible and professional investors and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we find we've accidentally collected information from someone under this age, we will delete it.

We use cookies and other tracking technologies to keep our Service working properly and to understand how people use our site. For more information about our use of cookies, please see our Cookie Policy.

When we transfer data internationally, we follow applicable data protection laws and use appropriate safeguards to protect your information.

California residents have additional rights regarding their personal information under the CCPA and CPRA. This includes the right to know what information we collect, request deletion, and opt-out of data sharing.

You have the right to:

• Access your personal information
• Correct inaccurate or incomplete information
• Request deletion of your information
• Object or restrict processing of your information
• Withdraw consent

For users in the European Economic Area (EEA) and the United Kingdom (UK), we process your personal data based on legitimate interests, consent, contractual necessity, or legal obligations. We respond to all data rights requests within 30 days.

We make changes to this Privacy Policy from time to time. We'll notify you of these changes by publishing a new Privacy Policy on this page and updating the "Last updated" date above.

This policy is governed by the laws of Mauritius. For questions about your privacy or this policy, contact us using the details below.