Privacy Launching soon
This notice explains, in plain English, what personal data OmbraProp holds, why, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).
The waitlist
- What we store: your email address, the platform you trade on (only if you chose one) and the time you joined. We also note which version of the consent wording you agreed to and which page you joined from, so we can show what you agreed to.
- Why: to send you one email when evaluations open. Nothing else: no newsletters, and we do not share your address.
- Lawful basis: your consent (UK GDPR Art. 6(1)(a)), given by ticking the box on the form. You can withdraw it at any time.
- How long: deleted 30 days after we send the launch email, or sooner if you ask. Email prop@ombratrading.com and we delete it.
- No tracking: the form sets no cookies, and our emails have no tracking pixels or tracked links. Cloudflare stores the sign-up for us and Resend sends the emails.
OmbraProp updates (marketing emails, only if you opt in)
- Only with your consent: we send OmbraProp updates, new features, trading education and offers (about once a week, a little more often in the first two weeks) only if you tick the separate, optional box on the waitlist form, or the box on the page linked from our launch email. The box is never ticked for you, and the waitlist works without it. Ticking the first box alone gets you the one launch email and nothing else. If you tick the updates box on the waitlist form, we first email you a link to confirm it was you; updates start only after you press the button on that page (so nobody can sign you up for updates without your inbox).
- How often: the updates are a series that runs for about a year from when you confirm: a few emails in the first two weeks, then about one a week. After the series ends you may get occasional updates until you unsubscribe. If you agreed before 25 October 2026, when our form said “about twice a month”, you get about one every two weeks and none of the extra emails in the first two weeks.
- What we store: whether you opted in, when, which version of the wording you agreed to and where (which page, or the launch email). If you unsubscribe, we store when.
- Lawful basis: your consent (UK GDPR Art. 6(1)(a) and regulation 22 of the Privacy and Electronic Communications Regulations).
- How to withdraw: use the unsubscribe link at the bottom of every update (it works without JavaScript, and many mail apps also show an “Unsubscribe” button), or email prop@ombratrading.com. It takes effect straight away, and withdrawing does not affect emails sent before. Unsubscribing does not cancel the one launch email you asked for; to remove your address completely, ask us to delete it.
- How long: while you stay subscribed. If OmbraProp does not open within 24 months of your sign-up, we delete your address. After you unsubscribe we keep your address only for the one launch email (then deleted 30 days later, as above), or delete it straight away if you ask; we keep a note that you unsubscribed only as a one-way code, so we can never email you updates by mistake.
- Who sends them: Resend (Resend, Inc., United States) sends our emails as our processor. It receives your email address and the email itself, under its data processing agreement, which includes the UK’s international transfer safeguards. We record which campaign went to which sign-up by a one-way code of your address, not by the address itself. No tracking pixels or tracked links.
Who we are
The controller of your data is Ombra Trading Ltd, a company registered in England and Wales, company number 17531482, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.
Ombra Trading Ltd is registered with the Information Commissioner's Office (ICO): ICO registration number ZC276343.
For any question about your data, or to use any of your rights, email prop@ombratrading.com.
OmbraProp and your other Ombra accounts
Ombra Trading also makes Ombra Platform and Ombra Watch, which are trading software. You can see your OmbraProp accounts in the same Ombra app, with one sign-in, but only if you choose to link them. This is how we keep the two apart:
- OmbraProp has its own database. OmbraProp records (your evaluations, funded accounts, identity check, purchases and payouts) are kept in their own database, not with Ombra Platform or Ombra Watch data.
- Nothing is shared unless you link your accounts. Ombra Platform and Ombra Watch customers' data reaches OmbraProp only if you choose "Link my OmbraProp account" in the app and agree to it.
- What linking shares. When you link, OmbraProp receives only:
- your Ombra sign-in identity (an internal account number), so you can use one sign-in; and
- the email address on your Ombra account, so we can match it to your OmbraProp account.
OmbraProp does not receive anything else: not your broker or prop firm accounts or their logins, not your trades, positions, orders or balances outside OmbraProp, not your copier settings, not your Ombra Watch alerts, and not your Ombra Platform or Watch payment details or history.
- What you see in the app. Once linked, the app shows you your OmbraProp accounts next to your own accounts. That display is for you. Ombra Platform and Ombra Watch do not keep OmbraProp data or use it for anything else.
- What we never do with it. We never use Ombra Platform or Ombra Watch data to check for prohibited conduct, decide payouts, set prices or market OmbraProp to you, whether or not your accounts are linked. People who work on OmbraProp have no access to Ombra Platform or Ombra Watch customer data.
- Unlinking. You can unlink at any time in the app's settings, or by emailing prop@ombratrading.com. From then on OmbraProp receives nothing from your Ombra account. We delete the stored link (your Ombra sign-in identity) within 30 days, and you sign in to OmbraProp with its own login. Your OmbraProp accounts are not affected. Unlinking does not undo what was shared before, but that is only the two items above.
- Other exceptions. Apart from linking, data moves between them only if you ask us to do something that needs it, or if a valid legal order requires it.
What we hold
| Data | Where it comes from |
|---|---|
| Account details: name, email address, country, date of birth, a securely hashed password, sign-in records | You |
| Link to your Ombra account (only if you link): your Ombra sign-in identity and the email address on your Ombra account | You, through the Ombra app when you choose to link |
| Identity check: your identity check result, the provider's reference, the name, date of birth, address and country confirmed, and the sanctions and politically exposed persons screening result | You, through our identity check provider |
| Identity documents and selfie or video: held by our identity check provider to run the check. We do not keep copies of document images or your selfie on our own systems | You, to our identity check provider |
| Purchases: what you bought, when, the price, refunds, chargebacks, the last four digits and a fingerprint of your card (to spot one card used by several identities). We never see your full card number | Our payment processor |
| Trading account records: for each evaluation and funded account: balance, profit and loss, positions, orders and fills (time, instrument, side and quantity), rule checks, breaches and their evidence | The trading platform |
| Payouts: requests, decisions, amounts, your payout account details and payment references | You and our payout provider |
| Security and anti-abuse data: IP addresses, device and browser information, used to detect one person holding several accounts and to protect accounts | Your device |
| Agreement signature records: when you sign the funded trader agreement or the risk disclosure acknowledgement, which text and version you signed, a fingerprint (hash) of its exact text, the full name you typed, the date and time, the account it relates to, the app or website version you used and the IP address our server saw. The record is append-only: nobody at OmbraProp can change it | You, and our server |
| Identity check updates: Sumsub sends our server signed messages (webhooks) when your check changes status. They carry the Sumsub applicant reference, the status (for example in progress, needs attention, verified or rejected), the reason it gives, and the name, date of birth and country it confirmed. They never carry your document images or selfie | Sumsub |
| Messages: emails, complaints and appeals | You |
| Waitlist: if you joined the waitlist, your email address, the platform you trade on (only if you chose one), the time you joined, which version of the consent wording you agreed to and which page you joined from | You, through the waitlist form |
No market data. OmbraProp's servers do not receive or store market data such as price feeds, quotes or charts. Rule checks use the balance and profit and loss reported by the trading platform.
We do not knowingly hold data about anyone under 18.
Why we use it, and our lawful basis
| What | Why | Lawful basis |
|---|---|---|
| Account details | To run your account and send service emails | Contract (UK GDPR Art. 6(1)(b)) |
| Link to your Ombra account | To let you use one sign-in and see your OmbraProp accounts in the Ombra app | Consent (Art. 6(1)(a)). You give it when you link, and withdraw it by unlinking |
| Identity check result and screening | To meet our one-person-one-account rule, prevent fraud, and comply with sanctions law, before a funded account or payout | Contract; legal obligation (Art. 6(1)(c)) for sanctions; legitimate interests (Art. 6(1)(f)) in preventing fraud |
| Selfie or video used for the liveness check | To confirm the person is real and matches the document | Your explicit consent (Art. 9(2)(a)), asked for at the start of the check. You can refuse, but then we cannot give you a funded account or a payout |
| Purchases | To take payment, give refunds and keep tax records | Contract; legal obligation for tax records |
| Trading account records | To run the evaluation and funded account, apply the rules, show you your progress, send breach evidence and decide payouts | Contract |
| Payouts | To pay you and keep records | Contract; legal obligation |
| Security and anti-abuse data | To detect multi-accounting, account sharing and coordinated trading, and to keep the service secure | Legitimate interests (keeping the service fair and secure) |
| Agreement signature records | Evidence of what you agreed to, and when | Contract; legitimate interests (Art. 6(1)(f)) in establishing and defending legal claims |
| Messages | To answer you and handle complaints and appeals | Contract or legitimate interests |
| Waitlist | To send you one email when OmbraProp opens | Consent (Art. 6(1)(a)), given by ticking the box on the form. Withdraw it at any time by asking us to delete your address |
| OmbraProp updates (only if you opted in) | To send you updates, new features, trading education and offers, about once a week (a little more often in the first two weeks), or about twice a month if you agreed before 25 October 2026 | Consent (Art. 6(1)(a) and PECR regulation 22), given by ticking the separate optional box. Withdraw it at any time with the unsubscribe link in every email |
What you must give us. To buy an evaluation you must give us your account details. To get a funded account or a payout you must complete the identity check and give payout details. Without them we cannot provide that part of the service. Linking your Ombra account is always optional.
We do not send marketing emails unless you have opted in (see OmbraProp updates). You can opt out at any time with the link in every email.
Automated decisions
Our software automatically ends an evaluation or funded account when it detects a rule breach (for example reaching the maximum loss), because that is how the evaluation works under our contract with you. You receive the evidence, and you can ask for a person to review the decision through the appeal route in the terms. Decisions about prohibited conduct and every payout decision are made by a person.
Conduct checks. Our software also checks for the prohibited conduct in section 8 of the terms (for example multi-accounting, hedging, copy trading outside the rules and order abuse). It only flags an account and can hold a payout while a person reviews it; it never ends an account or refuses a payout on its own (UK GDPR Article 22). The checks use: your trading account records (orders, fills, timestamps, positions, balances and profit and loss reported by the trading platform), your account details, the device, IP address and browser details recorded at sign-in, payment card and payout account fingerprints from our providers, your address, and your identity check result. They never use market data, or data from Ombra Platform or Ombra Watch. We do not share this data or the outcome with other prop firms, unless the law requires it.
Who handles it for us
We do not sell or rent your data. These providers process it for us. The providers marked "to be confirmed" have not been chosen yet; we will name each one here, with where it processes data and the safeguard used, before OmbraProp opens.
- Sumsub (Sum and Substance Ltd, United Kingdom) runs the identity check and sanctions screening, holds your document images and selfie or video, and sends our server the identity check updates described above. It may process data outside the UK under its data processing agreement and the UK’s transfer safeguards.
- Payment processor (to be confirmed) takes payments. It is a separate processor, not the one used for Ombra Platform or Ombra Watch. It may also act as a controller in its own right for fraud prevention and legal reasons, under its own privacy policy.
- Trading platform: Rithmic (agreed to onboard OmbraProp, subject to its conformance checks and exchange approval; Tradovate may follow later) provides the simulated trading accounts. We give it your name, email address and country to open your accounts, and it sends us the trading account records above. It may also be a controller for its own purposes, under its own privacy policy.
- Payout provider (to be confirmed) sends payouts.
- Hosting: Cloudflare hosts this website and stores waitlist sign-ups (United States and worldwide, under the UK-US data bridge). The OmbraProp database host is to be confirmed.
- Resend (Resend, Inc., United States) sends the waitlist launch email and OmbraProp updates as our processor, under its data processing agreement with the UK’s transfer safeguards. Marketing and service emails for all Ombra products (OmbraProp, Ombra Platform and Ombra Watch) are sent through Resend, our email provider, under one account run by Ombra Trading Ltd. Resend handles your details only to send our emails, and we do not share them with anyone else for their own marketing. Email providers for service emails once OmbraProp opens, and our mailbox host, are to be confirmed.
We may also share data with professional advisers (such as our accountant), with the police, a court or a regulator where the law requires it, and with a buyer of OmbraProp if the business is sold. A buyer must keep the promises in this notice.
International transfers
Some providers process data outside the UK. When they do, we make sure there is a lawful safeguard: a UK adequacy decision, the UK Extension to the EU-US Data Privacy Framework (the UK-US data bridge) for certified US companies, or the UK International Data Transfer Agreement or Addendum. Ask us for a copy of the relevant safeguard.
How long we keep it
| Data | How long |
|---|---|
| Account details | While your account is open, then 6 years after it closes (the time in which a legal claim can be brought) |
| Link to your Ombra account | Until you unlink or close your account, then deleted within 30 days |
| Identity check result and screening | 5 years after your account closes |
| Agreement signature records | As for account details: 6 years after your account closes |
| Document images, selfie or video (held by our identity check provider) | The shortest period the provider allows, which we will state here when the provider is chosen, then deleted by the provider |
| Purchases and payouts | 6 years after the end of the tax year they relate to, as UK tax law requires |
| Trading account records and breach evidence | 6 years after the account ends |
| Security and anti-abuse data | 12 months, or longer if linked to an open review, appeal or dispute |
| Messages, complaints and appeals | 2 years after the last exchange, or longer if needed for a dispute |
| Waitlist sign-up | Deleted 30 days after we send the launch email, or sooner if you ask us to delete it (unless you opted in to updates; see the next row) |
| OmbraProp updates consent | While you stay subscribed (deleted if OmbraProp has not opened 24 months after you signed up). The updates series itself runs for about a year from when you confirm. After you unsubscribe, as for a waitlist sign-up, plus a one-way code of your address so we never email you updates again |
| Record of which campaign or series email went to whom | Kept by one-way code of your address (never the address itself). Campaigns: 2 years. The updates series: while you stay subscribed, so no email is sent twice, then 2 years after you unsubscribe, to show we sent only to people who agreed |
Cookies
This website uses no cookies, analytics or tracking, and the waitlist form sets none. Once OmbraProp opens, the dashboard will use only essential cookies: a sign-in cookie to keep you logged in, and security cookies to protect the service. They do not need consent. We use no analytics, advertising or tracking cookies, and no third-party trackers. The payment page run by our payment processor and the identity check run by our identity check provider may set their own essential cookies.
Your rights
You have the right to:
- get a copy of the data we hold about you;
- have it corrected if it is wrong;
- have it deleted, unless we must keep it (for example for tax, sanctions or an open dispute);
- restrict or object to how we use it, including use based on legitimate interests;
- withdraw consent at any time, where we rely on consent, including by unlinking your Ombra account (this does not affect what we did before);
- receive data you gave us in a common format to take elsewhere;
- ask for a person to review an automated decision.
Email prop@ombratrading.com. We reply within one month. There is no charge.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or call 0303 123 1113.
Changes to this notice
If we change how we use your data, we will update this page and its version number, and email customers about any change that matters.
Contact: prop@ombratrading.com. OmbraProp is a service of Ombra Trading Ltd, a company registered in England and Wales, company number 17531482, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.