Last updated: 21 October 2026
1. Who we are
GFCRS (Global Financial Claims Resolution Services) is an independent private organisation. We evaluate forex and CFD brokers against published membership standards, issue membership certificates that can be verified on this website, and run a free complaint and dispute-resolution process for investors.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the controller of your personal data is:
- GFCRS
Questions about this policy or about your personal data can be sent to us using the details above or through our contact page.
2. Personal data we collect
When you file a complaint
- Identity and contact details: your first and last name, email address, telephone number (optional), country of residence and postal address (optional).
- Details of your relationship with the firm: the firm's name, your account number, when the account was opened, the platform or account type, and when you first raised the issue with the firm.
- Details of the dispute: the category of the issue, your description, the firm's response, the outcome you are seeking and the amount and currency in dispute.
- Documents you upload (PDF, PNG or JPG), such as account statements, correspondence with the firm, screenshots and proof of payments. These may contain financial information and, occasionally, identity documents if you choose to provide them.
- Information you provide later in the case, including replies to information requests, and the notes, correspondence and outcome recorded by our case handlers.
When you track a complaint
You enter your case reference (in the format GFCRS-C-YYYY-XXXXXX) and the email address used for the complaint. We use these only to find your case and show you its status.
When a firm applies for membership
Business information about the firm and the name, job title, email address and telephone number of the contact person, together with the documents uploaded with the application. The firm's own data is not personal data, but the details of its contact person and of any individuals named in its documents are.
When you contact us
Your name, email address, the subject and content of your message, and any details you include.
When you verify a certificate
You enter a certificate number or open a verification link or QR code. We do not ask who you are. The lookup is processed like any other website request (see below).
Technical data from every visit
Our servers process your IP address and basic request information (such as the page requested, the time and your browser type) to deliver the website and keep it secure. To prevent abuse of our forms and verification service, we keep a of your IP address, which cannot be turned back into the address, together with a counter of recent requests. We do not use analytics, advertising or tracking technologies.