Last updated: 21 August 2026
1. Introduction
Forworx Ltd, trading as Forworx Petroleum (“Forworx”, “we”, “us” or “our”), respects privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit www.fxpetroleum.com, submit a general enquiry or Request for Quote (RFQ), provide corporate or compliance documentation, or otherwise communicate with us.
2. Data Controller
The controller responsible for the processing described in this Policy is:
Forworx Ltd, trading as Forworx Petroleum
Limassol Center, 6th Floor
3722 Limassol, Cyprus
Email: info@fxpetroleum.com
Telephone: +357 25 246320
3. Scope
This Policy applies to personal data processed through the Forworx Petroleum website, RFQ and contact forms, compliance and counterparty-review processes, and related business communications. It does not govern independent third-party websites or services linked from the website.
4. Personal Data We May Collect
4.1 Website and Contact Data
- Name, professional title, employer, company and authorised role.
- Business email address, telephone number, business address and other contact information.
- Subject, message and information included in enquiries, correspondence or telephone communications.
- Technical data, including IP address, browser and device information, referral source, access times, pages viewed, security logs and cookie preferences.
4.2 RFQ and Transaction-Enquiry Data
- Company name, registered address, country of incorporation and corporate contact details.
- Product, specification, requested volume, contract duration, delivery term, destination or delivery hub, and other commercial requirements.
- Information about proposed financial instruments, financial readiness and transaction capability.
- Names, titles and authority of persons submitting or managing an RFQ.
- Additional information voluntarily included in the RFQ or supporting correspondence.
4.3 Corporate, KYC and KYB Documentation
- Certificates of incorporation, good standing and incumbency; constitutional documents; registers of directors, shareholders or beneficial owners; company profiles; organisational charts; and authorised-signatory evidence.
- Identification information contained in passports or other identity documents where legitimately requested during due diligence, together with nationality, date of birth, document number and validity information.
- Ownership, control, directorship and beneficial-ownership information.
- Bank references, evidence of financial capacity or financial-instrument capability, where relevant and lawfully requested.
- Compliance declarations, sanctions-screening results, politically exposed person indicators, adverse-media findings and information necessary to assess counterparty, jurisdictional or transaction risk.
- Records of due-diligence decisions, clarifications, approvals, rejections and ongoing monitoring.
Do not upload personal identity documents, bank information or confidential transaction documents through a general contact form unless the form expressly requests them. Where sensitive documentation is required, Forworx may direct you to an approved secure channel.
5. How We Obtain Information
We may obtain personal data directly from you, from the organisation you represent, from professional advisers or transaction counterparties, and from lawful public or commercial sources used for corporate verification, sanctions screening, beneficial-ownership checks, adverse-media review or other due diligence.
6. How We Use Personal Data
- To receive, authenticate, assess and respond to enquiries and RFQs.
- To verify the identity, authority, ownership, standing and financial readiness of potential counterparties.
- To conduct KYC, KYB, sanctions, export-control, anti-fraud, adverse-media and other risk-based compliance checks.
- To determine whether an enquiry meets Forworx commercial, procedural, compliance and risk requirements.
- To communicate with buyers, suppliers, refineries, advisers, inspection providers, logistics providers, financial institutions and other relevant parties where an engagement progresses.
- To prepare, negotiate, administer or perform commercial documentation and transactions.
- To protect the integrity and security of our website, systems, personnel and commercial processes.
- To comply with applicable legal, regulatory, accounting, audit, reporting and record-keeping requirements.
- To establish, exercise or defend legal claims and resolve disputes.
- To maintain appropriate business and compliance records.
7. Legal Bases for Processing
Depending on the circumstances, we rely on one or more of the following legal bases:
- Contract or pre-contractual steps: where processing is necessary to respond to a request, evaluate a proposed engagement, prepare commercial documentation or perform an agreement.
- Legitimate interests: where processing is reasonably necessary for counterparty assessment, fraud prevention, sanctions and risk screening, professional communication, transaction security, website operation, record management or the protection of legal rights, provided those interests are not overridden by individual rights and freedoms.
- Legal obligation: where processing is required to comply with applicable law, a court order or a binding request from a competent authority.
- Consent: where you have made a freely given choice, including for optional cookies or marketing communications where consent is required.
Where processing is based on consent, consent may be withdrawn at any time without affecting processing carried out lawfully before withdrawal.
8. Information About Other Individuals
If you provide personal data concerning a director, shareholder, beneficial owner, authorised signatory, employee, adviser or other individual, you must be authorised to provide it and should ensure that the individual receives appropriate privacy information. Do not provide more personal data than is reasonably necessary for the stated purpose.
9. Compliance Screening and Human Review
Forworx may use specialist databases or screening tools to identify sanctions, politically exposed person, ownership, adverse-media or other risk indicators. A match or alert may result in additional questions, enhanced due diligence, delay or rejection. Forworx does not intend to make decisions producing legal or similarly significant effects solely through automated processing; material decisions are subject to appropriate human review.
10. Disclosure of Personal Data
Where reasonably necessary and subject to appropriate safeguards, personal data may be disclosed to:
- Website, hosting, email, information-technology, cybersecurity, document-management and secure-data-room providers.
- Professional advisers, including lawyers, accountants, auditors, insurers and compliance advisers.
- Identity-verification, corporate-information, sanctions-screening and risk-intelligence providers.
- Potential or confirmed suppliers, buyers, refineries, inspection companies, logistics providers, storage operators, financial institutions, payment providers and other transaction participants, but only to the extent relevant to an authorised engagement.
- Competent authorities, courts, regulators or law-enforcement bodies where disclosure is required by law or reasonably necessary to protect legal rights.
- A successor or potential successor in connection with a lawful corporate transaction, subject to confidentiality and data-protection safeguards.
Forworx does not sell personal data.
11. International Transfers
The international nature of energy trading may require relevant data to be accessed or processed outside Cyprus or the European Economic Area. Where required, Forworx will use an appropriate transfer mechanism, such as an adequacy decision, approved contractual clauses or another safeguard recognised under applicable data-protection law. Transaction information will be limited to what is reasonably necessary for the relevant recipient and purpose.
12. Retention
Forworx retains personal data only for as long as reasonably necessary for the purpose for which it was collected, taking account of the status of the enquiry, the nature of any due diligence, transaction requirements, legal obligations, limitation periods and the need to prevent fraud or maintain evidence of compliance decisions. General enquiries that do not progress will normally be retained for up to 24 months after the last meaningful communication. RFQ, corporate, KYC, transaction and compliance records may be retained for a longer period where justified by legal, regulatory, audit, contractual, risk-management or claims requirements. When records are no longer required, they will be deleted, anonymised or securely archived with restricted access, as appropriate.
13. Data Security
Forworx applies reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Access is limited according to role and business need. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
14. Your Rights
Subject to applicable law and relevant limitations, you may have the right to:
- Request access to personal data and information about its processing.
- Request correction of inaccurate or incomplete personal data.
- Request erasure in qualifying circumstances.
- Request restriction of processing in qualifying circumstances.
- Object to processing based on legitimate interests and object at any time to direct marketing.
- Receive qualifying personal data in a structured, commonly used and machine-readable format, and request transmission where technically feasible.
- Withdraw consent where consent is the legal basis.
- Lodge a complaint with a competent supervisory authority.
Requests should be sent to info@fxpetroleum.com. We may request information reasonably necessary to verify identity and authority before acting on a request. Certain rights are not absolute and may be limited by legal, compliance, confidentiality, fraud-prevention or claims requirements.
15. Complaints
You may lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus. Current contact information is available at www.dataprotection.gov.cy. We encourage you to contact Forworx first so that we can attempt to address your concern.
16. Children
The website and RFQ process are intended for authorised business representatives and are not directed to children. We do not knowingly collect personal data from children through the website.
17. Third-Party Links
The website may contain links to independent third-party websites. Forworx does not control those websites and is not responsible for their privacy practices. You should review the privacy information provided by each third party.
18. Changes to This Policy
We may update this Privacy Policy to reflect changes in the website, RFQ or compliance process, service providers, business operations or applicable requirements. The current version will be published with a revised update date.
19. Contact
Questions, complaints or rights requests concerning this Policy may be directed to:
Forworx Ltd, trading as Forworx Petroleum
Limassol Center, 6th Floor
3722 Limassol, Cyprus
Email: info@fxpetroleum.com
Telephone: +357 25 246320