Privacy notice
Personal information across the client journey.
This notice describes the intended privacy baseline for the website, application, onboarding, login, recovery, education, and support journey. Confirm the responsible legal entity and governing notice before submitting production data.
Controller identity
The entity responsible for personal information, its company details, registered address, privacy contact, and governing terms must be supplied in operator documentation before production.
Information you provide
This may include contact, residence, application, verification, experience, account-preference, security, communication, and transaction-support information.
Why information may be used
Information may be used to process an application, verify identity and eligibility, assess appropriateness, provide secure platform and support services, communicate about an account, and meet applicable obligations.
Data minimisation
Only information relevant to the stated purpose should be requested. Do not place passwords, one-time codes, full payment credentials, seed phrases, or identity images in general support forms.
Account security
The production baseline should include TLS-encrypted transmission, access controls, two-factor authentication, session monitoring, recognised-device review, automatic expiry, and incident escalation.
Sharing and service providers
Verified providers may support identity checks, platform delivery, communications, security, payments, or a relevant request under applicable contractual and legal safeguards.
Retention
Information should be retained only for the required purpose and period, then securely deleted or anonymised where permitted. The governing operator notice must state actual periods or criteria.
Your rights
Depending on location and circumstances, rights may include access, correction, deletion, restriction, objection, portability, or complaint to an applicable authority.
International handling
Where information is handled across borders, the responsible operator should identify the locations and safeguards required by the governing law.
Contact and updates
Use the privacy route confirmed in operator documentation. This notice should be updated when the operator, purposes, providers, retention, security controls, or applicable requirements change.