Privacy Policy

We respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explains what information we collect when you use our site and services, why we collect it, how we use and share it, and the choices and rights available to you. If you have any questions or requests about your data, please contact us at [email protected].

Information we collect

We collect information that is necessary to create and manage your account, provide our services, meet legal obligations, and improve your experience. This information includes:

• Account and contact details: name, email address, telephone number, date of birth, address, username and password, and other contact or profile information you provide when you register or update your account.
• Identity and verification data: copies of identity documents, proof of address, and other documents you submit to verify your identity or eligibility to use our services when required.
• Technical and usage data: IP address, device identifiers, browser type, operating system, web and app activity, pages viewed, session length, and other diagnostic information collected automatically when you visit or interact with our platform.
• Support and communication data: records of your communications with our customer support team and any information you provide during those interactions.
• Preferences and marketing data: language preferences, communications preferences, and any choices you make about receiving promotional material.

How we use your information

We use your personal data for clear and specific purposes, including:

• Creating and managing your account, authenticating access, and providing the services you request.
• Verifying your identity and meeting applicable legal and regulatory requirements.
• Operating, improving and personalizing our website, apps, and services.
• Responding to your enquiries and providing customer support.
• Detecting, preventing and investigating fraud, abuse, security incidents and other unlawful activities.
• Sending essential service messages, including updates about your account and important policy or security notices.
• Sending marketing communications where you have given consent, and allowing you to opt out of such communications at any time.

Legal bases for processing (where GDPR applies)

When we process personal data in connection with users in the European Economic Area, United Kingdom or other places with similar privacy laws, we rely on one or more of the following legal bases:

• Performance of a contract: to provide services you request and to manage your account.
• Legal obligation: to comply with applicable laws and regulatory obligations, such as identity verification and record keeping.
• Legitimate interests: for purposes such as platform security, fraud prevention, analytics, service improvement, and exercising or defending legal claims, provided those interests do not override your rights.
• Consent: where required, for example for certain marketing communications and cookie usage beyond strictly necessary site functions. You can withdraw consent at any time.

Sharing and disclosure of your information

We share personal data only as necessary to operate our services, comply with legal obligations, or protect our rights. Typical recipients include:

• Service providers and vendors who help operate the platform, such as hosting, analytics, fraud detection and identity verification providers.
• Regulatory, licensing or law enforcement authorities when required by law or to comply with investigations.
• Third parties involved in dispute resolution, compliance reviews or security investigations.
• Affiliated brands and business partners where required to provide or improve services, or as part of a corporate reorganization or sale. We will notify you of any material change in the ownership or control of your personal data when required by law.

KYC, verification and compliance processing

To comply with applicable laws and regulatory obligations, we may require identity and verification documents from you. We process this verification data to:

• Confirm your identity and eligibility to use our services.
• Prevent fraud, money laundering and other unlawful activity.
• Fulfil record-keeping obligations imposed by regulators.

These checks are carried out in a secure manner and only where necessary. The legal basis for this processing is typically a legal obligation or our legitimate interest in protecting our service and users.

Cookies, analytics and tracking

We use cookies and similar technologies to operate and improve our site, remember your preferences, and provide analytics. Some cookies are strictly necessary for core site functions, while others support personalization and marketing.

You can control cookie preferences through your browser settings or through any cookie controls provided within our platform. Where consent is required, we will obtain it before setting non-essential cookies.

Mobile apps and device data

If you use our mobile apps or mobile-optimized site, we may collect device and performance data such as device model, operating system version, unique device identifiers and crash logs to provide and improve the mobile experience. On supported devices, we may offer features such as biometric login; enabling these features requires certain device-level permissions which you can control in your device settings.

Data security

We apply technical and organizational measures to protect your personal data from unauthorized access, accidental loss, destruction or alteration. These measures include encryption of data in transit, access controls, regular security assessments, and secure handling procedures. While we strive to protect your data, no security measures are completely fail-safe, and you should take care with your account credentials and devices.

International transfers

We operate in multiple jurisdictions and may transfer or access your personal data in countries outside your home country, including to jurisdictions where our service providers or our operations are located. When we transfer data internationally we take steps to ensure an adequate level of protection, such as contractual safeguards, approved transfer mechanisms, or other measures required by applicable law.

Data retention

We retain your personal data only for as long as necessary to provide services, to meet legal or regulatory requirements, resolve disputes, enforce our agreements, or for legitimate business purposes such as analytics and fraud prevention. Retention periods vary by category of data and purpose; where possible we apply retention limits and periodic review of stored data.

Your rights

Depending on where you live and applicable law, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: request deletion of your data in certain circumstances.
• Restriction: request limits on how we use your data in certain situations.
• Portability: request a machine-readable copy of data you provided to us.
• Objection: object to processing based on legitimate interests or direct marketing.
• Withdraw consent: if processing is based on consent, you can withdraw it at any time without affecting processing prior to withdrawal.

To exercise your rights, contact us at [email protected]. We may request information to verify your identity before fulfilling requests. If you are located in the EU/EEA or UK and remain unsatisfied after contacting us, you also have the right to lodge a complaint with a supervisory authority.

Automated decisions and profiling

We may use automated processes to help detect risk, prevent fraud, and to make certain operational decisions such as eligibility for promotions or account restrictions. These processes use information you provide and data derived from your account activity. Where automated decisions have a legal or significant effect on you, you may request human review and explanation of the decision and provide additional information for consideration.

Children's privacy

Our services are intended for adults. We do not knowingly collect personal data from children under the age of 18 (or a higher age required by local law). If we become aware that a child has provided us with personal data, we will take reasonable steps to delete that information promptly.

Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make material changes, we will provide notice by posting a prominent update on our site or by contacting you where appropriate. We encourage you to review this policy periodically.

Contact us

If you have questions, requests or concerns about this Privacy Policy or our data practices, please contact us at:

[email protected]

We will respond to verified requests and enquiries in line with applicable legal requirements.