إشعار الخصوصية

Croleo Ltd. will be responsible for your personal data. This notice is being written to meet the data protection laws that apply to our customers, such as the EU and UK General Data Protection Regulation. Final wording is pending legal review.

• Identity: name, date of birth, nationality, a government photo ID (passport, national ID card or driving licence), proof of address and a live selfie check.
• Contact details: email address and, if you choose, a mobile number, which we use to send sign-in codes by SMS and for support calls.
• Financial data: balances, orders, trades, deposits and withdrawals, and payment details if you buy crypto with a card or bank transfer.
• Device and security data: passkey public keys, device type, IP address and sign-in history.
• From Google or Apple, only if you choose to sign in with them: your account identifier there and the email address it shares with us. We never receive your Google or Apple password.

We do not store your passkey's private key; it never leaves your device.

• To verify your identity and meet anti-money-laundering, counter-terrorist-financing and sanctions duties.
• To run your account: execute trades, move funds and send you statements.
• To keep your account safe: detect fraud, account takeover and unusual withdrawals.
• To answer you when you contact support.

We do not sell personal data and we do not use it for third-party advertising.

• Our custodian, payment partners and identity-verification provider, only for the service they provide.
• Regulators, tax authorities and law enforcement where the law requires it.
• Other virtual asset service providers, for the sender and recipient details that travel-rule regulations require on transfers.
• Google or Apple, only if you sign in with them, and our SMS provider (Twilio Verify), only if you sign in by mobile code: they confirm who you are or send you the code. We do not send them your identity documents or account activity.

We keep identity and transaction records for as long as anti-money-laundering law requires after your account closes (usually at least five years), then delete or anonymise them.

You can ask for a copy of your data, ask us to correct it, and, where the law allows, ask us to erase it or stop a use you object to. Some records must be kept for legal reasons even after you ask. You can complain to the data protection authority in your country.

Contact: support@croleo.com, subject "Privacy request".