1. Introduction

Crypto World Market Ltd ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cryptocurrency trading platform. We are registered in the United Kingdom (Company Number: CR254886) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect the following types of information:

2.1 Personal Information

• Full name and date of birth
• Email address and phone number
• Residential address
• Government-issued identification documents (passport, driver's license, national ID)
• Bank account details for deposits and withdrawals
• Photographs and selfies for identity verification

2.2 Financial Information

• Transaction history and trading activity
• Wallet balances and cryptocurrency holdings
• Deposit and withdrawal records
• Bank transfer receipts

2.3 Technical Information

• IP address and device information
• Browser type and version
• Operating system
• Login timestamps and session data
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information for the following purposes:

• To verify your identity and comply with KYC/AML regulations
• To process deposits, withdrawals, and cryptocurrency trades
• To maintain and secure your account
• To send transaction confirmations and account notifications
• To detect and prevent fraud, money laundering, and other illegal activities
• To improve our services and user experience
• To comply with legal obligations and regulatory requirements
• To respond to customer support inquiries

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Contract Performance: Processing necessary to provide our services
• Legal Obligation: Compliance with KYC/AML and financial regulations
• Legitimate Interests: Fraud prevention and service improvement
• Consent: Marketing communications (where applicable)

5. Information Sharing and Disclosure

We may share your information with:

• Regulatory Authorities: FCA, HMRC, and other government agencies as required by law
• Service Providers: Third-party vendors who assist with KYC verification, payment processing, and IT services
• Legal Requirements: Law enforcement or courts when legally obligated
• Business Transfers: In the event of a merger, acquisition, or sale of assets

We do not sell your personal information to third parties for marketing purposes.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest
• Two-factor authentication (2FA) for account access
• Regular security audits and vulnerability assessments
• Restricted access to personal data on a need-to-know basis
• Secure data centers with physical and digital safeguards

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal and regulatory obligations (minimum 5 years for financial records)
• Resolve disputes and enforce our agreements

After the retention period expires, we will securely delete or anonymize your data.

8. Your Rights

Under UK GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing communications

To exercise these rights, please contact us at [email protected].

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and improve our services. You can control cookie preferences through your browser settings. For more information, please see our Cookie Policy.

10. International Data Transfers

Your data is primarily stored and processed in the United Kingdom. If we transfer data outside the UK, we ensure adequate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or platform notification. The "Last updated" date at the top indicates when the policy was last revised.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority, at ico.org.uk.