1. Introduction
  1. 1.1 VelcomEx ("we") are committed to safeguarding the privacy of our data-subjects ("you" or "user); in this policy we explain how your personal data, meaning any information relating to you as an identified or identifiable natural person, that we may hold about you, is collected, used, stored, disclosed, and removed (each and all referred to as "processing").
  2. 1.2. We do not collect any personally identifiable information from children under the age of 18.
  3. 1.3. If you believe that a child under the age 18 has provided us with personally identifiable information, please contact our customer support.
  4. 1.4. We may update this policy from time to time and will notify you of changes to this policy affecting your rights by email and/or by posting on our website at VelcomEx.
2. Your Personal Data and How We Use It
  1. 2.1. In this Section 2 we set out:
    - the general categories of data and types of personal data that we may process;
    - the source of that personal data;
    - the purposes for which we may process personal data; and
    - the legal bases of the processing.
  2. 2.2. We may process your personal identification information ("personal identification information"). Personal identification information may include your full name, email address, username, mobile number, country of residence, date of birth, age, nationality, gender, utility bills, photographs and/or home address. The source of the personal identification information is you. The personal identification information may be processed for the purposes of providing our services, communicating with you, protecting our users from illegal activity, maintaining legal and regulatory compliance and helping us to prevent, detect and investigate fraud, money laundering and/or other criminal activity or misuse of our service. The legal bases for this processing are: the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and the legitimate interests of ours and/or those of third-parties, namely to prevent, detect and investigate fraud, criminal activity and/or other misuse of the services. In addition to this, the processing of personal data is necessary for compliance with the legal obligation that VelcomEx is subject to, namely in order to comply with anti-money laundering and anti-terrorist financing laws.
  3. 2.3. We may process your formal identification information ("formal identification information"). Formal identification information may include your full name, nationality, date of birth, gender, social security number, tax ID number, passport details, driver’s license details and/or national identity card details. The source of the formal identification information is you. The purpose of the formal identification information is to protect our users from illegal activity, maintain legal and regulatory compliance and help us to prevent, detect and investigate fraud, money laundering and/or other criminal activity or misuse of our service. We must verify the identity of our permanent customers using our services and verify the identity of our users in certain other situations in order to comply with anti-money laundering and anti-terrorist financing laws. Moreover, processing formal identification information will help us to provide a more trustworthy, safe and reliable trading experience for our customers. Legal bases for this processing are compliance with the legal obligation that VelcomEx is subject to, namely in order to comply with anti-money laundering and anti-terrorist financing laws and the legitimate interests of ours and/or those of third-parties, namely to prevent, detect and investigate fraud, criminal activity or other misuse of the services.
  4. 2.4. We may process company information ("company information"). Company information may include information and documentation related to the name, industry, ownership, registration, country of incorporation, business address and financial information of the company. Company information may also contain personal identification information and formal identification information related to the company account holder, possible subaccount holders, beneficial owners and/or members of the board of directors of the company. The sources of the company information are the company account holder, possible subaccount holders, beneficial owners and/or members of the board of directors of the company. The company information may be processed for the purposes of providing our services, ensuring the security of our users and services, communicating with you and to protect our users from illegal activity, maintaining legal and regulatory compliance and to help us to prevent, detect and investigate fraud, money laundering and/or other criminal activity or misuse of our service. The legal bases for this processing are: the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract and the legitimate interests on our part and/or by third-parties, namely to prevent, detect and investigate fraud, criminal activity or other misuse of the services. In addition to this, the processing of personal data is necessary for compliance with a legal obligation that VelcomEx is subject to, namely in order to comply with anti-money laundering and anti-terrorist financing laws.
  5. 2.5. We may process your financial and employment information ("financial and employment information"). Financial information may include information related to your income, wealth, bank account information and/or tax identification. Employment information may include information and documentation related to your office location, job title, and/or description of role. The source of the financial and employment information is you. The financial and employment information may be processed for the purposes of protecting our users from illegal activity, maintaining legal and regulatory compliance and for helping us to prevent, detect and investigate fraud, money laundering and/or other criminal activity or misuse of our service. The legal bases for this processing are legitimate interests on our part and/or by third-parties, namely to prevent, detect and investigate fraud, criminal activity or other misuse of the services and compliance with a legal obligation that VelcomEx is subject to, namely in order to comply with anti-money laundering and anti-terrorist financing laws.
  6. 2.6. We may process data about your use of our app and services ("usage information"). Usage information is primarily non-personally-identifying information of the sort that web browsers, servers, and services like Google Analytics typically make available, such as the browser type, language preference, referring site, and the time of each visit. Other non-identifying information that we might have access to include how you use the service (e.g. search queries), your approximate location, and cookies set by our app, etc. Usage data may include: 1) Data that we collect mainly for behavior statistics, business intelligence and email campaigns ("analytics information"). We gather app traffic data with the help of Google Analytics. We gather event based tracking data with the help of Mixpanel, and this data may also contain your email address, IP address and country code. 2) Data that we collect mainly for technical, security, fraud prevention and/or for error tracking reasons ("technical information"). We gather data on app errors with the help of Sentry which may occasionally contain usage data. We also log certain events from your actions on our app. The legal bases for this processing are the legitimate interests of ours and/or by third-parties, namely to monitor service quality and improve our app and services as well as to prevent, detect and investigate fraud, criminal activity or other misuse of the services and to prevent security issues. In addition to this, the processing of personal data is necessary for compliance with a legal obligation that VelcomEx is subject to, namely in order to comply with anti-money laundering and anti-terrorist financing laws.
  7. 2.7. We may process data relating to the trades that you conduct through our app ("trade information"). The trade information may include trade ID, initiated trades, payment method, advertisement information, buyer username, seller username, trade value (in fiat), trade value (in cryptocurrency), cryptocurrency price, currency, timestamps of trade and trade chats . The source of the trade information is you and/or your trading partner. The legal bases for this processing are: the performance of a contract between you and us and compliance with a legal obligation that VelcomEx is subject to, namely in order to comply with anti-money laundering and anti-terrorist financing laws and legitimate interests of ours and/or by third-parties, namely to prevent, detect and investigate fraud, criminal activity or other misuse of the services.
  8. 2.8. We may process data relating to cryptocurrency transactions in and out of your cryptocurrency wallet ("cryptocurrency transaction information"). Information stored on received transactions may include timestamp, cryptocurrency amount, deposit address, transaction ID and other publicly available data from the cryptocurrency blockchain. Withdrawal transactions may include data such as timestamp, cryptocurrency amount, sent address, transaction ID, and description. The source of the cryptocurrency transaction information is you and/or your trading partner. The legal bases for this processing are: the performance of a contract between you and us and compliance with a legal obligation that VelcomEx is subject to, namely in order to comply with anti-money laundering and anti-terrorist financing laws and legitimate interests of ours and/or by third-parties, namely to prevent, detect and investigate fraud, criminal activity or other misuse of the services.
  9. 2.9. We may process information contained in or relating to any communication that you send to us or that you generate through the use of our service ("communication information"). Communication information includes 1) all your messages, requests and other communication with our customer support which may happen during the dispute review process or via support tickets, emails, or by means of any other communication tool; and 2) all your communication and file attachments that you generate when conducting trades with other users ("trade chat messages") or other data that you generate mainly by communicating to other users. Communication information may include, email address, username, IP address, full name, audio and video files as well as photo of the user’s personal ID, photo of the user, and photo of the user’s utility bill or related documents. The source of the communication information is you and/or your trading partner. The communication information may be processed for the purposes of communicating with you, record-keeping, in order to review and resolve disputes, serve our customers better and improve our service. The legal basis for this processing is our legitimate interests, namely the proper administration of our app and business, and compliance with a legal obligation that VelcomEx is subject to, namely in order to comply with anti-money laundering and anti-terrorist financing laws
  10. 2.10. We may process information that you provide to us for the purpose of subscribing to our email notifications, SMS notifications and/or newsletters ("notification information"). The notification information may include your email address, phone number, username and full name. The notification information may be processed for the purposes of sending you the relevant notifications and/or newsletters. The legal basis for this processing is your consent (when required by law), the performance of a contract between you and us and our legitimate interest to communicate with our customers and to perform direct marketing where allowed by law without consent. You can unsubscribe at any point by contacting us or by clicking the unsubscribe link in an email sent by us.
  11. 2.11. In connection with the activities described above, we may conduct profiling based on your interactions with and content that you provide to our service, and/or information obtained from external services. In limited cases, automated processes may restrict or suspend access to our service if such processes detect activity that we think might be illegal or pose a safety or other risk to our service, our users or third parties. We process this information given the legal obligations that VelcomEx is subject to, namely in order to comply with anti-money laundering and anti-terrorist financing laws and/or complying with other applicable laws, and due to legitimate interests in protecting our service; preventing, detecting and investigating fraud, criminal activity or other misuse of the services; optimizing the products and services offered.
  12. 2.12. We may process any of your personal data when necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or outside the court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
  13. 2.13. In addition to the categories of personal data and purposes for which we may process your personal data set out in this Section 2, we may also in certain situations require and process information that may contain personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
  14. 2.14. All the aforementioned general categories of data may contain data that by itself does not identify you and is therefore not deemed as personal data.
  15. 2.15. Please try to avoid supplying any unnecessary personal data to us.
3. Information You Choose to Display Publicly on Our Services
  1. 3.1. Some users may elect to publicly post personally identifying or sensitive information about themselves in their normal use of our services. This could occur through the use of optional profile fields, in interactions on public boards, and using our forum at VelcomEx, or if a previously private interaction is made public. Information like that, which is voluntarily posted in publicly visible parts of our services, is considered to be public, even if it would otherwise be considered to be personally identifying or sensitive. As such, it is not subject to the protocols listed in this document, because we don't control it; you do. Additionally, voluntarily publicizing such information means that you lose any privacy rights you might normally have with regards to that information. It may also increase your chances of receiving unwanted communications, like spam.
  2. 3.2. Please also remember that if you choose to provide personally identifiable information using certain public features of our services, individuals reading such information may use or disclose it to other individuals or entities without our control and without your knowledge, and search engines may index that information. We therefore urge you to think carefully about including any specific information you may deem private in content that you create or information that you submit through our services.
4. Retaining and Deleting Personal Data
  1. 4.1. This sets out our data retention and deletion policies, which are designed to help ensure that we comply with our legal obligations in relation to the user’s right to be forgotten.
  2. 4.2. Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
  3. 4.3. Users may request the deletion of their account through our app.
  4. 4.4. We will retain and delete your personal data as follows:
    - For all users who have deleted their account:
    - Personally-identifiable analytics data is removed 14 days after account deletion.
    - Notification data is not generally stored by our processors but they may retain activity logs for a short period of time (this time varies depending on the processor in question but is not greater than 13 months).
    - For users who have not conducted or initiated any trades or cryptocurrency transactions to their wallet, we will delete all personal data 14 days after the approval of your account deletion request.
    - For users who have conducted or initiated any trades or sent or received any cryptocurrency transactions using their wallet and whose account deletion request has been approved by us, our data deletion policy is the following:
    - Your public profile and advertisements will be hidden 14 days after you delete your account.
    - Your personal identification information, formal identification information, company information, financial and employment information, trade information, technical information and communication information will be deleted 5 years after you delete your account.
    - Cryptocurrency transaction information from our internal systems will be removed 5 years after you delete your account, with the exception of publicly available information on the Cryptocurrency blockchain.
  5. 4.5. In some cases it is not possible for us to specify in advance the periods for which your personal data will be retained. In such cases, we will determine the period of retention based on the period we need to access the data for the provision of services, receiving payment, resolving your customer support issue or other issues or for any other auditing or legal reasons.
  6. 4.6. Notwithstanding the other provisions of this Section, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject to, or in order to protect your vital interests or the vital interests of another natural person.
5. Your Rights
  1. 5.1. We have summarized the principal rights that you have under data protection law. Some of the rights are complex, might contain restrictions depending on the legal basis for processing the data and not all of the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
  2. 5.2. Your principal rights under data protection law are:
    (a) The right to access; You have the right to confirmation as to whether or not we process your personal data and, where we do, to access the personal data. Providing that the rights and freedoms of others are not affected, we will supply to you a copy of your personal data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee. You can view and export your personal data under your account settings page.
    (b) The right to rectification; You have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed.
    (c) The right to erasure; You have the right to the erasure of your personal data. We have described our policy for retaining and deleting personal data.
    (d) The right to object to processing; You have the right to object to our processing of your personal data on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is not that the processing is necessary for the performance of a task carried out in the public interest or in the exercise of any official authority vested in us; or for the purposes of the legal obligations arising from the anti-money laundering and anti-terrorist financing laws or due to legitimate interests of ours and/or those of third-parties . If you make such an objection, we will cease to process the personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.
    (e) The right to data portability; To the extent that the legal basis for our processing of your personal data is consent, and such processing is carried out by automated means, you have the right to receive your personal data from us in a structured, commonly used and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others.
    (f) The right to complain to a supervisory authority; If you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work or the place of the alleged infringement.
    (g) The right to withdraw consent. To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
  3. 5.3. Without prejudice to the aforementioned, if we have reasonable doubts concerning the identity of a user exercising his/her rights or if we otherwise due to security reasons deem it necessary, we may request the provision of additional information and otherwise use all reasonable measures necessary to confirm the identity of the user.
  4. 5.4. You may exercise any of your rights in relation to your personal data by contacting our customer support. Concerning "Right to erasure" users are also able to request the deletion of their account through our app.
6. Cookie Policy
  1. (a) What are cookies?
    As is common practice with almost all professional app, this app uses cookies, which are tiny files that are saved to your web browser, to improve your experience and to enable certain features, such as authentication. This page describes what information they gather, how we use it and why we sometimes need to store these cookies. We will also share how you can prevent these cookies from being stored; however this may downgrade or 'break' certain elements of the app functionality. Cookies may be either "persistent" cookies or "session" cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed. Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
  2. (b) Cookies that we use
    If you create an account with us then we will use cookies for the management of the signup process, for general administration and for preventing abuse and misuse of our services. We use cookies when you are logged in so that we can remember this fact. This prevents you from having to log in every single time you visit a new page. These cookies are typically removed or cleared when you log out to ensure that you can only access restricted features and areas when logged in. When you submit data through a form such as those found on contact pages or comment forms, cookies may be set to remember your user details for future correspondence. In order to provide you with a great experience on this app, we provide the functionality to set your preferences for how this app runs when you use it. In order to remember your preferences we need to set cookies so that this information can be called whenever you interact with a page that is affected by your preferences. We run an affiliate programme and as a part of its affiliates advertise our app and services. With the affiliate programme we use tracking cookies to track users who visit our app through one of our affiliate partner app in order to credit them appropriately, and where applicable, allow our affiliate partners to provide you any bonus for making a purchase.
  3. (c) Cookies used by our service providers
    We use Google Analytics to analyze the use of our app. Google Analytics gathers information about app use by means of cookies. The information gathered relating to our app is used to create reports about the use of our app and how we might improve your experience. These cookies may track things such as how long you spend on the app and the pages that you visit. Google's privacy policy. In addition, Cloud flare will add a security cookie to any domain or sub domain that is being proxied by our service.
7. How to Contact Us

The data controller responsible for your personal data for is VelcomEx, a company in Singapore. If you have any questions about this Privacy Policy, your rights and/or our data collection practices, please contact our customer support support@velcomex.com

Install VelcomEx App