Privacy Policy

1. Introduction

This Privacy Policy explains how SKVQ Exchange (“we,” “our,” or “the platform”) collects, uses, discloses, and protects your personal data when you access or use our services. This includes use of our digital asset trading platform, mobile applications, APIs, and any related tools or features (collectively, the “Services”).

We are committed to protecting your privacy and ensuring transparency in how your personal information is handled. This policy is designed to help you understand:

– What types of information we collect;

– How we use and protect that information;

– Under what circumstances we may share your information;

– Your legal rights regarding your data.

 

By using the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with any part of this policy, you should not access or use the Services.

We encourage you to read this Privacy Policy carefully and contact us through your user account support channel if you have any questions or concerns about our privacy practices.

 

 

2. Types of Information We Collect

When you use SKVQ Exchange, we may collect various types of personal and non-personal information, either directly from you or automatically through your interaction with our Services. The types of data we collect include, but are not limited to, the following:

2.1 Identity Information

We may collect details used to verify your identity, including:

– Full name

– Date of birth

– Gender

– Nationality

– Government-issued identification documents (e.g., passport, national ID, driver’s license)

– Selfie or biometric verification data (if applicable)

This information is primarily collected for know-your-customer (KYC), anti-money laundering (AML), and fraud prevention purposes.

2.2 Contact Information

We may collect:

– Mobile phone number

– Residential or billing address

– Communication preferences

– Other contact details necessary for account support or legal compliance

 

2.3 Financial and Transaction Information

We collect data related to your activity on the platform, such as:

– Deposit and withdrawal history

– Order submissions and execution records

– Trading volumes

– Account balances

– Wallet addresses used for transactions

– Linked payment methods (excluding full credit card numbers)

2.4 Technical and Usage Information

We automatically collect technical data about your interaction with our Services, including:

– IP address and device type

– Operating system and browser type

– Device identifiers (e.g., IMEI, MAC address)

– Date and time of access

– Referring URLs and session duration

– Error logs and diagnostic reports

This data helps us monitor system performance, enhance security, and optimize user experience.

2.5 Geolocation Data

Where legally permitted, we may collect approximate geolocation data derived from your IP address or mobile device settings to prevent fraud and ensure regional compliance.

2.6 User-Provided Information

You may voluntarily submit additional information to us, such as:

– Responses to surveys or questionnaires

– Feedback or inquiries through customer service

– Participation in promotions, events, or referral programs

We will only use this information in accordance with the purposes outlined in this Privacy Policy.

 

 

3. How We Use Your Information

We collect and process your personal data to operate, maintain, and improve the SKVQ platform and to provide a secure and compliant environment for digital asset trading. Your data may be used for the following purposes:

3.1 Account Creation and Management

We use your identity and contact information to:

– Register and verify your user account

– Authenticate access to your account

– Enforce account-level security features such as two-factor authentication

– Maintain accurate and current user records

3.2 Transaction Execution and Processing

Your financial and transactional data are used to:

– Process deposits, withdrawals, and internal transfers

– Execute buy and sell orders submitted on the platform

– Generate and store transaction receipts and trade confirmations

– Maintain internal audit trails and transaction histories

3.3 Legal and Regulatory Compliance

We process your information to comply with applicable laws, including:

– Know-your-customer (KYC) and anti-money laundering (AML) obligations

– Tax reporting and financial disclosures as required by law

– Requests from authorized government or regulatory agencies

– Prevention of illegal activity, including fraud, terrorist financing, and sanctions violations

3.4 Security and Risk Management

We use your data to:

– Detect and prevent suspicious or unauthorized activity

– Monitor for fraud, phishing, and system abuse

– Maintain the overall integrity and availability of our services

– Enforce our terms of use and other platform policies

3.5 Customer Support and Communication

Your contact and account data may be used to:

– Respond to your inquiries and support tickets

– Provide technical assistance and resolve issues

– Send you service-related notifications, including changes to policies or system status

– Deliver account alerts and transaction confirmations

3.6 Service Improvement and Personalization

We analyze aggregated and anonymized data to:

– Enhance user experience and platform functionality

– Develop new features or services

– Personalize the user interface based on your preferences or trading behavior

– Improve the relevance of educational content, promotions, or platform notifications

3.7 Marketing and Promotional Activities (Optional)

If you have provided consent, we may use your data to:

– Send newsletters, product announcements, or promotional offers

– Invite you to participate in contests, referral programs, or user surveys

– Conduct customer satisfaction research and performance analytics

You may opt out of receiving promotional communications at any time through your account settings.

We will not use your personal data for purposes that are incompatible with this Privacy Policy or that violate applicable data protection laws.

 

 

4. Legal Basis for Processing

We process your personal data only when there is a lawful basis for doing so under applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant regulations. Depending on your jurisdiction and the specific context in which we process your data, one or more of the following legal grounds may apply:

4.1 Consent

We may process your personal data when you have given us your clear and informed consent to do so. This includes:

Opting in to receive marketing communications

Participating in surveys, promotions, or referral programs

Enabling optional features that require access to specific types of data

You may withdraw your consent at any time, where applicable, without affecting the lawfulness of processing carried out prior to your withdrawal.

4.2 Performance of a Contract

Processing is necessary to fulfill our contractual obligations to you or to take steps at your request prior to entering into a contract. This includes:

Creating and managing your account

Executing trades and processing withdrawals

Providing customer support and platform access

Without this data, we may not be able to offer the Services or meet our obligations to you.

4.3 Compliance with Legal Obligations

We may process your data to comply with applicable legal and regulatory requirements. This includes:

Verifying your identity to meet KYC/AML regulations

Responding to requests from courts, law enforcement, or regulatory bodies

Maintaining records for tax, audit, and financial reporting obligations

Such processing is mandatory under applicable laws and may override certain individual rights.

4.4 Legitimate Interests

We may process your data where it is necessary for our legitimate business interests, provided that such interests are not overridden by your rights and freedoms. Examples include:

Enhancing platform security and detecting fraud

Conducting internal analytics to improve service quality

Providing a better user experience through personalization

Ensuring business continuity and platform stability

Where required, we balance our legitimate interests with your privacy rights before proceeding with such processing.

4.5 Protection of Vital Interests

In rare cases, we may process your data to protect your vital interests or those of another person. This may include emergency response or security incidents where immediate action is required.

 

 

5. Information Sharing and Disclosure

We treat your personal data with the utmost confidentiality and only share it with third parties when there is a lawful, contractual, or operational necessity. We do not sell or rent your personal data to third parties for marketing purposes. The following outlines the circumstances under which your data may be shared:

5.1 Service Providers and Partners

We may share your information with trusted third-party service providers who assist us in delivering our Services. These entities perform tasks on our behalf, such as:

Identity and document verification

Payment processing and banking integrations

Cloud storage and infrastructure hosting

Customer support platforms and communication tools

Data analytics and performance monitoring

Security auditing and compliance consulting

All service providers are contractually obligated to safeguard your information, use it solely for authorized purposes, and comply with relevant data protection regulations.

5.2 Regulatory and Legal Disclosures

We may disclose your personal data to law enforcement authorities, government agencies, or other regulatory bodies when required to:

Comply with legal obligations or regulatory requirements

Respond to subpoenas, court orders, or legal investigations

Prevent fraud, money laundering, or other unlawful activities

Enforce our platform terms and protect our rights or the rights of others

We carefully evaluate each request to ensure that disclosure is legally justified and limited to what is necessary.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, financing, or sale of assets, your data may be transferred as part of that transaction. We will take reasonable steps to ensure the continued protection of your data and notify affected users in accordance with applicable laws.

5.4 Consent-Based Sharing

We may share your personal data with third parties when you have explicitly provided your consent. This may apply to:

Participation in partner campaigns or co-branded programs

Access to optional features or integrated third-party services

Community engagements, forums, or promotional activities

You have the right to revoke such consent at any time through your account preferences.

5.5 Aggregated and Anonymized Data

We may generate and share aggregated or anonymized data that does not identify you personally. This data may be used for:

Research and statistical reporting

Industry benchmarking

Platform usage analysis

Development of new features or services

Such data is not subject to the same restrictions as personal data under this Privacy Policy.

 

6. Data Retention

We retain your personal data only for as long as it is necessary to fulfill the purposes for which it was collected and to meet our legal, regulatory, contractual, and operational obligations. The specific retention periods may vary depending on the type of data and the context of its processing.

6.1 Retention for Regulatory and Legal Compliance

We retain certain personal data to comply with financial regulations, anti-money laundering (AML) obligations, tax reporting requirements, and other applicable laws. This includes:

Identity verification records

Transaction logs and order histories

Account statements and audit trails

These records may be retained for a minimum of five to ten years, or longer where required by law or regulatory authorities.

6.2 Operational and Security Purposes

We may retain data related to system activity, login records, device usage, and security incidents for the purpose of:

Monitoring platform integrity

Preventing fraud or unauthorized access

Investigating system errors or abuse

Ensuring business continuity and audit readiness

This type of data is retained only for the duration necessary to serve its intended purpose, in line with internal policies.

6.3 User-Provided and Voluntary Information

Data submitted through surveys, feedback forms, or customer service interactions may be retained as long as it remains relevant to service improvement or issue resolution. Once the information is no longer needed, it is securely deleted or anonymized.

6.4 Data Deletion and Anonymization

When personal data is no longer needed, we take appropriate steps to:

Permanently delete the data from our systems

Anonymize the data so it can no longer be linked to an individual

Remove backups of the data within a reasonable timeframe

We may retain anonymized or aggregated data for research, analytics, or platform development purposes without further notice to you.

6.5 User-Initiated Account Closure

If you choose to close your account, we will deactivate it and archive related personal data in accordance with applicable retention obligations. Certain data may be retained beyond account closure to:

Comply with legal duties

Resolve disputes

Enforce our agreements

Detect and prevent fraudulent activities

Where feasible, data that no longer requires identification will be anonymized.

 

 

7. Data Security

We are committed to safeguarding the confidentiality, integrity, and availability of your personal data. To achieve this, SKVQ Exchange implements a comprehensive data security framework that includes a combination of administrative, technical, and physical controls.

7.1 Technical Safeguards

We utilize industry-standard technologies and best practices to protect your information from unauthorized access, loss, misuse, or alteration. These include:

Encryption of data both in transit and at rest using modern cryptographic protocols

Secure socket layer (SSL) technology to protect data during transmission

Firewall protection and intrusion detection systems

Multi-signature wallet architecture for digital asset custody

Secure backup procedures and off-site storage systems

7.2 Access Controls

We maintain strict internal access protocols to ensure that only authorized personnel have access to personal data. This includes:

Role-based access control (RBAC) systems

Multi-factor authentication (MFA) for administrator accounts

Audit logging of data access and administrative actions

Segregation of duties and principle of least privilege

Personnel are granted access to user data only when necessary to perform specific job functions and are bound by strict confidentiality obligations.

7.3 Organizational Measures

We have implemented the following organizational policies and procedures:

Employee training programs focused on privacy, data protection, and cybersecurity awareness

Regular internal audits and third-party security assessments

Incident response protocols for managing and containing data breaches

Ongoing monitoring of systems for abnormal activity or threats

These measures are continuously reviewed and updated to reflect changes in technology, legal requirements, and emerging threats.

7.4 User Responsibility

While we take significant steps to protect your data, security is a shared responsibility. Users are encouraged to:

Choose strong, unique passwords and update them regularly

Enable two-factor authentication (2FA) on their accounts

Monitor account activity and report suspicious behavior promptly

Avoid sharing login credentials with third parties

We are not responsible for any unauthorized access resulting from user negligence or failure to follow security best practices.

7.5 No Guarantee

Despite our best efforts, no method of transmission or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security and encourage you to remain vigilant when using digital platforms.

 

 

8. Your Rights

Depending on your jurisdiction, you may have certain rights under applicable data protection laws regarding the personal data we collect and process. SKVQ Exchange is committed to enabling you to exercise these rights in a fair, transparent, and timely manner.

8.1 Right to Access

You have the right to request confirmation as to whether we process your personal data and, if so, to obtain a copy of that data along with information about:

The categories of data we hold

The purposes of processing

The categories of third parties with whom your data is shared

The retention period or criteria used to determine it

Your related rights under applicable law

8.2 Right to Rectification

You may request correction of inaccurate or incomplete personal data. We will verify the accuracy of the requested changes and update your records accordingly.

8.3 Right to Erasure

You may request deletion of your personal data in the following circumstances:

The data is no longer necessary for the purposes for which it was collected

You have withdrawn consent (where processing was based on consent)

You object to the processing and there are no overriding legitimate grounds

The data was unlawfully processed or must be erased to comply with a legal obligation

This right may be limited where data must be retained for legal, regulatory, or security purposes.

8.4 Right to Restriction of Processing

You may request that we temporarily suspend processing of your personal data under specific circumstances, such as:

You contest the accuracy of the data

The processing is unlawful but you oppose erasure

You have objected to processing pending verification of overriding grounds

During the restriction period, we will store your data but not use or disclose it unless required by law or with your consent.

8.5 Right to Data Portability

Where processing is based on your consent or a contract and carried out by automated means, you have the right to request a copy of your data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

8.6 Right to Object

You may object to processing of your personal data where it is based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests or if processing is required by law.

8.7 Right to Withdraw Consent

If processing is based on your consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing prior to the withdrawal.

8.8 How to Exercise Your Rights

To exercise your rights, you may submit a request through the account interface or contact our support team through the secure internal messaging system. We will respond within the timeframes required by applicable law and may request verification of your identity before proceeding.

We reserve the right to refuse manifestly unfounded or excessive requests in accordance with legal standards.

 

9. International Data Transfers

As a globally operated platform, SKVQ Exchange may transfer, store, and process your personal data in countries outside of your country of residence. These transfers may be necessary to deliver our Services, operate our infrastructure, or comply with legal and regulatory obligations in multiple jurisdictions.

9.1 Scope of Transfers

Your data may be transferred to:

Cloud hosting providers or data centers located in other countries

International service providers performing identity verification, fraud prevention, customer support, or technical operations

Regulatory authorities or financial institutions located in jurisdictions where transactions or users are active

These countries may have different levels of data protection compared to your home country, and their laws may not offer the same level of privacy protections.

9.2 Safeguards for International Transfers

Whenever your personal data is transferred internationally, we take appropriate steps to ensure that it remains protected in accordance with this Privacy Policy and applicable laws. These safeguards may include:

Implementing Standard Contractual Clauses (SCCs) approved by regulatory authorities

Transferring data only to countries recognized as having adequate levels of data protection by relevant legal bodies

Ensuring that service providers are contractually bound to protect data through Data Processing Agreements (DPAs)

Conducting risk assessments to evaluate the legal environment of the destination country

 

9.3 User Consent and Acknowledgment

By using the Services, you acknowledge and consent to the transfer of your data to jurisdictions that may differ from your own in terms of data protection standards. Where required by law, we will seek your explicit consent before transferring your data to a third country.

You may request further information about the safeguards applicable to international data transfers by submitting a formal request through your account.

 

 

10. Changes to This Policy

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform functionality. All changes will become effective upon publication unless otherwise specified.

10.1 Notification of Changes

When changes are made to this Policy, we will update the “Effective Date” at the top of the document. In cases where modifications are material or affect your rights and obligations significantly, we will provide advance notice using one or more of the following methods:

In-app notifications or system alerts

Prominent notices on our website or platform interface

Direct communication via the internal messaging system

We encourage you to review this Policy regularly to stay informed about how we protect your data.

10.2 Continued Use

Your continued access to or use of the Services after the revised Privacy Policy has been posted constitutes your acknowledgment and acceptance of the updated terms. If you do not agree with any modifications, you must discontinue use of the Services and may request account closure, subject to applicable retention obligations.

10.3 Historical Versions

Archived versions of previous privacy policies may be made available upon request to help you understand how your data was handled at a specific time.