Privacy Policy

1. Information We Collect

We may collect the following categories of information when you interact with Crystaliris:

• Account information — name, email address, postal address, phone number, date of birth, and identity verification details provided during registration.
• Financial information — bank account details, payment card information, and transaction history related to your use of our services.
• Technical information — IP address, browser type, device identifiers, operating system, and referring URLs collected automatically through cookies and similar technologies.
• Usage information — pages visited, features used, time spent on the platform, and interaction patterns within our services.
• Communications — records of correspondence when you contact our support team or respond to surveys.

2. How We Use Your Information

We use the information we collect to:

• Create, maintain, and secure your account;
• Verify your identity and comply with applicable legal and regulatory obligations;
• Process transactions and provide the core features of our platform;
• Communicate with you about your account, updates, or support requests;
• Monitor, analyse, and improve the performance and security of our services;
• Detect, investigate, and prevent fraudulent or unauthorised activity;
• Send marketing communications where you have consented to receive them.

3. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing personal data, we rely on one or more of the following: performance of a contract with you, compliance with a legal obligation, our legitimate interests in operating and improving our services, and your consent where it has been given. You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

4. Sharing of Information

We do not sell your personal information. We may share information with:

• Service providers who perform functions on our behalf, such as identity verification, payment processing, hosting, and customer support;
• Regulatory and legal authorities where required to comply with applicable law, regulation, or legal process;
• Professional advisers, including auditors, lawyers, and insurers, where necessary;
• Business transfer recipients, in connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website, remember your preferences, and understand how our services are used. You can control cookies through your browser settings; however, disabling certain cookies may affect the functionality of our website. For more detail on the categories of cookies we use, please contact us using the details on our Contact page.

6. Data Retention

We retain personal information for as long as necessary to fulfil the purposes outlined in this policy, including to satisfy any legal, accounting, or regulatory record-keeping requirements. When information is no longer required, we take reasonable steps to securely delete or anonymise it.

7. Data Security

We implement reasonable technical and organisational measures designed to protect personal information from unauthorised access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security of information transmitted through our services.

8. International Transfers

Your information may be transferred to, and processed in, locations outside your country of residence. Where we transfer personal information internationally, we aim to ensure appropriate safeguards are in place consistent with applicable data protection requirements.

9. Your Rights

Depending on applicable law, you may have the right to:

• Access a copy of the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal information, subject to legal retention obligations;
• Object to or restrict certain processing activities;
• Request a portable copy of your information in a structured, machine-readable format;
• Lodge a complaint with a relevant data protection authority.

To exercise any of these rights, please contact us using the details provided on our Contact page.

10. Children's Privacy

Our services are not directed at individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so that we can take appropriate action.

11. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties, and we encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal and regulatory reasons. We will post the updated version on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your personal information, please reach out via our Contact page.