NEW
Log in

Privacy policy

Draft. Requires legal review (GDPR and the data protection law of the operator's country of registration).

1. Who processes data

Data controller — [SPECIFY legal entity and address], site draxma.io. Data contact: [email protected] (placeholder).

2. Data we collect

  • contacts: email, optionally Telegram;
  • payment details: card number, IBAN, wallet address;
  • KYC documents — only if verification was required;
  • technical data: IP address, browser fingerprint, login log;
  • support correspondence, payment receipts.

3. Purposes and legal bases

  • performing the exchange and support — contract (Exchange rules);
  • AML/KYC checks — legal obligation;
  • fraud prevention and account security — legitimate interest;
  • news and promotions — only with your consent; unsubscribe from any email.

4. Who we share with

Only those without whom the exchange is impossible: payment partners and banks, the AML screening provider [SPECIFY], the email service [SPECIFY], hosting [SPECIFY]. Public authorities — only on a lawful request. We do not sell personal data.

5. Retention

Order and KYC data — [SPECIFY, e.g. 5 years] (AML requirement); technical logs — [SPECIFY, e.g. 12 months]; marketing consent — until withdrawn.

6. Your rights

Access, rectification, erasure (except data we must keep by law), restriction, portability, objection, withdrawal of consent, complaint to the supervisory authority [SPECIFY]. Write to [email protected].

7. Cookies

See the Cookie policy.

8. Security

Encrypted connection (TLS), encryption of sensitive fields, two-factor login for staff, audit log of data access.