This policy explains how galvextrader ("we") collects, handles and secures personal information when you use and the Services. We act as controller for this information.
Data we collect. Names, emails, countries and similar identity data plus KYC documents required by regulation. We also keep: transaction and trade logs, device data and helpdesk threads. For EU/UK users: contract fulfilment, legal duty, and legitimate interest.
Use of data. Running your account, clearing trades, meeting compliance, countering fraud, and securing systems, and opt-in product emails with an instant opt-out.
Sharing. Sharing is limited to running vendors (custody, payments, KYC), authorities on valid demand, and anonymised analytics. Personal data is never sold.
Retention & security. Data is kept for account activity plus statutory windows (typically five-seven years for trades). Security: AES-256 at rest plus TLS 1.3 in transit and ISO 27001-checked access limits.
Rights. Access, fixes, export, deletion and objection rights may be used by emailing [email protected]. Replies respect the legally set windows.