Privacy notice
How personal information would be handled
Information that may be collected
A future service could collect contact details, identity-verification records, application information, transaction instructions and security logs. The exact categories must be documented before any live collection begins.
Why information is used
Proposed purposes include responding to enquiries, administering client accounts, security monitoring, onboarding and compliance with applicable obligations. The lawful basis will depend on the jurisdiction and service.
Sharing and service providers
Potential recipients may include appointed custody providers, identity verification services, regulated counterparties and technical infrastructure providers. A verified vendor list and transfer safeguards must be completed before launch.
Retention, rights and contact
Retention periods, data subject rights, controller identity, contact address and any international transfers require approval before this draft can become an operative privacy notice.