Data Controller: Crypzai Global Technologies Ltd (UK). Registered with the Information Commissioner's Office (ICO). We never sell your personal information or wallet associations to third parties.
1. Information We Collect
To provide high-security digital asset services, we collect data across three categories:
KYC Identity Data
Government-issued photo identification, proof of address (utility bill / bank statement), full name, date of birth, and biometric facial liveness recordings.
Financial & Web3 Data
Public wallet addresses, transaction hashes, deposit/withdrawal records, bank account details for GBP Faster Payments, and node telemetry.
2. How We Use Your Data
- Fulfilling Contractual Services: Processing cryptocurrency trades, staking reward accruals, and fiat transfers.
- Regulatory Compliance: Complying with UK FCA directives, MLR 2017/2019, and international sanctions enforcement.
- Automated Fraud & Threat Prevention: Detecting device fingerprint anomalies, session hijacking, and suspicious high-frequency transfers.
3. Cryptographic Storage & Security
All customer databases are stored within ISO 27001-certified UK data centers. Personal identifiers are protected using AES-256 field-level encryption at rest and TLS 1.3 in transit.
4. Your Rights Under UK GDPR
You have the right to request:
- Access: Obtain a portable copy of the personal information we retain regarding your profile.
- Correction: Rectify inaccurate identity records or banking details.
- Erasure ("Right to be Forgotten"): Subject to statutory anti-money laundering record retention obligations (minimum 5 years under UK MLR).
- DPO Inquiries: Contact our Data Protection Officer at dpo@crypzai.uk.