Privacy Policy
1. Objective
The B2Hive Ltd. establishes this Privacy Policy to detail how we collect, process, and protect the personal data of clients using our website and services. This policy ensures transparency, compliance with data protection laws, and strict measures to safeguard client privacy, particularly for traders and clients, against unauthorized data use or breaches.
2. Data We Collect
We collect and process the following types of personal data:
- Identity Data: Name, date of birth, gender, passport/ID/driver’s license details, and photo.
- Contact Data: Billing address, email, phone numbers.
- Financial Data: Bank account, payment card details, tax identification numbers.
- Transaction Data: Details of deposits, withdrawals, trades, profits, and balances.
- Technical Data: IP address, browser type, operating system, cookies, and device information.
- Profile Data: Account details, username, password, preferences, and feedback.
- Usage Data: Website interaction, registration date, account activity, and IP history.
- Marketing Data: Preferences for receiving marketing and communications.
- Sensitive Data: Religious beliefs, income, biometric data, criminal history.
- Compliance Data: Education, employment status, trading experience.
- Banking Data: Payment wallet details, card information (number, holder, expiry, CVV).
- KYC Data: Identity documents, utility bills, passport, or driver’s license.
- Economic Profile Data: Occupation, investment goals, income, net worth, sources of funds.
- Location Data: Regional settings, country, time zone, interface language.
- Audio Data: Call recordings with the Company.
3. How We Collect Data
- Direct Interactions: Data provided when registering accounts, subscribing to updates, requesting marketing, participating in promotions, or contacting support.
- Automated Technologies: Data collected via cookies, device setting microdata to optimize website performance and monitor usage. Clients can opt out of non-essential data collection by contacting support ([email protected]).
- Aggregated Data: Statistical data derived from personal data but anonymized, used for analytics (e.g., percentage of users accessing features).
4. Purposes and Legal Basis
We process personal data for:
- Contract Execution: Registering clients, providing services, processing transactions, and managing accounts.
- Legal Obligations: Complying with anti-money laundering, fraud prevention, and other regulatory requirements.
- Legitimate Interests: Improving services, protecting business operations, preventing fraud, and offering personalized content.
- Consent: For marketing, data sharing with third parties, or optional data processing.
Data is processed lawfully, transparently, and minimally, ensuring accuracy, integrity, and confidentiality.
5. Actions Against Non-Compliance
If a client violates this policy or engages in suspicious activities, the Company:
- Will suspend accounts for providing false or incomplete data, requiring correction within 5 business days.
- Will block accounts and report to authorities for suspected fraud, money laundering, or unauthorized data access.
- Will restrict services for clients failing to update changed personal data within 7 days.
- Will terminate accounts of clients under 18 or misrepresenting their identity.
- Will remove marketing access for clients misusing data or violating consent preferences.
6. Data Sharing
- Internal: Data is processed by authorized employees or trusted affiliates on a need-to-know basis.
- Third Parties: May include IT providers, payment processors, analytics, or legal authorities. All third parties are bound by confidentiality agreements.
- Safeguards: We ensure all third parties comply with GDPR/local laws via NDAs and secure handling protocols.
7. Data Retention
- Duration: Data is stored for 7 years post-contract. Other data is retained for 30 business days unless legally required otherwise.
- Deletion: Data is securely destroyed after retention; third parties are informed.
8. Client Rights
Clients have the following rights under applicable data protection laws:
- Access: Request a copy of their personal data.
- Rectification: Correct inaccurate or incomplete data.
- Deletion: Request account deletion (with limitations).
- Restriction: Limit data use in specific cases.
- Portability: Receive data in a machine-readable format.
- Objection: Object to data use based on legitimate interest.
- Consent Withdrawal: Withdraw marketing/data sharing consent.
- Complaint: File with data protection authority.
To exercise these rights, contact [email protected] using your registered email. Responses are provided within 30 days (extendable).
9. Data Security
- Measures: Encryption, pseudonymization, secure servers, access controls.
- Client Responsibility: Secure usernames/passwords; report unauthorized access.
- Breach Response: Immediate investigation and client notification if needed.
10. Contact Details
For questions or to exercise rights, contact:
Email: [email protected]
11. Policy Updates
We may update this policy. Changes are published on the website and take effect immediately.
12. Client Consent
By using our services, clients accept this policy and the Company’s data protection practices.