Privacy Policy

Last updated: 24 June 2026

This Privacy Policy explains how personal data is collected, used, stored, shared, and protected when you visit this website and use the services offered through it.

The services covered by this Privacy Policy include crypto payment processing, onboarding, transaction handling, fraud prevention, operational support, and related platform functions.

By accessing or using the website and services, you confirm that you have read and understood this Privacy Policy. If you do not agree with it, you must stop using the website and services.

1. Definitions

Personal Data means any information relating to an identified or identifiable natural person.
Processing means any operation carried out on personal data, including collection, storage, use, disclosure, transfer, restriction, or deletion.
User means any person who visits the website, submits information, creates an account, or uses the services.
Services means crypto payment processing, transaction routing, onboarding, verification, customer support, fraud monitoring, and related operational services.
Service Provider means any third party engaged to provide infrastructure, identity verification, payment support, compliance tools, analytics, hosting, or other operational assistance.
Applicable Law means any laws, regulations, regulatory requirements, or binding rules that apply to privacy, payments, financial crime prevention, sanctions, and data security.

2. Principles of Data Processing

Personal data is processed lawfully, fairly, and proportionately, and only where there is a valid legal basis for doing so.

Personal data is:

collected for specific and legitimate purposes
limited to what is necessary for those purposes
kept accurate and up to date where required
retained only for as long as necessary or legally required
protected by appropriate technical and organisational safeguards

The services are not intended for persons under 18 years of age. If it comes to light that personal data relating to a minor has been collected, it may be deleted unless retention is required by law.

3. Categories of Data Processed

Depending on the services used, the following categories of personal data may be processed:

identity information, such as full name, date of birth, nationality, and tax residency
verification documents, such as passport or ID details, proof of address, selfies, biometric data, and source-of-funds documentation
contact information, such as email address, phone number, messaging details, and residential address
account and authentication data, such as login credentials, account identifiers, and security settings
transaction and payment data, including wallet information, blockchain transaction details, payment references, amounts, counterparties, and settlement records
financial and background information, including payment methods, bank details where applicable, business information, and compliance-related disclosures
compliance screening data, such as sanctions checks, politically exposed person checks, adverse media results, and fraud indicators
communication records, including support messages, emails, chats, call notes, and complaint records
technical and device data, such as IP address, browser type, operating system, device identifiers, and usage logs
cookie, analytics, and website usage data
other information you voluntarily submit through forms, support requests, or communications

4. Legal Bases for Processing

Personal data may be processed on one or more of the following legal grounds:

Contractual necessity - where processing is needed to provide services, create or manage an account, process transactions, or respond to user requests.
Legal obligation - where processing is needed to comply with KYC, AML, sanctions, fraud prevention, reporting, recordkeeping, or other applicable legal requirements.
Legitimate interests - where processing is reasonably needed for security, service improvement, fraud detection, business operations, analytics, or dispute management, provided such interests are not overridden by user rights.
Consent - where consent is required by law, including for certain cookies, analytics tools, or marketing communications.

5. Purposes of Processing

Personal data may be processed for the following purposes:

onboarding users and creating accounts
performing identity verification and KYC / AML checks
processing and routing crypto payments
supporting transaction monitoring, fraud detection, and security controls
providing customer support and managing service requests
sending service-related notices and operational updates
maintaining records for audit, legal, regulatory, and compliance purposes
improving website functionality, system reliability, and service performance
handling disputes, complaints, refunds, reversals, or misuse investigations
enforcing legal rights, policies, and contractual terms
complying with sanctions, prohibited-jurisdiction restrictions, and financial crime prevention requirements
sending marketing communications where permitted by law or where consent has been given

6. Sharing of Personal Data

Personal data may be disclosed to third parties where necessary to operate the services or comply with applicable law.

Recipients may include:

identity verification and KYC / AML screening providers
payment processors, blockchain analytics providers, and settlement partners
hosting, cloud, infrastructure, and security providers
customer support and communications platforms
analytics and fraud prevention providers
professional advisers, auditors, insurers, and legal counsel
regulators, supervisory authorities, law enforcement, tax authorities, or courts where required or permitted by law
parties involved in a merger, acquisition, restructuring, or sale of business assets, subject to appropriate safeguards

Personal data is not sold.

Where third parties process personal data on our behalf, they are required to act only on authorised instructions and to apply appropriate confidentiality and security measures.

7. Cookies and Tracking Technologies

The website may use cookies and similar technologies to support security, improve functionality, analyse usage, and, where permitted, deliver relevant content or measure performance.

Cookies are used in accordance with this Privacy Policy. You can manage or disable cookies through your browser settings, though some website features may not function correctly as a result.

8. Data Retention

Personal data is kept only for as long as necessary for the purposes for which it was collected, including to meet legal, regulatory, tax, accounting, fraud prevention, dispute resolution, and operational requirements.

Retention periods may vary by the type of data and the reason for processing. Data may be kept longer where required by law, where needed to establish or defend legal claims, or where needed for compliance and security purposes.

Once retention is no longer necessary, personal data is securely deleted, anonymised, or irreversibly de-identified where appropriate.

9. Data Security

Appropriate technical and organisational measures are in place to protect personal data against unauthorised access, disclosure, alteration, destruction, or loss.

These measures may include:

encryption in transit and, where appropriate, at rest
access controls and role-based permissions
authentication and account protection measures
logging, monitoring, and incident response procedures
vendor due diligence and contractual security requirements
backup, disaster recovery, and business continuity measures

No system can be guaranteed fully secure, but reasonable steps are taken to reduce risks and respond to incidents appropriately.

10. International Transfers

Personal data may be transferred to, stored in, or accessed from countries outside the user’s country of residence where this is necessary for service delivery, infrastructure, compliance, fraud prevention, support, or operational continuity.

Where cross-border transfers take place, reasonable safeguards are applied to protect personal data in line with applicable law.

11. User Rights

Subject to applicable law, users may have the right to:

request access to their personal data
request correction of inaccurate or incomplete data
request deletion of data where lawful and applicable
request restriction of processing in certain cases
object to certain processing activities
withdraw consent where processing is based on consent
lodge a complaint with a competent authority

These rights may be limited where data must be retained for legal, regulatory, fraud prevention, security, or dispute-related reasons.

12. Automated Processing

Automated tools may be used for fraud prevention, transaction monitoring, sanctions screening, risk scoring, or service optimisation.

Where required by law, appropriate safeguards and human review procedures are applied.

13. Third-Party Websites and Services

The website or services may contain links to third-party websites, tools, or integrations.

Those third parties operate independently and are responsible for their own privacy practices. Users should review their privacy policies before providing any personal data.

14. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in the services, legal requirements, or operational practices.

The latest version will be made available on the website. Continued use of the services after an update may constitute acceptance of the revised Privacy Policy, where permitted by law.

15. Contact and Complaints

If you have questions, requests, or complaints about this Privacy Policy or the processing of personal data, you may contact us at info@vianova-solutions.com or through any official support channel made available to users.