Token Tact Privacy Policy

1. Data Controller

The data controller for personal data processed by Token Tact is Token Tact Ltd, reachable at [email protected]. For data protection enquiries in your jurisdiction, please contact your local data protection authority.

2. Data We Collect

When you use Token Tact, we may collect and process the following categories of personal data:

• Registration data: name, email address and phone number provided at sign-up.
• Identity verification data: government-issued ID documents required for regulatory compliance and KYC/AML obligations.
• Financial data: payment methods, transaction history, wallet balances and portfolio information.
• Technical data: IP address, browser type, pages visited, session duration and device information collected automatically when you use the platform.
• Communication data: content of communications with our customer support team via chat, email or phone.

3. Legal Basis and Purposes of Processing

We process your personal data on the following legal bases:

• Contract performance: provision of trading services, account management, processing of deposits and withdrawals.
• Legal obligation: KYC/AML compliance, regulatory reporting, tax record-keeping as required by applicable law.
• Legitimate interest: fraud prevention, platform security, service improvement and marketing of similar products to existing customers.
• Consent: marketing communications and optional analytics (you may withdraw consent at any time).

4. How We Use Your Data

Your data is used to: create and manage your Token Tact account; verify your identity and comply with anti-money laundering regulations; process your deposits, trades and withdrawals; provide customer support; detect and prevent fraud and security incidents; improve and develop our services; and, where you have given consent, send you relevant marketing communications about Token Tact products.

5. Data Sharing

We do not sell your personal data to third parties. We may share your data with: payment processors and financial institutions necessary to process your transactions; identity verification providers for KYC/AML compliance; cybersecurity providers and auditors under confidentiality obligations; and regulatory authorities when required by law. All third-party processors are contractually bound to handle your data in accordance with GDPR and equivalent applicable data protection laws.

6. Data Retention

We retain your personal data for as long as your account is active and for a minimum of 5 years after account closure, as required by applicable financial regulations. Transaction records are retained for the period required by the tax and financial authorities of applicable jurisdictions.

7. Your Rights

Under GDPR and equivalent applicable data protection laws, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data (subject to legal retention requirements); object to processing based on legitimate interests; request restriction of processing; data portability; and lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at [email protected].

8. Security

Token Tact implements technical and organisational security measures including AES-256 encryption of data at rest and in transit, mandatory 2FA, role-based access controls for staff, and regular independent security audits. Despite these measures, no system is completely immune to security incidents and we cannot guarantee absolute security.

9. Cookies

Token Tact uses cookies to maintain your session, remember your preferences, and measure platform performance. You can manage your cookie preferences through your browser settings or our Cookie Policy page. Strictly necessary cookies (required for platform functionality) cannot be disabled.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email and by a prominent notice on the platform. The date of the latest revision is shown at the top of this page.

11. Contact

For privacy-related enquiries: [email protected]