Privacy Policy

To provide You with Our services We need (and sometimes are obliged by the law) to collect Your personal data. This Privacy Policy (the "Policy") informs Users (a "User", "You") of our policies regarding the processing of Personal Information we receive from Users of the hitbtc.com (the "Technology Platform", "Us", "We", or "Our"). The Policy applies to the Technology Platform and all services offered by HitBTC.

1. What Kind of Personal Information We Collect

1.1. While providing Our services We may collect the "Personal Information" which is defined as any information that identifies or can be used to identify, contact, or locate the person to whom such information pertains. Namely, we may collect:

1.1.1. Identity information: name, facial image, social security number, ID number, documents proving your identity and any other information they may contain;

1.1.2. Residential information: IP address, residence address, documents proving your residency and any other information they may contain;

1.1.3. Contact information: email address, mailing address, phone number;

1.1.4. Security information: alias, passwords;

1.1.5. Financial and billing information: number of bank accounts and names of banking institutions, identifiers in payment systems or other means of payment, information on your balance accounts, your trade history, incoming and outgoing wallet addresses;

1.1.6. Cookies: to know more about cookies please acquaint yourself with Our Cookie Policy;

1.1.6. Your mobile devices You use with the Technology Platform may provide some information that may potentially identify You, such as the type (including identifiers) of the device, platform type, mobile phone number, Your internet service, operating system, geolocation information, browser You use, browser language, or the pages You visit, etc.;

1.1.7. The Technology Platform may collect some of Your behavior information, such as Your visiting the Technology Platform, clicking on ads or other similar information. Such information may be received with additional related data (or metadata), such as the time, date, and location related to such information;

1.1.8. Sometimes you decide to share with us some other Personal Information and we may collect it as well.

1.2. We do not collect any information that may identify You without your permission. However, We use Google Analytics on Our Technology Platform. If You want to know more about Google Analytics and its "do not track" policy, please visit https://www.google.com/analytics/terms/us.html

2. How We Use Your Personal Information

2.1. We, our authorized partners and our representatives store and use Your Personal Information only for providing and improving the Technology Platform. In particular, we use Users' Personal Information for the following purposes:

2.1.1. To provide you the Services: We may use information to execute your transaction requests and trade orders;

2.1.2. To comply with the our legal obligations: In many jurisdictions we are obliged to collect certain information about our Users to be authorized to act (Know Your Client and Anti-Money Laundering regulations);

2.1.3. To protect your assets: We may use information to identify you and the assets belonging to you in order to secure access to your accounts and to prevent the fraud;

2.1.4. To improve customer service: information provided by Users helps Us respond to customer service requests and support needs more efficiently;

2.1.5. To personalize User experience: We may use information in a general manner to understand how Our Users as a group use the services and resources provided on Our Technology Platform;

2.1.6. To improve Our Technology Platform: We may use the feedback provided by Users to improve Our products and services;

2.1.7. To maintain Our Technology Platform: We may use the information Users provide about themselves when receiving transaction request only to provide service to that request;

2.1.8. To send periodic emails: We may use the email address to send information and updates pertaining to Your use of the transaction request;

2.1.9. To resolve disputes and enforce our agreements to the extent necessary and sufficient for protecting your interests or interests of other Users.

2.2. We strictly follow industry best practices in the industry and adhere to the rules set forth in GDPR, OPPA, CAN-SPAM and COPPA.

3. How We Can Share the Information

3.1. In certain situations, We may be required to disclose personal data in response to lawful requests by competent authorities, including to meet national security, public interests or law enforcement requirements. Our policies regarding exchange of information with competent authorities is reflected in Our Transparency Policy.

3.2. We may disclose your Personal Information where required by law (e.g., to comply with a subpoena, warrant, court order, or legal process served on HitBTC), and when we believe that disclosure is necessary to protect our rights, avoid litigation, protect your safety or the safety of others, investigate fraud, and/or respond to a government request.

3.3. We share Personal Information with certain companies that perform services on our behalf on a need-to-know basis. We require any company with which we may share Personal Information to protect that data in a manner consistent with this policy and to limit the use of such Personal Information to the performance of services for HitBTC. You may find a list of these third-party sub-processors.

3.4. You agree that We may share and transfer Your information which no longer identifies You to the third party (pseudonymisation) who is a contracting party with Us, usually Our service providers or advertising partners.

4. For How Long We Retain Your Personal Information

4.1. We will retain your information for as long as your account is active, your information is needed to provide you services, or as required to fulfill our legal obligations.

4.2. By contacting us at dpo@hitbtc.com you can at any time obtain the confirmation whether or not the personal data concerning you is being processed.

5. How We Protect Your Information

5.1. We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of Your personal information, username, password, transaction information and data stored on Our Technology Platform.

5.2. Sensitive and private data exchange between the Technology Platform and its Users happens over an SSL-secured communication channel and is encrypted and protected with digital signatures. Our Technology Platform is functioning in compliance with PCI vulnerability standards in order to create an environment as secure as possible for Users.

5.3. Unfortunately, there is no such thing as completely secure data transmission or storage, so We cannot guarantee that Our security will not be breached (by technical measures or through violation of Our policies and procedures).

5.4. Without prejudice to Our efforts on protection of Your information nothing herein constitute a warranty of security of the Technology Platform, and You agree to transmit information at Your own risk. Please note, that the Technology Platform does not guarantee that Your information may not be accessed, disclosed, altered, or destroyed by breach of any of Our physical, technical, or managerial safeguards.

6. What Are Your Rights to Your Data

6.1. All Your Personal Information we collect will always belong to you. However, we are a collector and a processor of Your Personal Information. That implies on us obligations to respect your rights to Personal Information and facilitate the exercise of your rights thereto. In order to use any of Your rights at any time please contact us and we will facilitate the exercise of your rights free of charge. We will inform You on the actions taken by Us under Your request as soon as practically possible, but in any case not later than in 30 (thirty) calendar days.

6.2. In accordance with effective regulations You have a significant number of rights related to your Personal Information, such as e.g.:

6.2.1. Right to access. You may obtain from Us the confirmation as to whether or not personal data concerning You is being processed and get an access to such personal data;

6.2.2. Right to rectify Your inaccurate Personal Information and to have incomplete personal data completed, including by means of providing a supplementary statement

6.2.3. Right to erase your Personal Information. Please note that a request to erase your Personal Information will also terminate your account on the Site. We will automatically and without undue delay erase your Personal Information when it is no longer necessary in relation to the purposes for which it was collected or otherwise processed;

6.2.4. Right to restrict processing of your Personal Information;

6.2.5. Right to data portability. You may obtain from Us the personal data concerning You and which You have provided to us and transmit it to another Personal Information Controller;

6.2.6. Right to object to processing of Your Personal Information,

6.2.7. Right to withdraw your consent to the usage of your Personal Information at any time

6.2.8. Right to lodge a complaint. We take privacy concerns seriously. If you believe that we have not complied with this Privacy Policy with respect to your Personal Information, you may contact our respective Data Protection Office. We will investigate your complaint promptly and will reply you within 30 (thirty) calendar days. If you do not receive acknowledgment of your complaint or your complaint is not satisfactorily addressed, you have the right to lodge a complaint with the respective supervisory authority:

Office of the Privacy Commissioner for Personal Data
https://www.pcpd.org.hk/english/complaints/how_complaint/complaint/complaint.html

or (for EU) Information Commissioner's Office
https://ico.org.uk/make-a-complaint/.

7. Children

7.1. We do not intend to solicit or collect Personal Information from anyone under the age of 18 or under the legal age of your country, if it is higher. If you are under 18 or are not of a legal age of your country, do not enter any personal information on our Technology Platform.

8. Changes to the Privacy Policy

8.1. The Technology Platform has the discretion to update this Policy at any time. User should check this Privacy Policy periodically. Your continued use of the service after We post any modifications to the Privacy Policy on this page will constitute Your acknowledgment of the modifications and Your consent to abide and be bound by the modified Privacy Policy.

8.2. If We make any material changes to this Privacy Policy, We will notify You either through the email address You have provided Us, or by placing a prominent notice on the Technology Platform. You acknowledge and agree that it is Your responsibility to review this privacy policy periodically and become aware of modifications.

9. Contacting Us

9.1. If You have any questions about this Privacy Policy, wish to exercise any of Your rights to your Personal Information or file a complaint, please contact Us at:
E-mail: dpo@hitbtc.com