This policy sets out how xelioinvest ("we") collects, handles and secures your personal data on our website and the Services. We act as the data controller for these data.
What we collect. Names, emails, nationalities and similar identity data plus verification files required by regulation. Additionally stored: transaction and trade logs, technical logs and support messages. EU/UK legal grounds: contract performance, legal obligation, and legitimate interest.
How we use data. Running your account, clearing trades, meeting compliance, fighting fraud, and securing systems, and opt-in product messages carrying easy opt-out.
Who sees data. Data reaches only operating vendors (custody, payment, verification), regulators upon lawful request, and anonymized metrics. No sale of personal data.
Retention and security. Data is kept for the account life plus legal windows (typically five-seven years for transactions). Protection: AES-256 at rest, TLS 1.3 in transit and ISO 27001-audited access governance.
Rights. Viewing, correction, export, deletion and objection rights can be exercised via [email protected]. We answer within the legally set windows.