Privacy policy

1. Introduction

Revulnox ("we", "us", "our") respects your privacy. This policy describes how we collect, use, share and protect personal data when you visit revulnox.com, open an account or get in touch with us. We act as the controller of that data and process it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data we collect

Depending on how you use our services, we may collect:

• identity and contact details, such as your name, email address and phone number;
• account and verification information, including the documents needed to confirm your identity;
• financial and transaction data, such as deposits, withdrawals and trading activity;
• technical data, including your IP address, device type, browser and the pages you visit;
• the content of any messages you send to our support team.

3. How we use your data

We use personal data to open and manage your account, verify your identity, prevent fraud and financial crime, provide the platform and carry out your instructions, keep you informed about your account and, where you have agreed, about relevant products. We also use it to improve our services and security and to meet our legal and regulatory obligations.

4. Lawful bases for processing

We rely on one or more of the following lawful bases: performance of a contract with you or steps taken at your request before entering into one; compliance with a legal obligation; our legitimate interests, where these are not overridden by your rights; and your consent, which you may withdraw at any time without affecting processing that has already taken place.

5. Data security

We protect personal data with 256-bit encryption in transit, strict access controls, two-factor authentication for staff and clients, and regular independent security testing. Only authorised people who need the information to do their job can access it.

6. Sharing your data

We share personal data only where necessary: with service providers that host our systems, verify identity, process payments or send communications on our behalf; with professional advisers; and with regulators, law enforcement or other authorities where the law requires it. Every provider is bound by contract to protect your data. We never sell your personal data.

7. International transfers

Some of our providers may process data outside the United Kingdom. Where they do, we rely on UK adequacy regulations or put appropriate safeguards in place, such as the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, so that your data receives an equivalent level of protection.

8. How long we keep your data

We keep personal data only for as long as we need it for the purposes described in this policy. Records required under UK anti-money-laundering rules are generally kept for five years after our relationship with you ends, after which they are securely deleted or anonymised.

9. Your rights

Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format and to withdraw consent at any time. To exercise any of these rights, email us at [email protected]. We will respond within one month.

10. Cookies and similar technologies

We use a small number of cookies and similar technologies, whose use is governed by the Privacy and Electronic Communications Regulations (PECR). Our market ticker stores one cookie, rv_ticker, which caches cryptoasset prices for 24 hours so pages load faster. When you submit a form, your details are held briefly in your browser's local storage so your registration can be completed. If you reach us through an advertising campaign, a measurement pixel from our advertising partner may record that a registration took place. You can block or delete cookies and local storage in your browser settings at any time.

11. Children

Our services are intended only for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18, and we will delete such data if we become aware of it.

12. Contact and complaints

If you have any questions about this policy or how we handle your data, contact us at [email protected]. If you are unhappy with our response, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.