HomeLegalPrivacy policy

Privacy policy

Version TX26|01Last updated 03 March 2026

This Privacy Policy explains how Traxevo collects, uses, stores, discloses, and protects your personal data when you use our Website, Platform, and Services. Please read it carefully.

In this Privacy Policy, "Traxevo", "we", "us", and "our" refer to the operator of the Traxevo Platform, acting as the data controller. "You" and "your" refer to any person whose personal data we process. If you have any questions about this policy or how we handle your data, please contact us at privacy@traxevo.com.

1 Introduction

1.1

Traxevo is committed to protecting personal data and respecting privacy. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information in connection with our products, Services, Website, and mobile applications. Where this policy refers to "we", "us", or "our", it refers to Traxevo as the entity responsible for processing your personal data.

1.2

This Privacy Policy applies to current and prospective clients, Website visitors, business partners, service providers and their employees, and anyone who interacts with the Traxevo Platform or our digital channels, regardless of country of residence. It does not apply to Traxevo employees or job applicants, whose data is covered by separate notices.

1.3

We process personal data as a data controller in accordance with applicable privacy laws, which may include the European Union General Data Protection Regulation (GDPR), the United Kingdom General Data Protection Regulation (UK GDPR), and other national privacy laws that apply to you.

2 Categories of personal data

2.1

Depending on your relationship with us, we may collect and process one or more of the following categories of personal data:

2.1.1

Identity data: first name, surname, gender, nationality, date and place of birth, and government-issued identification documents such as passports, driving licences, national IDs, and resident permits.

2.1.2

Contact data: postal address, email address, and telephone number.

2.1.3

Professional data: job title, employer name, occupation, and areas of responsibility.

2.1.4

Residential information: rental or tenancy agreements, title deeds, and utility bills.

2.1.5

Communication data: content of communications including emails, live chat transcripts, call logs, and feedback.

2.1.6

Services data: account information, trade and transaction history, contracts, preferences, and usage records.

2.1.7

Consent data: consents given or withdrawn, cookie selections, and marketing preferences.

2.1.8

Payment data: billing address, payment method, bank account details, and payment history.

2.1.9

Usage data: transactions you make, how you use the Platform and other products, and how you interact with our Website, applications, marketing, and communications.

2.1.10

Digital data: IP address, approximate location, device and browser data, and security information such as login and authentication events.

2.1.11

Verification data: proof of address, source of wealth, and source of funds.

2.1.12

Biometric data: where you submit a selfie or a video for identity verification, we may process biometric information for the unique identification of a natural person.

2.1.13

Other: any additional information you supply to us, or that we are required to collect by law.

3 Sensitive personal data

3.1

Unless we expressly ask for it or are required by law to collect it, you should not provide sensitive personal data through our Website, the Platform, or any other channel. Depending on your jurisdiction, sensitive personal data may include information about racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, health, genetic or biometric data, sexual orientation, and criminal or administrative proceedings.

3.2

If we need to collect sensitive personal data, we will do so only in accordance with applicable privacy laws and only where a valid legal basis exists — such as your explicit consent, compliance with a legal obligation, or the establishment, exercise, or defence of legal claims.

4 Sources of personal data

4.1

We may collect your personal data from the following sources:

4.1.1

From you directly, when you register, correspond with our teams, or use our Services.

4.1.2

From our Website and applications, including forms, cookies, and usage logs.

4.1.3

From third parties, including business partners, identity-verification providers, payment processors, and public authorities.

4.1.4

From public sources, including regulatory registers and publicly available databases.

4.1.5

Generated by us, for example when we create meeting records, call logs, or risk and fraud scores derived from existing information.

4.1.6

Through ongoing requests, where we ask you for further personal data or supporting documents to meet our compliance, due diligence, or security obligations.

5 Lawful basis and purposes

5.1

We only use your personal data where consent or another lawful basis exists. These may include:

5.1.1

Complying with a legal obligation, including licensing, anti-fraud, and anti-money-laundering requirements.

5.1.2

Entering into or performing an agreement with you.

5.1.3

Pursuing our legitimate business interests.

5.1.4

Establishing, exercising, or defending legal rights.

5.2

We use your personal data for the following purposes:

5.2.1

Customer management and account administration.

5.2.2

Providing Services, executing trades, and managing transactions.

5.2.3

Customer support, handling queries, complaints, and disputes.

5.2.4

Client due diligence, Know Your Customer (KYC) procedures, anti-fraud measures, anti-money-laundering (AML) activities, and sanctions screening.

5.2.5

Site and account security, addressing actual or suspected fraud, unlawful activity, or misconduct.

5.2.6

Marketing and analytics, including surveys, satisfaction measurement, and collecting feedback.

5.2.7

Improving our products and Services, conducting research and development, and gathering business intelligence.

5.2.8

Finance, treasury, accounting, and payment processing.

5.2.9

Risk management, crime prevention, internal audits, and corporate governance.

5.2.10

Operating the Website, Platform, and IT infrastructure, including system testing and development.

5.2.11

Legal compliance, managing litigation or the defence of legal claims, and responding to regulatory or court requests.

5.2.12

Machine learning and automated processing, including training, developing, and improving algorithms, models, and AI systems to enhance Services, fraud prevention, and risk management.

5.2.13

Any other purpose required or authorised by law, regulation, or court order.

5.3

When you use live chat on our Website or in the Platform, the content of the conversation (including any personal information you type into it) is processed and stored in our systems.

5.4

Where we rely on your consent, we will tell you clearly at the point consent is requested. You may withdraw your consent at any time.

6 Disclosure of personal data

6.1

We may share your personal data with the following categories of recipients, where necessary for the purposes described in this policy:

6.1.1

Service providers — including IT, cloud, web-hosting, analytics, customer-support, and communication-platform providers — acting on our behalf.

6.1.2

Payment processors, banks, and financial institutions that process transactions on our behalf.

6.1.3

Regulators, courts, law-enforcement agencies, tax authorities, and other public authorities, where required by law or to protect our or your rights.

6.1.4

Professional advisers, including insurers, lawyers, auditors, and accountants.

6.1.5

Advertising networks, analytics providers, and social networks, for marketing and advertising purposes.

6.1.6

Any other third party where you have given us your explicit consent to share your data with them.

6.2

Any third party that processes personal data on our behalf is required to put in place appropriate security measures, comply with applicable law, and provide a level of protection equivalent to that described in this Privacy Policy.

7 International data transfers

7.1

Because we work with service providers and partners located around the world, your personal data may be processed in or transferred to countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

7.2

Where personal data subject to the GDPR, UK GDPR, or other applicable privacy laws is transferred to a country that has not been found to offer an adequate level of data protection, we will put appropriate safeguards in place — such as Standard Contractual Clauses, adequacy decisions, transfer impact assessments, and supplementary technical and organisational measures — to ensure that your data remains protected.

8 Data retention

8.1

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to comply with legal, regulatory, accounting, or reporting requirements. After the applicable retention period, data is securely deleted or anonymised, unless a longer retention period is required or permitted by law — for example, for the establishment, exercise, or defence of legal claims.

9 Your rights

9.1

Depending on your jurisdiction and the privacy laws that apply to you, you may have the following rights in respect of your personal data:

9.1.1

Information and access: request access to your personal data and details of how it is processed.

9.1.2

Rectification: ask us to correct inaccurate or incomplete data.

9.1.3

Erasure: request deletion of your personal data, subject to legal requirements.

9.1.4

Restriction: ask us to restrict the processing of your personal data in certain circumstances.

9.1.5

Objection: object to certain types of processing, including direct marketing and profiling.

9.1.6

Portability: receive a portable copy of your personal data in a structured, commonly used, machine-readable format.

9.1.7

Automated decision-making: not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

9.1.8

Withdrawal of consent: where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing.

9.1.9

Complaint: lodge a complaint with a supervisory authority in your country of residence.

9.2

We may ask you to verify your identity before processing a rights request. Where a request is manifestly unfounded, repetitive, or excessive, we may charge a reasonable fee or decline it, as permitted by law.

9.3

You can update your personal data through your account settings. You are responsible for keeping your details accurate and up to date, because we rely on them to provide our Services.

9.4

To exercise any of these rights, email our data-protection team at privacy@traxevo.com.

10 Marketing

10.1

You have the right to opt out of marketing communications. You can do this in your account settings or by clicking the "Unsubscribe" link in any marketing email we send.

10.2

If you opt out of marketing, you may still receive transactional or service-related messages — such as security alerts, verification emails, and updates to our Terms — that are necessary for the proper functioning of our Services.

11 Security of your personal data

11.1

We take the security of personal data and financial transactions seriously and apply a risk-based approach to safeguards, including the following:

11.1.1

Your password is uniquely assigned to your account and stored using strong cryptographic hashing. Neither Traxevo nor its staff can access your password.

11.1.2

Card data is processed securely and directly with our payment partners, using current SSL/TLS encryption and in compliance with the Payment Card Industry Data Security Standard (PCI DSS) or an equivalent standard.

11.1.3

Access to your personal data is limited to authorised personnel who require it to perform their duties, and is managed under role-based access controls with regular review and audit.

11.1.4

We deploy industry-standard technical and organisational measures, including encryption in transit and at rest, firewalls, intrusion detection, regular security testing, and business-continuity planning.

11.1.5

Our systems monitor for suspicious activity and potential fraud. We may verify identity and engage law-enforcement or relevant agencies where necessary.

11.1.6

You are responsible for keeping your login details, associated email account, and devices secure. We strongly recommend using strong, unique passwords, enabling two-factor authentication, and avoiding public or shared devices and networks for account access.

11.2

No online platform can be guaranteed to be completely secure. In the event of a data breach, we will follow the notification requirements that apply under the relevant privacy laws.

12 Automated decision-making and profiling

12.1

We may profile you in relation to our products — for example, to identify relevant features or educational content — using a combination of manual review and automated processing.

12.2

We may also use automated systems to help with risk assessments, such as fraud and anti-money-laundering checks. Where an automated decision could have a legal or similarly significant effect on you, it will include manual review so that the final decision is not made solely by automation.

13 Cookies and website analytics

13.1

Cookies are small text files placed on your device that can be recalled by a web server. We use cookies and similar technologies (including pixels and web beacons) to make our Website work, remember your preferences, understand how our Services are used, and, where you consent, to deliver relevant content and advertising.

13.2

We may use the following types of cookies:

13.2.1

Strictly necessary cookies: essential for the Website to function and for you to use secure areas.

13.2.2

Functionality cookies: remember your preferences and choices.

13.2.3

Performance and analytics cookies: help us understand how visitors interact with our Website, in aggregate.

13.2.4

Targeting and advertising cookies: used to deliver relevant advertising and measure its effectiveness.

13.3

Strictly necessary cookies are set automatically. Other cookies are only set where you provide consent in line with applicable law.

13.4

Session cookies are deleted when you close your browser. Persistent cookies remain for longer periods unless you delete them, and are retained only for as long as needed for their intended purpose.

13.5

We may use third-party services such as Google Analytics, which set their own cookies on your device. For questions about specific cookies, email privacy@traxevo.com.

14 Links to other websites

14.1

Our Website contains links to other websites and may display banners or advertisements for third-party sites. Those sites may set their own cookies on your device and have their own privacy practices. We are not responsible for their content or privacy practices, and we encourage you to read their privacy policies before using them.

15 Data controller and contact information

15.1

For the purposes of applicable data-protection laws, Traxevo is the data controller responsible for your personal data. The specific corporate entity acting as controller depends on your country of residence and the Services you use, and will be confirmed to you on our Regulatory information page.

15.2

If you have questions about this Privacy Policy, would like more information about our data-protection practices, or wish to make a complaint about how we handle your data, please contact us:

Data protection enquiries: privacy@traxevo.com

General support: support@traxevo.com

Complaints: complaints@traxevo.com

16 Updates

16.1

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. The current version, together with the date it was last updated, will always be available on this page. If we make material changes, we will notify you through the Platform or by email.