Privacy policy

1. Introduction

Druveth is committed to protecting the privacy of its users in line with the EU General Data Protection Regulation (GDPR).

2. Data we collect

Identifying data (name, email, phone), KYC documentation and operational data (IP, device, browser, usage logs).

3. Purposes of processing

Account management, trade execution, AML/KYC obligations, fraud prevention and product improvement.

4. Legal basis

Contract performance (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c)) and consent where applicable (Art. 6(1)(a)).

5. Security

256-bit SSL/TLS encryption, role-based access controls, encrypted backups, segregated environments and continuous monitoring.

6. Third parties

We do not sell personal data. We share data with payment processors, KYC providers and audit firms strictly under contract.

7. International transfers

Where data is processed outside the EU/EEA, transfers are governed by Standard Contractual Clauses.

8. Your rights

Access, rectification, erasure, portability, restriction and objection. To exercise any right, contact [email protected].

9. Cookies

Essential and optional cookies are managed via the cookie banner and your browser settings.

10. Minors

Services are available exclusively to adults aged 18 and above.

11. Contact

Privacy queries: [email protected]