Privacy Policy

Last Updated: November 12, 2025

At 001k.exchange, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our crypto asset exchange service. By using our service, you agree to the terms of this Policy.

1. What is Personal Data?

Personal data (or data) is any information relating to you that, alone or in combination with other information, can be used to identify you as an individual. This may include your name, location, or technical information such as MAC addresses, IP addresses, browser information, or system data.

2. Legal Basis for Processing Your Data

We process your data based on your consent to personal data processing, which is considered given when you submit an Exchange Request. By submitting an Exchange Request, you confirm your consent to the processing of personal data for purposes outlined in this Policy, including collection, storage, use, and transfer of data to the extent necessary to provide services and comply with legal requirements.

Please note that we may also process your data when necessary for:

Providing services in accordance with our Terms of Use, which constitute a contract between you and the Company;
Legitimate interests of the Service, including service improvements and fraud prevention;
Compliance with legal obligations.

3. What Data We Collect

Generally, the Company collects technical data about your use of the Service, as well as personal data that you directly provide when submitting an Exchange Request or interacting with the Service, including your name, residential address, phone number, and email address. Specifically, we process the following categories of information:

Personal information you voluntarily provide when submitting an Exchange Request or contacting support: full name, residential address, contact details (phone number and email) necessary for communication and transaction confirmation.
Identification documents, such as passport, ID card, driver’s license, etc., as well as proof of address documents (utility bills, bank statements, etc.). These data are processed solely for identification and verification purposes in compliance with applicable law and our AML/CTF Policy.
Transaction information related to your exchange operations through the Service, including dates, amounts, currencies, exchange rates, status of each operation, and payment or wallet details used for sending or receiving funds.
Technical information automatically collected by our servers during your visit to the Service, including IP address, browser type and version, operating system type and specifications, access date and time, device used, interface language, and the referring URL.
Cookies and other tracking technologies used to remember your settings and preferences (e.g., interface language), ensure proper site functionality, analyze user behavior and visit statistics, improve service quality, and deliver personalized content.

Please note that cookies may be set both by the Company and by trusted third parties (e.g., analytics systems like Google Analytics or advertising networks). Users can change or delete cookies at any time via browser settings.

4. Purpose of Data Collection

We collect and process your personal data for the following purposes:

Providing services. Processing and fulfilling your cryptocurrency exchange requests, maintaining accounting records, fulfilling the Company’s obligations, and ensuring the financial security of transactions.
Identification and verification. Verifying and confirming your identity in accordance with applicable laws and the Company’s internal AML/CTF policy.
Analytics and Service improvement. Collecting and processing cookies and technical information about the use of the Platform to analyze Service performance, prevent technical issues, optimize functionality, adapt the interface to the user’s device, and provide personalized recommendations.
Communication. Using contact details (email, phone) to notify you about security issues, important Service updates, new features and services, and to communicate regarding your transactions.
Compliance with laws and regulations. Processing data to fulfill the Company’s obligations to regulators and comply with applicable AML/CTF legislation.

5. Disclosure of Information

We may disclose your personal data in the following cases:

1. By law or to law enforcement authorities. Your data may be provided to official authorities if required by law or necessary to investigate suspicious or fraudulent activities in accordance with our AML/CTF policy. In other words, we may disclose information required for investigations or legal proceedings in response to an official request from an authority acting within its powers.

2. To third parties involved in processing exchange requests. Your data may be shared with partners participating in the processing and execution of operations (banks, payment systems, exchange partners). In such cases, we ensure that your personal data is protected and used solely for the purposes outlined in this Policy. We achieve this through data protection agreements with contractors and partners, as well as technical and organizational measures to safeguard the data.

6. Your Rights Regarding Personal Data

Depending on your jurisdiction, you may have certain rights concerning your personal data. For example, under EU law, you have the following rights:

Right of access – request information about your personal data we store and the purposes and methods of its processing.
Right to rectification – request corrections to inaccurate or incomplete personal data.
Right to erasure (“right to be forgotten”) – request deletion of your data if it is no longer needed for the purposes it was collected or if you withdraw your consent (when consent was the basis for processing).
Right to restriction of processing – request the limitation of processing in certain situations (e.g., if you contest the accuracy of the data).
Right to object – object to data processing for direct marketing purposes or other cases where the processing is based on the Company’s legitimate interests.
Right to withdraw consent – if processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing conducted before the withdrawal.
Right to data portability – request your data in a structured, commonly used, machine-readable format and transfer it to another data controller if technically feasible.

If you believe your rights have been violated, you have the right to file a complaint with the relevant data protection authority in your jurisdiction.

7. Data Retention

We retain your personal data only as long as necessary to achieve the purposes for which it was collected or as required by applicable law.

In particular, certain categories of data related to user identification and verification may be stored for at least five (5) years after the end of the relationship with the User, in accordance with our AML/CTF policy. Accordingly, your right to deletion may be limited where data retention is legally required.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, use, disclosure, accidental loss, destruction, or damage.

However, please note that transmitting data over the Internet and storing it electronically cannot be completely secure. We take all reasonable measures to protect your data, but we cannot guarantee absolute security. By using the Service, you acknowledge and accept this risk.

9. Policy Changes

We reserve the right to make changes to this Policy. We recommend regularly reviewing this page to stay informed about the latest version of our data processing policy and practices.

10. Contact Information

For any questions regarding this Policy, please contact us at support@001k.exchange. All inquiries are processed in order of receipt.