Information We Collect
Personal Information
When you register for Questavithen's services, we collect essential information to provide our blockchain finance platform. This includes your name, email address, phone number, and postal address. We also collect government-issued identification documents as required by financial regulations, including passport or driver's license information for identity verification purposes.
Financial Information
To facilitate blockchain transactions and maintain compliance with financial regulations, we collect bank account details, cryptocurrency wallet addresses, transaction history, and trading preferences. This information helps us provide personalized services and ensures secure financial operations within our platform.
- Account registration details including username and password
- Identity verification documents and biometric data
- Financial account information and transaction records
- Device information and IP addresses for security purposes
- Communications and support interactions
- Usage analytics and platform interaction data
Technical Information
We automatically collect technical information when you use our platform, including browser type, operating system, IP address, device identifiers, and usage patterns. This data helps us improve platform performance, detect security threats, and provide better user experiences across different devices and browsers.
How We Use Your Data
Primary Usage Purposes
We use your personal information primarily to provide our blockchain finance services, ensure regulatory compliance, and maintain platform security. Every data processing activity serves specific business purposes aligned with your service expectations.
Service Provision
Your information enables us to process blockchain transactions, maintain your account security, provide customer support, and deliver educational content through our learning programs. We use contact information to send important account updates, security alerts, and service notifications that directly impact your platform usage.
Compliance and Legal Requirements
Financial services require strict compliance with regulations including anti-money laundering (AML) and know-your-customer (KYC) requirements. We process your data to meet these legal obligations, report suspicious activities when required, and maintain audit trails for regulatory examinations. This processing is essential for operating legally in the financial services sector.
- Account Management: Creating and maintaining your user account and preferences
- Transaction Processing: Executing blockchain transactions and maintaining records
- Security Monitoring: Detecting fraud, unauthorized access, and security threats
- Customer Support: Responding to inquiries and resolving platform issues
- Regulatory Reporting: Meeting legal requirements and compliance obligations
- Platform Improvement: Analyzing usage patterns to enhance services
Data Sharing and Third Parties
Service Providers
We work with carefully selected third-party service providers to deliver our platform services. These include cloud hosting providers, payment processors, identity verification services, and cybersecurity firms. All service providers must sign comprehensive data protection agreements and can only process your data for specific, authorized purposes.
Regulatory Authorities
We may share your information with financial regulators, law enforcement agencies, and other governmental bodies when legally required. This includes responding to court orders, regulatory investigations, and compliance with anti-money laundering laws. We always verify the legitimacy of such requests and share only the minimum information necessary.
Business Transfers
In the event of a merger, acquisition, or business transfer, your personal information may be transferred to the new entity. We will notify you of any such transfer and ensure the receiving party maintains the same privacy protections outlined in this policy. You will have the opportunity to object to such transfers where legally permitted.
We Never Sell Your Data
Questavithen does not sell, rent, or lease your personal information to marketers, advertisers, or other third parties for their commercial purposes. Your trust is fundamental to our business relationship.
Security Measures and Data Protection
Technical Safeguards
We implement enterprise-grade security measures including end-to-end encryption for data transmission, advanced firewalls, intrusion detection systems, and regular security audits. Our blockchain infrastructure uses cryptographic security protocols to protect transaction data and prevent unauthorized access or manipulation.
Access Controls
Access to your personal information is strictly limited to authorized personnel who require it for legitimate business purposes. We use multi-factor authentication, role-based access controls, and regular access reviews to ensure only appropriate individuals can access your data. All access is logged and monitored for security purposes.
- 256-bit SSL encryption for all data transmissions
- Regular penetration testing and vulnerability assessments
- Secure data centers with physical access controls
- Employee security training and background checks
- Incident response procedures and breach notification protocols
- Regular security audits by independent third parties
Data Backup and Recovery
We maintain secure backups of your data to ensure service continuity and data recovery in case of system failures. Backup data receives the same security protections as primary data and is stored in geographically distributed locations to prevent data loss from localized incidents.
Your Privacy Rights
Access and Correction
You have the right to access your personal information held by Questavithen and request corrections to inaccurate or incomplete data. We provide secure account portals where you can review and update much of your information directly. For more complex requests, you can contact our privacy team using the information provided below.
Data Portability
You can request a copy of your personal information in a structured, machine-readable format. This allows you to transfer your data to other services where technically feasible. We will provide this information within 30 days of your request, subject to identity verification and any legal restrictions.
Deletion and Erasure
You can request deletion of your personal information, though certain data may need to be retained for legal compliance, fraud prevention, or legitimate business purposes. We will explain any retention requirements and delete all data that can be safely removed without compromising our legal obligations.
Exercising Your Rights
To exercise any of these rights, contact us at [email protected] with your request. We respond to all requests within 30 days and provide clear explanations of any limitations or requirements.
- Right to Access: Obtain copies of your personal information
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal information
- Right to Portability: Receive your data in a transferable format
- Right to Object: Opt out of certain data processing activities
- Right to Restrict: Limit how we process your information
Data Retention Policies
Retention Periods
We retain your personal information only as long as necessary to provide our services, comply with legal obligations, and protect our legitimate business interests. Account information is typically retained for the duration of your relationship with us, plus additional periods required by financial regulations.
Legal Requirements
Financial regulations require us to maintain certain records for specified periods, typically 5-7 years for transaction records and compliance documentation. We cannot delete this information earlier due to legal obligations, but we implement additional security measures for aged data and delete it promptly when retention periods expire.
- Account Information: Retained during active relationship plus 7 years
- Transaction Records: 7 years from transaction completion
- Identity Verification: 5 years from account closure
- Communications: 3 years from last interaction
- Technical Logs: 1 year unless required for ongoing investigations
- Marketing Preferences: Until withdrawn or account closure
Secure Deletion
When retention periods expire, we securely delete your personal information using industry-standard data destruction methods. This includes overwriting digital storage and physically destroying any hardware containing your data. We maintain certificates of destruction for audit purposes.
International Data Transfers
Global Operations
Questavithen operates globally with data centers and service providers in multiple countries. Your personal information may be transferred to and processed in countries outside the United Kingdom, including the United States and European Union. We ensure all international transfers comply with applicable data protection laws and maintain adequate security protections.
Transfer Safeguards
We use appropriate safeguards for international data transfers, including standard contractual clauses approved by regulatory authorities, adequacy decisions, and certification programs. Our service providers must demonstrate equivalent privacy protections regardless of their location.
UK and EU Standards
All international data transfers maintain the same privacy protections required by UK GDPR and equivalent data protection regulations, ensuring your rights are preserved regardless of where your data is processed.
Policy Updates and Changes
Notification Process
We may update this privacy policy periodically to reflect changes in our services, legal requirements, or industry best practices. Material changes will be communicated through email notifications, platform announcements, and prominent notices on our website at least 30 days before taking effect.
Your Options
When we make significant changes to our privacy practices, you will have the opportunity to review the updated policy and make informed decisions about continuing to use our services. If you disagree with material changes, you can close your account and request data deletion, subject to legal retention requirements.
We recommend reviewing this policy periodically to stay informed about how we protect your privacy. The effective date at the bottom of this policy indicates when it was last updated. Previous versions are available upon request for reference purposes.