Privacy and Personal Information Notice

Keen Assayance treats the responsible handling of personal information as a core duty. This notice sets out what we gather, the reasons for doing so and the safeguards we use, in line with applicable requirements such as the UK GDPR. It covers our approach to collection, use, storage and protection.

1. Who is responsible for your personal information

For UK GDPR purposes, the website operator and the Keen Assayance platform are responsible for controlling your personal information. Our legal notice contains the applicable contact details and further information. Privacy enquiries may also be directed to our data protection officer.

2. Personal information we obtain

We process the information required to provide the service, meet our legal responsibilities and keep the platform secure. This may include:

  • Identity information: your first name, family name and birth date, used to establish your identity and verify your age.
  • Contact information: your email address, any telephone number provided, country of residence and, where relevant, your postal address.
  • Account and payment information: payment details, deposits, withdrawals and records connected with transactions.
  • Technical and activity information: IP address, browser and device details, sign-in times and network information.
  • Verification information: identity papers, proof of address and other details needed for applicable KYC and AML checks.

As a rule, we do not seek special-category information, such as health details or religious beliefs, unless legislation requires it or you have given clear permission for its use.

3. Sources of your information

Your information may come from several safeguarded sources, including the following:

  • Information you provide: for instance, when creating an account, updating your profile, submitting documents or contacting customer support.
  • Information collected automatically: such as cookies, server records, analytics data and technical details generated while you use the platform.
  • Information from other organisations: including payment firms involved in deposits or withdrawals, KYC and AML screening providers, and social sign-in services where you authorise access.

4. How personal information is used

Depending on the circumstances, our processing is based on one or more lawful grounds, including:

  • Creating, administering and assisting with your account and the platform functions made available to you.
  • Processing and protecting payment activity, including funds added to or taken from your account.
  • Providing appropriate support and responding to your questions, requests and reported issues.
  • Meeting legal and regulatory obligations, including KYC, AML and taxation requirements.
  • Protecting our services and identifying or preventing fraud, misuse and attempted unauthorised entry.
  • Refining the platform experience and enhancing its functions over time.
  • Providing service messages or promotional communications where you have chosen to receive them.

5. Lawful bases for processing

  • Taking steps at your request before an agreement, or delivering the agreement we have entered into with you (Article 6(1)(b) UK GDPR).
  • Meeting legal obligations (Article 6(1)(c) UK GDPR), including anti-money-laundering duties.
  • Our legitimate interests (Article 6(1)(f) UK GDPR), including platform security, service resilience and reliable operation.
  • Your express consent (Article 6(1)(a) UK GDPR), for example where marketing or optional functions are involved.

6. When information may be shared

Information is shared only when needed, with selected recipients and service providers such as:

  • Banks and payment companies that receive deposits or arrange withdrawals.
  • Approved specialist firms carrying out KYC and AML checks.
  • Cloud infrastructure and technology suppliers operating under suitable data-processing agreements.
  • Analytics and cyber-security providers, with anonymisation or pseudonymisation used where reasonably practicable.
  • Professional advisers, including legal and tax specialists, where expert guidance is necessary.
  • Courts and public bodies where the law requires disclosure or it is necessary to pursue, exercise or defend legal rights.

We do not sell personal information or provide it to third parties for their own independent commercial activities.

7. International data transfers

Some suppliers, including hosting and analytics companies, may operate outside the UK or European Economic Area. Where information crosses borders, we use recognised protections such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, binding corporate rules or an applicable adequacy decision.

8. Measures protecting information

We protect personal information through a combination of technical safeguards and organisational controls:

  • Secure connections based on up-to-date protocols, including TLS 1.3 or a subsequent version.
  • Robust encryption for sensitive information stored in our systems, including AES-256 where suitable.
  • Scheduled security checks, penetration tests and reviews by independent specialists.
  • Ongoing monitoring designed to identify abnormal behaviour and attempted compromises.
  • Permissions allocated according to each team member’s role and legitimate business requirement.
  • Client money maintained in segregated accounts through regulated service providers.

Every online service carries some security risk; these controls are designed to reduce threats that can reasonably be anticipated.

9. How long information is retained

Personal information is kept only for the time needed for the purposes outlined here or for the period imposed by law:

  • Throughout the period in which your account and contractual relationship are open.
  • Following closure, for as long as applicable requirements demand, which may mean keeping tax or regulatory records for 5–10 years.
  • Where consent is the legal basis, such as for marketing, until you withdraw that consent.

When information is no longer required, we securely remove it or convert it into anonymous data.

10. Rights relating to your privacy

Data protection law gives you a range of rights over your personal information, including the ability to:

  • Ask whether we hold or process personal information relating to you.
  • Request correction of inaccurate details or completion of information that is missing.
  • Seek deletion where no valid legal reason remains for keeping the information.
  • Request that processing is limited or paused in circumstances provided for by law.
  • Obtain your information in a structured, commonly used and machine-readable form for transfer to another provider.
  • Withdraw consent at any point where consent is the basis for processing.
  • Raise a concern with the appropriate data protection supervisory body.

11. Cookies and related tools

Cookies and related tools help the website function, show us how visitors interact with the service and inform future improvements. Necessary cookies are used automatically; analytics and advertising cookies are enabled only after consent. Our separate cookie notice provides further detail.

12. Updates to this privacy notice

We may update this notice when legislation, regulation or the platform changes. The current version will be made available on our website. If a change materially affects you, we will notify you by email or through an in-platform message.

13. Contacting us about data protection

Pour toute interrogation concernant la confidentialité, cette politique ou l'exercice de vos droits, veuillez nous écrire à [email protected] ou utiliser le formulaire de contact présent sur le site. Notre responsable de la protection des données étudiera votre demande et vous répondra rapidement.

When you use Keen Assayance, you confirm that you have reviewed this notice and accept its provisions.