Effective Date: 11.11.2025

This Privacy & Cookie Policy explains how Veladur (“we,” “us,” “our”) collects, processes, stores, and protects personal data obtained through the Veladur trading platform (“Platform”). By accessing or using the Platform, you agree to the practices described in this Policy.

1. Data Controller
   Veladur is owned and operated by Finstar Technologies Ltd., incorporated in the Marshall Islands.
   We are responsible for determining the purposes and means of processing your personal data.

2. Data We Collect
   We may collect the following categories of personal data:

A. Identification Data
• Full name
• Date of birth
• Nationality
• Government-issued identification

B. Contact Data
• Email address
• Phone number
• Residential address

C. Financial Data
• Deposit and withdrawal information
• Bank details or wallet ownership proof
• Source of funds/wealth documentation

D. Trading Data
• Account activity
• Orders, balances, and transactions
• Trading patterns and risk metrics

E. Compliance Data
• AML/KYC verification records
• Proof of address
• Documentation requested for regulatory checks
• PEP status checks (where applicable)

F. Technical Data
• IP address
• Device type
• Browser type
• Login timestamps
• Usage analytics

G. Communications
• Messages exchanged with support
• Internal notes for compliance/audit purposes

3. How We Use Personal Data
   Veladur processes personal data for the following purposes:

• Account creation and verification
• Compliance with AML/CTF obligations
• Fraud prevention and risk management
• Trading platform operation
• Customer support and account servicing
• Transaction processing
• Regulatory reporting where required
• Improving and optimising Platform performance
• Security monitoring and access control

We process only data that is necessary for legal, contractual, or legitimate business purposes.

4. Legal Basis for Processing
   We process data under the following lawful bases (aligned with GDPR principles):

• Performance of a contract — enabling trading and account operations
• Legal obligation — AML/CTF, fraud detection, KYC
• Legitimate interest — platform security, analytics, service optimisation
• Consent — where applicable (cookies, marketing communication)

5. Third-Party Processors
   Veladur may use secure third-party service providers for operational purposes, including:

• Analytics tools for performance optimisation (e.g., generic third-party analytics)
• CRM systems used for communication and support management

We ensure all third-party providers operate under strict data protection standards.
Personal data is never sold or shared for advertising or marketing purposes.

6. Data Sharing and Disclosure
   We may share personal data only when necessary:

• Regulatory or legal authorities upon valid request
• Fraud prevention or risk management entities
• Payment service providers for deposits/withdrawals
• External auditors or compliance reviewers
• Blockchain or crypto analysis tools when validating wallet ownership

We do not disclose data to external marketing firms.

7. Anti-Money Laundering & Compliance Checks
   Veladur follows international AML/CTF principles and EU-aligned standards.
   We may request additional documentation at any time, including:

• Proof of identity
• Proof of address
• Source of funds/wealth
• Wallet ownership for crypto withdrawals
• Information needed for sanctions screening
• PEP status confirmation

Failure to comply may result in delays or account restrictions.

8. Data Retention
   We retain personal data only for as long as necessary to:

• Meet legal and regulatory obligations
• Comply with AML and record-keeping rules
• Resolve disputes or audit requirements

Trading and financial records may be retained for multiple years as legally required.

9. Cookies and Tracking Technologies
   The Platform may use cookies or similar technologies to:

• Maintain session security
• Enable basic Platform functionality
• Improve performance and page loading
• Analyse usage trends on an aggregated level

You may disable cookies via your browser settings; however, some Platform functions may not operate correctly.

10. Client Rights under GDPR-Aligned Principles
    You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (“right to be forgotten”)
• Request a copy of your data
• Object to specific processing activities
• Withdraw consent (where applicable)

Requests can be made by contacting [email protected].

11. Account Deletion
    You may request account deletion by contacting [email protected].
    Before deletion:
    • All positions must be closed
    • All withdrawals must be completed
    • Legally required data may be retained for compliance purposes

Veladur cannot delete data that must be retained for AML/CTF obligations.

12. Data Security
    We implement industry-grade protections, including:

• Encrypted storage
• Access control and authentication
• Suspicious activity monitoring
• Network security systems
• Regular internal audits

No system is entirely immune to risks, but Veladur maintains robust controls to safeguard personal data.

13. International Transfers
    Because Veladur operates globally, data may be processed in multiple jurisdictions.
    All transfers follow data-protection standards consistent with GDPR principles.

    
    

14. Children’s Data
    The Platform is not intended for individuals under 18.
    We do not knowingly collect data from minors.

    
    

15. Changes to This Policy
    Veladur may modify this Policy at any time.
    Updated versions will be published on the Platform.

    
    

16. Contact Information
    For privacy-related questions or requests:
    [email protected]