Privacy Policy

This Privacy Policy ("Policy") describes how QIF ("we", "our", "the Platform") collects, uses, discloses, and protects personal information when users ("you", "the Client") engage with our cryptocurrency exchange platform at QIF.io.

This Policy is written in accordance with the General Data Protection Regulation (GDPR), applicable European privacy legislation, and cryptocurrency exchange industry-standard security practices.

This Policy applies solely to data collected through the QIF platform in relation to:

• User registration and account creation
• Identity verification (KYC) for cryptocurrency exchange compliance
• Cryptocurrency trading and transaction processing
• Wallet management and digital asset custody
• Security monitoring and fraud prevention

It does not apply to any third-party services, external wallets, or unrelated cryptocurrency platforms.

We may collect and process the following categories of personal data:

Identification Data:

Full name, date of birth, nationality, government-issued ID documents

Contact Information:

Email address, phone number, physical address

Financial Information:

Bank account details, payment method information, transaction history, cryptocurrency wallet addresses

Trading Data:

Trading history, order information, portfolio data, market activity

Technical Data:

IP address, device type, session timestamps, browser environment, API usage

We process your personal data under the following lawful bases:

• Performance of a Contract: To provide cryptocurrency exchange services, process transactions, and manage your account
• Compliance with a Legal Obligation: To meet Anti-Money Laundering (AML), Know Your Customer (KYC), and other cryptocurrency regulatory requirements
• Legitimate Interests: To maintain platform security, prevent fraud, and improve our cryptocurrency exchange services

Your personal data will be retained only for as long as necessary to fulfill the purpose for which it was collected, including:

• Completion of the verification and access process
• Compliance with applicable laws and regulations
• Maintenance of internal audit logs and security records

Once data retention is no longer required, your information will be securely deleted or anonymized in accordance with GDPR Article 17.

Your information may be shared with trusted service providers strictly for the following reasons:

• Processing cryptocurrency transactions and blockchain operations
• Payment processing and bank transfer services
• Identity verification and compliance services
• Security and fraud prevention services

In the event of lawful regulatory inquiry or court order, we may disclose data to competent authorities in full compliance with cryptocurrency regulations.

Where necessary, your data may be transferred securely within the QIF platform's international infrastructure, subject to safeguards that meet EU adequacy requirements. All data transfers are protected by appropriate security and encryption standards.

We implement a range of technical and organizational measures to ensure the confidentiality, integrity, and availability of your personal data, including:

• End-to-end session encryption
• Identity-tagged access handling
• Secure data storage environments
• Strict access control for internal personnel

All access to personal data is logged and restricted to authorized compliance officers only.

As a data subject, you have the right to:

• Access your personal data (Art. 15)
• Request correction of inaccuracies (Art. 16)
• Request deletion of your data under certain conditions (Art. 17)
• Object to or restrict certain types of processing (Art. 18)
• Request a copy of your data in a machine-readable format (Art. 20)
• Lodge a complaint with a supervisory authority

The QIF uses minimal technical cookies strictly necessary to manage session integrity and authentication. No tracking cookies, analytics tools, or third-party scripts are used.

You will be informed of all cookie use at the point of entry.

We may update this Privacy Policy from time to time to reflect changes in law, operational needs, or system policies.

Any changes will be posted to this page with a revised "Effective Date."