Scope and Contact
Trade8 is a company incorporated in the British Virgin Islands.
This notice covers the Trade8 public website and correspondence sent to its support and compliance email addresses. Account verification, trading, custody, and settlement involve additional records and service-specific disclosures at the point those services are used.
For privacy questions or requests, Contact Us with “Privacy Request” in the subject. For product assistance, Contact Us. Do not send identity documents or financial records until the appropriate secure channel has been agreed.
Information Collected
| Context | Information involved | Purpose |
|---|---|---|
| Website delivery | IP address, browser and device information, requested URL, request time, and technical error information | Deliver pages, maintain availability, investigate errors, and prevent abuse |
| Email correspondence | Sender address, message contents, attachments you choose to send, timestamps, and routing metadata | Answer enquiries, handle complaints or requests, and keep a record of the correspondence |
| Appearance preferences | Documentation light/dark preference stored in your browser | Preserve your chosen appearance |
| Documentation search | Query processed against a downloaded search index in your browser | Find matching documentation and support articles |
| Restricted account entry | Email-format validation in the page | Validate the field before displaying the jurisdiction restriction notice |
The email field is used solely for validation in your browser, followed by a jurisdiction restriction notice. Search queries are processed locally. Fonts and integration images are hosted with the website. Account creation and verification take place through the applicable account service.
Account and Verification Information
When using an approved account service, relevant information can include legal name, date of birth, residence, identity and address documents, ownership and authorization records, source-of-funds evidence, and account or transaction history. The KYC & AML Policy describes the account due-diligence requirements.
The public pages do not accept these document uploads. An account verification flow must identify its receiving service and privacy terms before collection. Public blockchain records can remain visible independently of Trade8; a wallet address or transaction hash may be linked to a person and should not automatically be treated as anonymous.
How Information Is Used
Information is used to operate and secure the website, respond to correspondence, investigate reported issues, verify the authenticity and scope of requests, administer applicable agreements, and meet legal obligations where they apply. It may also be needed to establish, exercise, or defend a legal claim.
The website does not run advertising pixels, behavioral analytics, newsletter registration, or public user profiles. It does not sell visitor information or supply it for another party’s direct marketing. Adding a new collection purpose requires appropriate disclosure and, where required, consent.
Legal Grounds Where Applicable
Depending on the processing and applicable law, the relevant ground may be steps requested before entering a contract, performance of a contract, compliance with a legal obligation, or legitimate interests such as website security and responding to enquiries, balanced against individual rights. Consent is used where required for an optional purpose and can be withdrawn for future processing.
The legal ground is assessed for each processing purpose under applicable law.
Sharing and Service Providers
Information may be handled by the hosting and network provider, email providers, authorized personnel, and advisers where necessary for the stated purpose. Service-specific verification, custody, or exchange providers may also handle information under the applicable account arrangements. Information shared with an account provider depends on the service used.
Cloudflare provides website hosting and delivery. Its network may process technical request information to deliver and protect the site. Provider handling is subject to the actual deployed configuration and applicable terms.
Information may be disclosed in response to a valid legal requirement or where otherwise lawfully necessary to protect rights or investigate abuse. Access should be limited to the people and functions that need it.
International Processing
Hosting, email, and service providers may process information in countries other than the visitor’s country. Where transfer restrictions apply, an appropriate transfer mechanism and safeguards are required.
Retention
Website technical records and email correspondence are kept only for the period necessary for their operational, support, security, legal, or dispute purpose, subject to applicable provider practices and retention requirements. Records may need to be preserved for an unresolved complaint, legal claim, or lawful preservation obligation.
For account due diligence, the policy schedule is seven years after account closure for identification information and seven years after creation for verification records, subject to applicable legal requirements and justified retention needs. That schedule does not apply indiscriminately to all visitors, searches, or messages. Theme preferences remain in your browser until changed or cleared.
Security and Safe Communication
Appropriate technical and organizational measures should protect information against unauthorized access, loss, misuse, and alteration. No internet transmission or storage arrangement is free from risk. Use verified contact details, redact secrets from logs, and avoid sending unnecessary sensitive attachments.
Trade8 support will not ask for an Apple or Google password, API secret, wallet private key, or recovery phrase. Do not publish those details in a support request or code sample.
Your Rights and Choices
Depending on applicable law and the processing concerned, you may have rights to access, correct, erase, restrict, object to, or obtain a portable copy of personal information. You may also withdraw consent where processing depends on it and complain to a competent data-protection authority. Rights are not absolute; legal retention or another applicable exception may limit a request.
Describe the request and relevant relationship when contacting compliance. Proportionate identity verification may be needed before disclosing records or making changes. Do not attach an identity document unsolicited. You can also clear browser storage and use the website without entering an account email address.
External Links and Updates
Following a link to an exchange, custodian, or another website takes you to a service with its own privacy practices. Review its notice before supplying information. Email links open your email application; sending a message is your choice and is handled by the email services involved.
This notice will be updated when information practices materially change. See Cookies & Storage, KYC & AML, and Compliance for related details.