Privacy and Data Protection Policy

Scope of this policy

This policy explains how Lynvato handles the personal data of site visitors and account holders. It covers this website, the dashboard and the app. It does not cover third-party sites you may reach through external links.

What we collect about you

Data you provide at registration: first name, last name, email address and phone number. Data collected automatically in use: network address, device and browser type, entry and exit pages, and session timing. And identity-verification data where anti-money-laundering requirements call for it.

The legal basis for processing

We process your data to perform the contract between us, to meet a regulatory obligation, on your explicit consent in marketing cases, or on a legitimate interest in securing the platform and preventing fraud. You may withdraw consent at any time, without retroactive effect.

Purposes of use

Opening your account and verifying your identity, operating the service and executing orders, contacting you about your account, improving the platform through aggregate usage analysis, and complying with regulatory requirements in the markets we serve.

Who sees your data

We do not sell or rent your personal data. We share it only with service providers acting on our behalf under binding processing agreements — server hosting, identity verification, analytics — and with regulatory or judicial authorities where applicable law obliges us to.

Retention periods

We keep account data for the life of the relationship, then for the period financial regulation requires after closure. Data on unregistered visitors is deleted or anonymised sooner. Once the purpose and the statutory period have passed, data is deleted or rendered unlinkable to you.

Cookies and tracking

We use cookies necessary for the site to function and analytical ones to understand how it is used. You can set your browser to refuse non-essential cookies, noting that refusing the essential ones may stop parts of the service working.

Securing the data

An SSL/TLS encrypted connection, encryption of stored data, access rights limited on a need-to-know basis, and periodic security reviews. No system is wholly immune, but we commit to notifying affected people and the competent authorities of any breach touching their data.

Your rights and how to use them

You have the right to access, correct and erase your data, to restrict or object to its processing, and to receive a copy in a portable format. Send your request to the contact address below and we reply within the period applicable law sets.

Transfers outside your country

Your data may be processed on servers outside your country. Where that happens we rely on appropriate contractual safeguards that preserve the same level of protection your national law provides.

Changes to this policy

We may update this policy whenever the service or the regulatory requirements change. The last-updated date appears at the top of this page, and we notify you of material changes by the email address on record.

Who to contact

For any question or request about your privacy or about exercising your rights, write to the company address shown in the footer of this page.