Understanding Our Privacy Policy in Five Minutes

Privacy policies explain how organisations collect, use, store, and share personal information. For digital asset users, they can also clarify how identity verification, financial transactions, and regulatory obligations affect how personal data is handled.

Although these documents can be lengthy, knowing what to look for makes them easier to understand. Five questions provide a practical starting point.

1. What information do we collect?

Look for specific categories of personal information, including identity details, contact information, financial records, wallet addresses, and technical data.

PinovX's Privacy Policy identifies these categories, along with identity verification results, due diligence documentation, transaction monitoring data, and support communications. Understanding what is collected helps you assess the information you may be expected to provide.

2. Why is the information collected?

A privacy policy should explain the purposes for collecting and processing information. These may include providing services, managing accounts, processing transactions, verifying identities, preventing fraud, and meeting legal obligations.

PinovX identifies contractual necessity, legal obligations, legitimate interests, and consent, where applicable, as its bases for processing personal information.

3. Who can access or receive your information?

Review the data-sharing section to understand which third parties may receive your information and under what circumstances.

PinovX states that it does not sell, rent, or trade personal information. It may share information with identity verification providers, payment processors, banking partners, cloud hosting providers, and other service providers. Information may also be disclosed to regulators and law enforcement authorities where required by applicable law.

4. How long is your information retained?

Retention periods vary according to the type of information and the legal requirements that apply. Look for specific periods or a clear explanation of the criteria used to determine how long records are kept.

PinovX's Privacy Policy sets out retention periods for account information, transaction records, identity verification documents, and communications records. These requirements are particularly relevant when considering account closure or a request to delete personal information.

5. What rights do you have?

Check whether the policy explains how to request access to your information, correct inaccuracies, object to certain uses, or exercise other applicable privacy rights.

PinovX directs privacy-related enquiries to compliance@pinovx.com and states that it responds within 30 days of receipt. Specific rights may be limited by legal or regulatory obligations.

It is also worth reviewing the security section. PinovX describes measures including encryption, optional multi-factor authentication, security testing, and restricted access to personal information. The policy also acknowledges that no system can guarantee absolute security.

Reading a privacy policy does not need to mean studying every paragraph in one sitting. Starting with these five questions gives you a clearer understanding of how your information is handled.

A privacy policy is more than a document to accept during registration. It is a resource for understanding an organisation's responsibilities and your rights.