Privacy Policy

Protecting your privacy rights is important to CryptaLend Inc. (together with its affiliates and subsidiaries, "CryptaLend") and we are committed to maintaining and protecting the trust and confidence of our users when handling personal information.

Please take a moment to read this Privacy Policy carefully. This Policy describes when, why and how CryptaLend collects, uses, discloses, and protects your personal information when you visit the website www.cryptalend.com and access the platform (our "Website") and applies to information we collect:

• On this Website
• In email, text, and other electronic messages between you and this Website
• Through mobile and desktop applications you download from this Website, which provide dedicated non-browser-based interaction between you and this Website
• When you interact with our advertising and applications on third-party websites, plug-ins, social networks, search engines or services, if such applications or advertising include links to this Policy
• When you communicate or interact with us as part of our marketing practices, or at industry events and conferences

This Policy may change and/or be updated from time to time. Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates.

CryptaLend will only use your personal and financial information in accordance with this Policy unless otherwise required by applicable law. We take steps to ensure that the personal and financial information we collect about you is adequate, relevant, in compliance with the legal and regulatory obligations of the jurisdictions in which we operate, and used for the limited purpose of originating, administering, and processing our Services.

Personal information typically includes data that identifies an individual or relates to an identifiable individual. This includes information CryptaLend can reasonably use to, directly or indirectly, identify you, such as:

• Your name
• Mailing address
• Email address
• Telephone number
• Internet protocol (IP) address used to connect your computer to the internet
• Username or other similar identifier
• Billing and account information
• Government IDs
• Any other identifier CryptaLend may use to contact you

We collect personal information about you in various ways when you use our Services, such as your name, email address, date of birth, company information, and other information you provide us with when you contact us. We may require personal information for verification purposes.

We may collect information from your device by using cookies and other tracking technology such as your geo-location data, voice recordings, motion tracking, IP address, Wi-Fi connectivity, the version of our application used, the number of times you visit our Website and the amount of time spent on our Website.

We collect personal information about you through formal identification information, including government and state/provincial issued ID cards, tax ID number, social insurance number or any other comparable identification number issued by a government, social security number, passport number, driver's license details, national identity cards, visa and/or any other information deemed necessary to comply with our legal obligation under financial, anti-money laundering or counter terrorism financing laws.

While you navigate through and interact with our Website, we use cookies and other automatic data collection technologies to collect certain information about you, your equipment, browsing actions, and patterns, including:

• Details of your visits to our Website
• Traffic data
• Location data
• Logs
• Information about your computer and internet connection, including your IP address, operating system, and browser type
• Other communication data and the resources that you access and use on the Website

Publicly Available Information

We obtain information about you from public databases and ID verification partners to verify your identity in accordance with applicable law. ID verification partners use a combination of government records and publicly available information about you to verify your identity.

Such information may include your name, address, job role, public employment profile, credit history, status on any sanctions lists maintained by public authorities, and other relevant data. We obtain such information to comply with our legal obligations, such as anti-money laundering laws.

In some cases, we may process additional data about you to assess risk and ensure our services are not used fraudulently or for other illicit activities. In such instances, processing is necessary for us to continue to perform our contractual obligations towards you and others. In addition, in some instances we may require your consent to process or transfer data with our third party partners.

We may analyze public blockchain data to ensure parties utilizing our services are not engaged in illegal or prohibited activity under our Terms and Conditions, and to analyze transaction trends for research and development purposes.

Data analysis techniques on a given blockchain enable us to identify other information about you. As part of our security, anti-fraud and/or identity verification and authentication checks, we may conduct such analysis to collect and process such information about you. You acknowledge and agree to allow us to perform such practices.

If you are under 18, do not use our Website or provide any information on this Website or on or through any of its features.

If we become aware, or if you learn that an individual under the age of 18 has provided us with personal information or used our Services contrary to these rules, please contact us as described in Section 12 "Contact Us" and we will delete the information from our systems.

The information collected and the practices described in this Policy are intended to provide you with the best experience possible, protect you from risks related to improper use and fraud, comply with various legal and regulatory obligations, and help us maintain and improve our Services.

4.1 Protecting Our Customers and Us

We use the information about you to resolve disputes and protect your rights, property, safety and interests. We also process your personal information in order to administer and protect our business, prevent and mitigate fraud, criminal activity, or misuses of our services, and to ensure the security of our systems, architecture and networks, and to protect you against account compromise or loss of funds.

4.2 To Provide You With Our Services And Keep You Informed

We process your personal information to provide our services to you. For example, when you want to send or withdraw crypto assets to or from our platform, we require certain information such as your identification, contact information, and wallet information. We, generally, cannot provide our services to you without such information.

Third parties such as identity verification services may also access and/or collect your personal information when providing identity verification and/or fraud prevention services.

4.3 De-identified or Aggregate Information

We may use the information we have about you to create de-identified or aggregate information, such as de-identified demographic or location information, information about devices used to access our services, or other relevant analyses. We may also share such data with any third parties, including advertisers, promotional partners, sponsors, event promoters, etc.

At the time that your personal information is collected, we rely on the following legal bases for processing your information. We usually only collect or process your data where:

• We are legally required to
• Processing is necessary to perform any contracts we entered with you (or to take steps at your request prior to entering into a contract with you)
• To comply with the law/public interest
• For our legitimate interests to operate our business or to protect our or your property, rights, or safety
• Where you have consented to the processing of your personal information for specific purposes

When we collect or process your personal information based on our legitimate interests and providing our Services, we ensure that we consider and balance any potential impact on you and your rights under privacy protection laws and take adequate steps for the storage and protection of your information and data.

6.1 Our Affiliates

We may share personal information with our affiliates that distribute or market our Services using this information in accordance with this privacy policy.

6.2 Service Providers and Third Parties

We may share your personal information with financial, accounting, legal, marketing, communication and technology companies to provide services such as:

• Data processing
• Proof-of-reserves attestations
• Administrative services
• Regulatory support
• Legal services and mediation
• Liquidity services
• Bank services
• Cloud storage
• Authentication support
• Payment processing
• Technical support
• Sales and client support
• Data hosting
• Marketing analytics
• Auditors and accountants
• Cryptocurrency exchange and custodians
• Cryptocurrency forensic analysis services

We may share your personal information with contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.

6.3 Regulatory and Government Authorities

We may share your personal information with law enforcement, regulatory agencies, and self-regulatory agencies to help prevent fraud and/or other illegal activities, for legal proceedings, or as otherwise required by law. We may also be required to disclose your personal information to comply with court orders, access to information requests, regulatory requirements or legal processes, including responding to any government or regulatory requests.

We may also share your information to protect the rights, property or safety of CryptaLend, our users, clients, or others. This may include exchanging information with companies or organizations for the purpose of fraud protection and credit risk reduction.

To Process Transactions

We may share your information in order to be able to process certain transactions. We may disclose personal information to third parties in order to administer or process a transaction, product or service you have authorized or requested, or in the context of facilitating the execution of a transaction. This includes sharing your information with financial institutions with which we partner to process payments which you have authorized.

To Meet Legal Obligations

We may share your information in order to meet our legal obligations, including our know-your-customer (KYC) and anti-money-laundering obligations (AML). We are required to validate our clients' identities by applicable laws and regulatory requirements and rely on third-party services to perform these validations. Personal information that you provide to us during the account opening process is passed to these service providers at account opening and on an ongoing basis thereafter.

To Protect Legal Rights

We may share your information in order to protect our legal rights. We may disclose or transfer information we collect upon account closing where you have a deficient balance or for any other reason.

Business Transfers

We may also share or transfer your personal information, in accordance with applicable law, to a buyer of our company, or a buyer of substantially all of its assets. You acknowledge that such transfers may occur, and that any purchaser of or successor to our business or its assets may continue to collect, use and disclose your information as set forth in this Policy.

We may transfer your personal information outside your home jurisdiction to our subsidiaries, service providers and business partners who are engaged on our behalf. To the extent that we transfer your personal information outside of your home jurisdiction, we will ensure that the transfer is lawful and that all persons to whom we transfer such data are obliged to comply with all applicable laws, rules and regulations. Additional notice may not be provided.

We are strongly committed to keeping your personal information safe. This commitment exists throughout the lifecycle of your personal data, starting with the design of our services. We protect your personal information by maintaining physical, electronic, and procedural safeguards in compliance with the applicable laws and regulations.

For example, we use computer safeguards such as firewalls and data encryption, we enforce physical access controls to our physical sites and files, and we restrict access to personal information only for those employees who are authorized and require it to fulfill their job responsibilities.

If you close your CryptaLend account, we will mark your account in our database as "closed," but will keep your account information in our database in accordance with our retention policy. This is necessary in order to deter fraud and to ensure that we meet all our legal and regulatory obligations.

However, if you close your account, your personal information will not be used by us for any further purposes, nor shared with third parties, except as necessary to prevent fraud and assist law enforcement, as required by law, or in accordance with this Privacy Policy.

11.1 Right to Access

You may request we provide you a copy of the personal information we hold about you and certain information about our processing of this information. In accordance with law, this request must be in writing. The information will be provided within 30 days.

11.2 Rectification

It is important to us that your personal information is up to date. We will take all reasonable steps to make sure that your personal information remains accurate, complete and up to date. If the personal information we hold about you is inaccurate or incomplete, you are entitled to have it rectified.

If we have disclosed your personal information to others, we will let them know about such rectification where possible. If you enquire from us, if possible and lawful to do so, we will also inform you with whom we have shared your personal information so that you can contact them directly.

11.3 Right to Erasure

You may request we delete your personal information from our records subject to applicable law. For example, we may deny your request if retaining your personal information is required under certain circumstances, including but not limited to complying with a legal obligation; establishing, exercising or defending legal claims; or performing a task in the public interest or in the exercise of official authority.

11.4 Right to Data Portability

You may request we transfer a machine-readable copy of your personal information to you or a third party of your choice. In this case, we may provide you, or a third party, with your personal information in a machine-readable format. This only applies to personal information you have consented for us to use and will be subject to a potential fee associated with gathering such information as permitted by law. The request must be submitted in writing and the transfer, if we agree to such transfer will take place within 30 days of your written request.

11.5 Right to Restrict Processing

In certain jurisdictions, applicable law may provide you with the right to restrict or object to us processing your personal information under personal circumstances. You may request in writing that we restrict or suppress the processing of your personal information for various reasons, such as:

• To establish the accuracy of the personal information
• Where the processing is unlawful, but you do not want your personal information erased
• Where we no longer need to process your personal information, but the information must be retained for legal reasons
• Where you have objected to our processing your personal information, but we need to determine whether our legitimate interest overrides your objection

11.6 Right to Object

You may object to our reliance on our legitimate interests as the basis of our processing of your personal information that impacts your rights. You also may object to our process of your personal information for direct marketing purposes.

11.7 Right to Withdraw Consent

You may withdraw your consent at any time where we are relying on it to process your personal information. Withdrawing your consent does not affect the lawfulness of our processing of your personal information prior to such withdrawal of consent.

11.8 Right Not to Sell

11.9 Jurisdictional Specific Privacy Rights

Depending on the jurisdiction where you reside or where our Services are provided, you may have certain additional statutory rights over the personal information we collect about you. You may exercise these rights at any time by contacting us. Note that we may refuse to grant your requests in whole or in part as permitted by applicable law.

CryptaLend will post any changes made to this Policy on this page. This Policy is regularly updated to ensure that any new obligations and technologies, as well as any changes to our business operations and practices. This Policy is updated to be in compliance with regulations and legal obligations. We endeavor to keep abreast of the changing regulatory environment.

Your personal information will be governed by our most recent Privacy Policy. Your continued use of this Website after we make changes indicates that you accept and consent to those changes. You are responsible for ensuring we have an up-to-date active and deliverable email address for you/contact information, and for periodically visiting our Website and this Privacy Policy to check for any changes.

To the extent possible, we will endeavor to notify you in advance of any material changes to this Policy and obtain your consent to any new ways that we collect, use, and disclose your personal information.

To ask questions or comment about this Privacy Policy and our privacy practices, contact us at: