Privacy Policy – Waluuta

Company Registration: Waluuta OÜ, Estonia
Contact: info@waluuta.com

Waluuta (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we handle your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Estonian law.

1. Principles of Data Collection

Waluuta is designed to respect user privacy. We do not normally collect personal data, unless it is:

• Required for compliance with applicable laws and regulations, including Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements.
• Necessary to provide services where identification is legally mandated.

We strive to minimize data collection and only process what is strictly necessary.

2. Types of Data We May Collect (If Required by Law)

Depending on your use of Waluuta, and only where legally required, we may collect:

• Identity Verification Data: Name, date of birth, nationality, government-issued ID, and proof of address.
• Contact Information: Email address and country of residence.
• Wallet or Transaction Data: Public blockchain addresses used in transactions.
• Usage Data: IP address, browser/device type, and anonymized usage patterns.
• Compliance Data: Information required by regulators.

3. Legal Basis for Processing

We process personal data only when one or more of the following legal bases apply:

• Legal Obligation (e.g., KYC/AML compliance)
• Legitimate Interest (e.g., fraud prevention)
• Consent (you may withdraw consent at any time)

4. Data Minimisation & Storage

We retain only the data required by law and for legally mandated durations. Data is:

• Stored securely on encrypted servers
• Hosted in the EU/EEA with GDPR-compliant providers
• Reviewed and deleted when no longer needed

5. Your Rights Under GDPR

As an EU data subject, you have the right to:

• Access your personal data
• Request correction or deletion
• Restrict or object to processing
• Request data portability
• File a complaint with your local Data Protection Authority (DPA)

To exercise these rights, contact us at info@waluuta.com.

6. Cookies & Analytics

We may use essential cookies and limited analytics (with IP anonymisation). We do not use tracking cookies or behavioral advertising.

You can manage cookies in your browser settings.

7. Sharing of Data

We do not sell your data. We may share data only with:

• Regulators, if required by law
• Trusted third-party providers (e.g., KYC processors)
• Public blockchain networks (wallet addresses are public)

8. Data Security

We protect data through encryption, secure access controls, and regular audits.

9. Cross-Border Transfers

If data is transferred outside the EU/EEA, appropriate GDPR safeguards (e.g., Standard Contractual Clauses) will be applied.

10. Children’s Data

Waluuta is not intended for users under 18. We do not knowingly collect data from minors.

11. Updates to This Policy

This policy may change to reflect legal or operational updates. Continued use of Waluuta means acceptance of the latest version.

12. Contact Information

If you have any questions or wish to submit a data request, please contact us at:

Waluuta OÜ
Estonia
Email: info@waluuta.com