Privacy Policy
Last updated: 13 June 2026
Effective date: 13 June 2026
1. Introduction
This Privacy Policy explains how [LEGAL_ENTITY_NAME] — Key Asset Technologies (UAE Branch) ("we", "us") collects, uses, shares, and protects personal data when you use KAT Exchange. We aim to comply with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and applicable US state privacy laws.
[REVIEW WITH UAE LAWYER] Confirm the applicable data-protection regime(s), the lawful bases, and any Free Zone data rules before publishing.
2. Data Controller
- Controller: [LEGAL_ENTITY_NAME] — Key Asset Technologies (UAE Branch).
- Address: [REGISTERED_ADDRESS] — Industrial Parkway, Sharjah, UAE.
- Privacy contact: [PRIVACY_EMAIL].
3. Information We Collect
- Account information — name, email, phone, company details.
- Identity / KYC documents — government ID, proof of address, business registration.
- Bidding activity — bids, watchlists, and auction history.
- Payment information — processed by our payment providers; we do not store full card numbers.
- Technical data — IP address, device, and browser information.
- Cookies and similar technologies — see our Cookie Policy.
4. How We Use Your Information
- Operate your account and authenticate you.
- Run auctions, process bids, payments, and invoices.
- Meet legal, tax, accounting, and anti-money-laundering obligations.
- Provide support and communicate about your account.
- Improve and secure the Platform.
5. Lawful Basis
We process personal data where necessary to perform our contract with you, to comply with legal obligations, for our legitimate interests in operating the Platform, and/or with your consent. [REVIEW WITH UAE LAWYER]
7. International Transfers
Your data may be processed in the UAE, the United States, and other countries where our providers operate. We apply appropriate safeguards for cross-border transfers. [REVIEW WITH UAE LAWYER]
8. Data Security
- Encryption in transit (TLS) and at rest.
- Access controls and audit logging.
- Regular security reviews.
- Breach notification to affected individuals and regulators where required by law.
9. Data Retention
- Account & transaction records — retained while active and for [RETENTION_PERIOD] thereafter to meet tax and legal requirements.
- Marketing data — until you opt out.
10. Your Rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent. To exercise rights, contact [PRIVACY_EMAIL].
11. Children
The Platform is not directed to anyone under 18, and we do not knowingly collect their data.
12. Changes
We may update this Policy and will post the new version with a revised "last updated" date.
13. Contact
Privacy questions: [PRIVACY_EMAIL].
Questions? privacy@katexchange.com
Last reviewed by counsel: 13 June 2026
