Privacy Policy

This Privacy Policy explains how [LEGAL_ENTITY_NAME] — Key Asset Technologies (UAE Branch) ("we", "us") collects, uses, shares, and protects personal data when you use KAT Exchange. We aim to comply with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and applicable US state privacy laws.

[REVIEW WITH UAE LAWYER] Confirm the applicable data-protection regime(s), the lawful bases, and any Free Zone data rules before publishing.

• Controller: [LEGAL_ENTITY_NAME] — Key Asset Technologies (UAE Branch).
• Address: [REGISTERED_ADDRESS] — Industrial Parkway, Sharjah, UAE.
• Privacy contact: [PRIVACY_EMAIL].

• Account information — name, email, phone, company details.
• Identity / KYC documents — government ID, proof of address, business registration.
• Bidding activity — bids, watchlists, and auction history.
• Payment information — processed by our payment providers; we do not store full card numbers.
• Technical data — IP address, device, and browser information.
• Cookies and similar technologies — see our Cookie Policy.

• Operate your account and authenticate you.
• Run auctions, process bids, payments, and invoices.
• Meet legal, tax, accounting, and anti-money-laundering obligations.
• Provide support and communicate about your account.
• Improve and secure the Platform.

We process personal data where necessary to perform our contract with you, to comply with legal obligations, for our legitimate interests in operating the Platform, and/or with your consent. [REVIEW WITH UAE LAWYER]

• Logistics partners — to fulfil collection and delivery.
• Payment processors — to take payment.
• Service providers — hosting, email, and infrastructure.
• Authorities — where required by law or to protect our rights.
• Group entities — including Key Asset Technologies LLC for sourcing and fulfilment.

We do not sell your personal data.

Your data may be processed in the UAE, the United States, and other countries where our providers operate. We apply appropriate safeguards for cross-border transfers. [REVIEW WITH UAE LAWYER]

• Encryption in transit (TLS) and at rest.
• Access controls and audit logging.
• Regular security reviews.
• Breach notification to affected individuals and regulators where required by law.

• Account & transaction records — retained while active and for [RETENTION_PERIOD] thereafter to meet tax and legal requirements.
• Marketing data — until you opt out.

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent. To exercise rights, contact [PRIVACY_EMAIL].

The Platform is not directed to anyone under 18, and we do not knowingly collect their data.

We may update this Policy and will post the new version with a revised "last updated" date.

Privacy questions: [PRIVACY_EMAIL].