Privacy Policy

Identification and contact data: name, company, email address, phone number and, where required by law, identity-document data.

Transaction data: amounts, currencies, applied rates and fees, wallet addresses, transaction hashes, networks used, timestamps, agent and location references.

Account and technical data: login records, two-factor authentication status, audit-log entries, device and browser information, IP address.

To provide the Services and execute agreed transactions (performance of a contract).

To comply with anti-money-laundering, sanctions, accounting and tax obligations (legal obligation).

To prevent fraud, secure the platform and keep an audit trail (legitimate interest).

To respond to enquiries submitted through our forms or by email (contract or legitimate interest).

Service providers acting on our instructions: cloud hosting and database infrastructure, email delivery, and on-chain data providers used to verify transfers.

Competent authorities where disclosure is required by law or a lawful order. We do not sell personal data and do not use it for third-party advertising.

Transfers recorded on a public blockchain are permanent, public and outside our control. We cannot delete, alter or hide an on-chain transaction.

Wallet addresses and transaction hashes stored in our system are linked to your account for accounting, verification and legal-compliance purposes.

Transaction, accounting and compliance records are kept for the period required by applicable law, as a rule at least ten years from the end of the relevant financial year.

Account, technical and enquiry data is kept only as long as necessary for the purpose above, then deleted or anonymised.

Access is role-based and limited to what each role needs. Administrator and agent access requires two-factor authentication, and privileged actions are written to an audit log.

Data is stored on managed cloud infrastructure with encryption in transit and access controls. No system is completely secure; suspected incidents should be reported to info@makbit.io immediately.

Subject to legal limits, you may request access to your data, correction of inaccurate data, deletion, restriction of processing, portability, and you may object to processing based on legitimate interest.

Requests are handled within the statutory deadline. Rights may be limited where we are legally required to retain records. You may also lodge a complaint with the competent data-protection authority.

We use only cookies and local storage that are necessary to keep you signed in and to remember your language and interface preferences.

If we introduce analytics or marketing cookies in the future, we will request consent before setting them.