Privacy Policy

This Privacy Policy describes how we, Credbull Labs Limited with registration number C110023, and with registered address at Level G (Office 1/1302) Quantum House 75, Triq L- Abate, Rigord, Ta Xbiex, Xbx 1120, Malta. ("Credbull", "we", "our", "us") collect and use your personal data and cookies in connection with your use of the Website and the Services.

This Privacy Policy consists of two parts:

• •Privacy Notice – which describes how we collect and use your personal data;
• •Privacy Notice for EU/EEA Residents – which supplements the Privacy Notice by providing information on personal data processing required under the General Data Protection Regulation;
• •Cookie Notice – which describes how cookies and similar technologies are used.

All terms not defined in this Privacy Policy shall have the meaning as defined in the Terms or in the GDPR. The following terms used in this Privacy Policy shall have the meaning set forth below:

The current version of the Privacy Policy has been adopted and is effective as of January 2025.

We may change the Privacy Policy from time to time. For example, we may do this when it is necessary due to changes in the Terms, changes in legal requirements or changes in the way we use your personal information. We may also amend the Privacy Policy to make it clearer, more accessible, and/or easier for you to understand.

You should check the Privacy Policy before using the Website and/or the Services. If we change the Privacy Policy, we will give you access to previous versions of the Privacy Policy.

1.1 Controller

We, Credbull, are the controller of your personal data to the extent this Privacy Policy applies.

1.2 Purposes of processing of personal data

We collect and process your personal data in connection with your use of the Website and the Services. As a rule, we process your personal data to the extent necessary to provide the Services, ensure smooth operation of the Website, as well as for other legitimate purposes. You can find the description of such purposes and legal grounds for processing in greater detail below.

1.3 Sources of personal data

We collect your personal data from the following sources:

1.4 Right to request access and correction of personal data

To exercise your right(s) contact us (please consult Section 1.5).

You have a right to demand access to your personal data held by us and to be able to correct that personal data where the personal data is inaccurate, incomplete, misleading, or not up-to-date, except where compliance with a request to such access or correction is refused under the Data Protection Act.

1.5 Contact details

1.6 Class of third parties to whom personal data is disclosed

As a rule, we do not share your personal data unless it is necessary. For example, we may share your personal data in connection with the provision of the Services under the Terms. We may disclose your personal data to the following categories of recipients:

• •our business partners (including service providers and contractors), such as marketing and advertising services providers, analytical tools providers, payment services providers, data storage providers;
• •banks, insurance companies and/or other financial institutions;
• •Credbull group entities, including our affiliates, subsidiaries and, in the event of a merger, acquisition or reorganisation, the third party involved;
• •public authorities or other third parties when required by law and subject to statutory conditions and restrictions;
• •professional advisors, such as lawyers, accountants, consultants, and tax advisors;
• •users of the blockchain networks used in connection with provision of the Services;
• •other third parties if admissible under Applicable Data Protection Law (e.g. with your consent).

1.7 Obligatory or voluntary provision of personal data

2.1 Your privacy and blockchain

This is due to the way blockchain technology works, where transparency and immutability of the data stored on the chain is one of the fundamental principles of the technology. Because blockchain networks are decentralized, we (or our affiliates) are not able to delete or change your personal data from such blockchain networks. Please consult relevant information about the potential risks associated with using blockchain technology set out in the Terms.

2.2 Categories of personal data

We use your personal data only when it is lawful under the Applicable Data Protection Law and only to the extent it is necessary to achieve our purposes. We collect and use the following types of your personal data:

2.3 Legal grounds of processing

2.4 Data storage

We store your personal data only as long as necessary for the purposes we collected it. This means that the duration of storage depends on the purpose of processing.

2.5 Data transfers

The level of protection for the personal data outside the European Economic Area (EEA) differs from that provided by the EU law. For this reason, we transfer your personal data outside the EEA only when necessary and with an adequate level of protection.

We secure the adequate level of protection primarily by cooperating with processors of the personal data in countries for which there has been a relevant European Commission decision finding an adequate level of protection for the personal data.

2.6 Your rights

To exercise your right(s) contact us (please consult Section 1.1).

2.7 Automated decision making

Cookies are small text files installed on your device that collect information which, generally, facilitates use of the Website and the Services. For example, cookies may remember your language preferences or other settings of your Internet browser. In most cases information used in connection with cookies is personal data. In such cases, the Privacy Notice applies to such personal data.