Privacy Policy

Norhart Pro, Inc. ("Norhart Pro," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information about you when you use our Platform, and describes your rights and choices regarding that information. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Platform.

1. Overview

We are the data controller for personal information we process about you in connection with the Platform. This policy applies to information collected through our website, mobile application, and any other channels through which we offer our services. It does not apply to third-party services or websites linked to from our Platform.

2. Information We Collect

2.1 Information You Provide

Identity Data: Full name, date of birth, nationality, government-issued identification documents.
Contact Data: Email address, phone number, postal address.
Financial Data: Bank account details, funding method, wallet addresses, transaction history.
Account Data: Username, password (stored in hashed form), profile preferences.
Communications: Messages sent to our support team, survey responses, feedback.

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, time spent, click paths, session durations.
Device & Technical Data: IP address, browser type and version, operating system, device identifiers, time zone.
Log Data: Server logs, error reports, API call records.
Location Data: Country and region inferred from IP address.

2.3 Information from Third Parties

KYC/AML verification data from identity verification providers;
Credit and fraud risk signals from screening services;
Blockchain transaction data from public ledgers;
Referral information if you were referred by another user.

3. How We Use Your Data

We process your personal data on the following legal bases and for the following purposes:

Contract performance: Account creation, order execution, settlement, customer support, fee billing.
Legal obligation: KYC/AML checks, sanctions screening, regulatory reporting, fraud prevention, record-keeping.
Legitimate interests: Platform security and abuse prevention, analytics and product improvement, referral programme administration.
Consent (where required): Marketing communications, optional personalisation features. You may withdraw consent at any time.

We do not sell your personal data. We do not use automated decision-making that produces legal or similarly significant effects on you without human review.

We may share your information with:

Service Providers: Third-party custodians, payment processors, KYC providers, cloud infrastructure providers, analytics vendors, and email service providers who process data on our behalf under strict data processing agreements.
Regulatory & Law Enforcement: Where required by law, regulation, court order, or governmental authority.
Professional Advisors: Lawyers, auditors, and insurers bound by duties of confidentiality.
Business Transfers: In connection with a merger, acquisition, financing, or sale of all or part of our business.

We do not share your personal data with third parties for their own marketing purposes.

5. Cookies & Tracking Technologies

We use cookies and similar tracking technologies (pixels, local storage) to operate the Platform and improve your experience. Categories of cookies we use:

Strictly Necessary: Session management, security, authentication. Cannot be disabled.
Functional: Remembering your preferences and settings.
Analytics: Understanding how users interact with the Platform (e.g., Google Analytics). We anonymise IP addresses.
Performance: Diagnosing errors and optimising Platform speed.

You can control non-essential cookies via your browser settings or our cookie preference centre. Disabling certain cookies may affect Platform functionality.

6. Data Retention

We retain your personal data for as long as your account is active and for a period thereafter as required by law. Regulatory and AML obligations typically require us to retain transaction records and identity verification data for a minimum of five (5) years following account closure. We will securely delete or anonymise your data when it is no longer required.

7. Security

We implement industry-standard technical and organisational security measures to protect your data, including AES-256 encryption at rest, TLS 1.3 in transit, multi-factor authentication, role-based access controls, regular penetration testing, and 24/7 security monitoring. However, no system is completely secure; you use the Platform at your own risk and should take steps to protect your own credentials.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your data, subject to legal retention obligations.
Restriction: Request that we limit the processing of your data in certain circumstances.
Portability: Receive your data in a structured, machine-readable format.
Objection: Object to processing based on legitimate interests or for direct marketing purposes.
Withdrawal of consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, contact our privacy team at privacy@norhartpro.com. We will respond within 30 days. We may need to verify your identity before processing your request.

9. International Data Transfers

We operate globally, and your data may be transferred to and processed in countries outside your own, including the United States, which may not have data protection laws equivalent to those in your jurisdiction. Where required, we rely on Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Agreement, or other appropriate safeguards to protect such transfers.

10. Children's Privacy

The Platform is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly. If you believe a minor has provided us with personal data, please contact privacy@norhartpro.com.

11. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act, including the right to know, delete, correct, opt out of sale or sharing (we do not sell or share personal information), and limit use of sensitive personal information. To exercise these rights, contact us at privacy@norhartpro.com or call our toll-free number listed on our website. We will not discriminate against you for exercising your rights.

12. UK & EEA Residents (UK GDPR / GDPR)

If you are located in the UK or European Economic Area, you have rights under the UK GDPR and EU GDPR respectively, as set out in Section 8 above. You also have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or your national data protection authority in the EEA). Our UK/EEA representative can be contacted at privacy@norhartpro.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Platform or by emailing you at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects when the policy was last revised. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

14. Contact Us & Data Protection Officer

For privacy-related questions, requests, or complaints, please contact:

Privacy Team / Data Protection Officer
Norhart Pro, Inc.
Email: privacy@norhartpro.com
Website: www.norhartpro.com