This Privacy Policy explains how Nilos Financial Services Ltd (“Nilos”, “we”, “us”, “our”) collects, uses, stores, and protects personal data when you use our website, platform, products, and services (together, the “Services”).
We are committed to safeguarding personal data and processing it in a lawful, fair, and transparent manner.
Nilos Financial Services Ltd is the main controller of personal data processed for the purposes described in this Policy. Other affiliated companies within the Nilos group may act as processors or joint controllers when they support the delivery of our Services.
A list of group entities and their jurisdictions is available upon request at dataprotection@nilos.io.
We may collect the following categories of personal data:
We do not knowingly collect data from children.
We process personal data for the following purposes:
Where required by law, we will request your consent (e.g. for non-essential cookies or direct marketing).
We may use automated tools (e.g., risk scoring, wallet screening) to support our AML and fraud obligations.
You have the right to obtain human review of decisions that have a legal or similarly significant effect. You may request this by contacting privacy@nilos.io.
Personal data may be transferred to service providers located outside your country of residence, including outside the European Economic Area.
Where such transfers occur, we use appropriate safeguards such as:
You may request information on the safeguards applied by contacting us.
We may share personal data with:
All processors acting on our behalf are subject to confidentiality and data-protection obligations.
We retain personal data as long as your account is active.
After account closure, we retain data only as long as permitted or required by law, to meet statutory and regulatory obligations.
For example, KYC/AML data may be retained for up to five (5) years after termination of the relationship. We periodically review data and delete or anonymise it when no longer required.
We implement appropriate technical and organisational security measures including:
In case of a personal data breach likely to pose a risk to individuals, we will notify the relevant supervisory authority and affected individuals where required by law.
We use cookies necessary for the functioning of the Service.
Non-essential cookies (e.g. analytics) are only used with your prior consent. You can withdraw consent at any time via our cookie settings.
Depending on the laws applicable to you, you may have the right to:
You may exercise your rights by contacting dataprotection@nilos.io.
If you believe we have not resolved your request, you may lodge a complaint with your relevant data protection authority.
We may update this Privacy Policy from time to time. When changes are material, we will notify you by email or via the platform before the effective date.
Older versions will be archived and available on request.
For questions, or to exercise your rights, contact: dataprotection@nilos.io