Privacy Policy

1. Introduction

KeepHot (“we”, “us”, “our”) operates a digital platform for account management, wallet activity, and strategy allocation. This Privacy Policy explains how we process personal data when you use our website and services. It is written to align with common GDPR expectations and good industry practice. It does not constitute legal advice for your specific situation.

2. Data we collect

We may collect and process categories of data including:

• Account and identity data: email address, password hash, verification/KYC information you submit (e.g. name, date of birth, phone, government ID documents when required for compliance).
• Financial and activity data: deposit and withdrawal instructions, transaction history, strategy allocations, referral relationships, and support communications.
• Technical data: IP address, device/browser type, approximate location derived from IP, timestamps, and security logs.

3. Cookies and similar technologies

We use cookies and similar technologies that are strictly necessary for authentication, session security, fraud prevention, and basic site functionality. Where we use optional analytics or preference cookies, we will rely on your consent where required. You can control cookies through your browser settings; blocking essential cookies may prevent parts of the service from working.

4. How we use data

We process personal data to:

• Provide, secure, and improve the platform;
• Verify identity where required for certain rails (e.g. bank transfer);
• Process transactions, detect abuse, and meet legal obligations;
• Communicate service-related notices and respond to support requests;
• Maintain audit trails for compliance and dispute handling.

5. Legal bases (GDPR)

Where GDPR applies, we rely on appropriate bases such as: performance of a contract (providing the service); compliance with legal obligations; legitimate interests (e.g. security, fraud prevention, product improvement) balanced against your rights; and consent where required (e.g. certain cookies or marketing, if offered).

6. Sharing and processors

We may share data with vetted service providers (hosting, email, analytics, payment or chain infrastructure) who process data on our instructions. We may disclose information if required by law, to enforce our terms, or to protect rights, safety, and security. We do not sell your personal data.

7. International transfers

If data is transferred outside the UK/EEA, we implement appropriate safeguards such as standard contractual clauses or equivalent mechanisms where required.

8. Retention

We retain data only as long as necessary for the purposes above, including legal, tax, and regulatory retention periods. KYC documents and transaction records may be kept longer where the law requires.

9. Your rights (GDPR)

Subject to applicable law, you may have rights to access, rectify, erase, restrict processing, object, data portability, and withdraw consent where processing is consent-based. You may lodge a complaint with a supervisory authority. To exercise rights, contact us using the details provided on the platform.

10. Security

We implement administrative, technical, and organizational measures designed to protect personal data. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

11. Children

Our services are not directed to children. We do not knowingly collect data from anyone under 16.

12. Changes

We may update this policy from time to time. Material changes will be communicated as appropriate via the site or email.