Privacy Notice

At Cevsterflax, safeguarding your personal information is a core priority. We process your data openly, solely for defined objectives, and in line with Canadian privacy laws like PIPEDA. This document explains what information we gather, the reasons behind it, retention duration, and the security measures we employ.

1. Data Controller Information

The entity responsible for managing your personal information under PIPEDA is the operator of this website and the Cevsterflax platform. Contact information and further details are listed in the site's legal notices. For privacy inquiries, our data protection officer is available to assist you.

2. Types of Data Collected

We collect and handle only the information essential to deliver our services, fulfill legal responsibilities, and maintain a secure platform. The data includes:

  • Identification details: full name, birth date (used to verify age and identity).
  • Contact information: email, optional phone number, Canadian residence, and potentially mailing address.
  • Account and transaction data: payment details, deposits, withdrawals, and transaction logs.
  • Technical and usage details: IP address, browser type, device specifics, access timestamps, and connection records.
  • Verification documents: identity proofs, address confirmations, or other KYC/AML required paperwork (only when mandated by law).

We typically do not gather sensitive personal categories like health information or religious views unless legally required or with your explicit permission.

3. How We Collect Data

Data is obtained through multiple secure means:

  • Information you provide directly: such as during sign-up, profile modifications, document uploads, or through contact forms.
  • Automatically gathered data: such as cookies, server logs, analytics, and device-related information during platform use.
  • Information from third-party sources: including payment processors (for transactions), identity verification services (KYC/AML), or with your consent, social login providers.

4. Reasons for Processing

Your personal data is processed exclusively for specific, lawful, and transparent purposes:

  • Creation, administration, and delivery of your user account and platform functions.
  • Processing and securing payment operations (deposits and withdrawals).
  • Tailored customer assistance and management of your inquiries.
  • Compliance with legal and regulatory duties (for example, KYC, AML, taxation).
  • Maintaining cybersecurity and defending against fraud, misuse, and attacks.
  • Enhancing user experience and evolving platform capabilities.
  • Marketing and informational uses—exclusively with your explicit permission.

5. Legal Grounds for Processing

  • Execution of a contract or related pre-contractual steps.
  • Adherence to legal requirements like anti-money laundering laws.
  • Pursuit of legitimate interests, such as ensuring platform reliability and security.
  • Your explicit consent for marketing or optional services.

6. Disclosure of Data

Your information is shared solely when necessary, with trusted and vetted partners only:

  • Financial institutions and payment processors for handling your transactions.
  • Specialized entities for verifying identities and compliance (KYC/AML).
  • IT and cloud service providers engaged under formal subcontract arrangements.
  • Analytics and security services that use anonymized or pseudonymized data when feasible.
  • External consultants (e.g., legal or tax advisors) to meet regulatory obligations.
  • Government agencies or courts when mandated by law or to enforce rights.

We do not sell or commercially transfer your personal information to third parties.

7. Cross-Border Data Transfers

Occasionally, we employ service providers based outside Canada. In these instances, we implement adequate safeguards such as standard contractual clauses or binding corporate policies to maintain appropriate protection standards.

8. Measures for Data Security

We apply comprehensive technical and organizational safeguards to protect your data:

  • Encrypted communications via up-to-date protocols (e.g., TLS 1.3+).
  • Robust encryption of sensitive data stored (e.g., AES-256).
  • Regular security assessments, penetration tests, and audits by independent professionals.
  • Ongoing system surveillance to detect anomalies and cyber threats.
  • Restricted and role-based access controls within our teams.
  • Client funds held in segregated accounts with regulated institutions.

While absolute security cannot be guaranteed, our measures significantly reduce risks to a minimal level.

9. Duration of Data Retention

We keep your data only as long as required for the stated reasons or by law:

  • Throughout your active account use and contractual relationship.
  • Post account closure, in accordance with legal retention periods (e.g., 5–10 years for tax and regulatory compliance).
  • For processes reliant on consent (such as marketing), until you withdraw your consent.

Data no longer needed is securely erased or anonymized.

10. Your Data Subject Rights

You have multiple rights regarding your personal data, including the ability to:

  • Request details about the personal data we hold.
  • Ask for correction or completion of inaccurate or incomplete data.
  • Request erasure of your data when no legal retention is necessary.
  • Seek restrictions on processing under certain conditions.
  • Obtain your data in a structured, common, and machine-readable format (data portability).
  • Withdraw consent at any point for future processing.
  • File a complaint with Canadian data protection authorities.

11. Use of Cookies and Related Tools

Our site utilizes cookies and similar technologies to ensure optimal functionality, analyze user engagement, and improve your experience. Essential cookies are always active, whereas analytical and advertising cookies require your prior approval. Additional details are available in our cookie policy.

12. Updates to This Privacy Notice

We may update this policy periodically in response to legal changes, regulatory demands, or functional enhancements. The most current version is always accessible on our website. Significant updates will be communicated via email or directly through the platform.

13. Contact Details for Privacy Questions

For any questions about privacy practices, this notice, or exercising your rights, please contact us at $site_gmail or through the website's contact form. Our data protection officer will review your inquiry and respond promptly.

By using Cevsterflax, you confirm that you have reviewed and consent to the terms outlined in this privacy notice.