Legal
Privacy policy
Here we explain which personal data Thervalon Crest processes, for what reason, who else has access to it and what you can ask us to do with it.
Last revised: 15 September 2026
Read this together with the other documents in the footer: all of them make up your agreement with the company identified on the regulatory information page.
The data we collect
About your money, we hold the evidence you provide of where your funds come from, your order history and positions, and your withdrawals and deposits. About you, we hold the identity documents we are required to check, your phone number and email, your address, date of birth and name.
Some things are logged automatically: the events the platform records to monitor security and fraud, the pages you view, your browser and device, and your IP address.
Why we use it
It lets us answer your support requests, keep the platform safe from abuse and fraud, meet our record-keeping and anti-money-laundering duties, settle and execute your orders, and run your account from the day it opens.
We send marketing messages only if you have opted in, and each one includes an unsubscribe link that works without any contact with support.
Legal bases
Running your account rests on performance of the contract; identity and transaction records on legal obligation; security and service improvement on legitimate interests; marketing and non-essential cookies on consent.
If you object and no overriding ground applies, we stop any processing based on legitimate interests. Before relying on them, we weigh those interests against your rights.
Who else has access
Identity-verification providers, payment processors, our partner banks, cloud infrastructure providers and professional advisers — each one bound by contract and limited to the purpose it was engaged for.
Personal data is never sold. It goes to a regulator, a court or law enforcement only when a valid request legally compels us.
Where data is kept, and for how long
Our servers sit in the European Economic Area, and that is where your data is stored. Any transfer to a provider processing it outside the area relies on an adequacy decision or on standard contractual clauses.
Anti-money-laundering rules require us to keep account and transaction records for at least five years after the account is closed. Technical logs are held for a shorter time and then erased. Our own server fetches the market prices and market news shown on this site from public providers, and the news images are delivered through this site. Your browser loads the coin logos from CoinMarketCap and the contact page map from OpenStreetMap. The latest prices and stories received are held in the tab’s session storage for a few minutes and removed when the tab is closed.
Your rights
You have the right to withdraw consent, to receive your data in a portable format, to object to processing based on legitimate interests, to have your data corrected, to have deleted whatever we are not obliged to keep, and to get a copy of it.
Email legal@thervalon-crest.com and you will have our reply within one month. If you are not satisfied with it, you may lodge a complaint with the data-protection authority in your country of residence.