Overview
Your privacy is of utmost importance to us. Inveslo is committed to protecting the personal data of its clients, prospective clients, website visitors, and employees.
This Privacy Policy explains how Inveslo collects, uses, stores, discloses, and protects personal data when you visit our website, register for an account, communicate with us, or use our services.
Inveslo processes personal data in accordance with applicable data protection laws, including, where applicable, the Law of the Republic of Kazakhstan No. 94-V dated 21 May 2013 “On Personal Data and their Protection”, as amended, and the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”), where its territorial scope applies.
By registering with Inveslo, submitting information, or using our website or services, you acknowledge this Privacy Policy. Where consent is required by applicable law, Inveslo will obtain it before processing your personal data on that basis.
Inveslo may update this Privacy Policy from time to time. Where required by law, we will notify you of material changes. This Policy does not apply to third-party websites or services.
Personal Data We Collect
Depending on your relationship with Inveslo, we may collect:
Name, address, date of birth, nationality, and contact details.
Passport, national ID, driving licence, and other identification information.
KYC, AML, sanctions-screening, source-of-funds, source-of-wealth, financial, employment, and other verification information.
Trading, account, transaction, deposit, withdrawal, and payment information.
Bank account and payment information where required.
IP address, device information, browser information, approximate location, and other technical data.
Communications and correspondence with Inveslo.
Information obtained from publicly available or third-party sources where permitted by law.
We do not accept clients who are minors and therefore do not knowingly provide our services to or collect personal data from minors for the purpose of providing our services.
Purposes of Processing
We may process personal data to:
Open, maintain, and administer client accounts.
Provide and improve our products and services.
Process deposits, withdrawals, payments, and transactions.
Conduct KYC, AML, sanctions, fraud, security, and risk checks.
Comply with applicable laws, regulations, court orders, and regulatory requirements.
Communicate with you and provide customer support.
Maintain the security and functionality of our website and systems.
Conduct internal administration, audits, compliance, and risk management.
Send marketing communications where permitted by applicable law.
Establish, exercise, or defend legal claims.
Legal Basis for Processing
Where the GDPR applies, Inveslo processes personal data only where a lawful basis exists, including consent, performance of a contract, compliance with a legal obligation, protection of vital interests, public interest where applicable, or legitimate interests that are not overridden by your rights and freedoms.
Where processing is based on consent, you may withdraw your consent at any time, subject to applicable legal and regulatory requirements.
Disclosure of Personal Data
Inveslo may disclose personal data where permitted or required by law or where necessary to provide our services. Recipients may include:
Inveslo group companies, affiliates, and service providers.
KYC, AML, identity verification, fraud prevention, and risk-management providers.
Banks, payment service providers, and financial institutions.
Professional advisers, auditors, lawyers, and insurers.
Courts, regulators, law-enforcement agencies, and other competent authorities.
Other parties where authorized by you or otherwise permitted by law.
Service providers processing personal data on behalf of Inveslo will be subject to appropriate confidentiality and data protection obligations.
Data Storage and Retention
Inveslo retains personal data for as long as necessary to provide its services and comply with applicable legal, regulatory, KYC/AML, and record-keeping requirements. Where applicable under Kazakhstan AML/CFT legislation, customer due-diligence records and related information are retained for at least five (5) years after termination of the business relationship, and transaction records for at least five (5) years after the relevant transaction. Where required by law, data may be retained for a longer period. Once no longer required, personal data will be securely deleted, anonymized, or otherwise disposed of in accordance with applicable law.
Data Security
Inveslo takes appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, misuse, or destruction.
However, no electronic transmission or storage system can be guaranteed to be completely secure. Where required by applicable law, Inveslo will notify the relevant authorities and/or affected individuals of a personal data breach.
Cookies
Inveslo uses cookies and similar technologies to operate, secure, analyze, and improve its website and services.
You may control or disable cookies through your browser settings or applicable cookie-management tools. Where consent is required for non-essential cookies, Inveslo will obtain such consent in accordance with applicable law.
Your Rights
Depending on applicable law, you may have the right to:
Request access to your personal data.
Request correction of inaccurate or incomplete personal data.
Request deletion of your personal data where permitted by law.
Request restriction or blocking of processing where applicable.
Where the GDPR applies, you may also have additional rights under the GDPR, subject to applicable conditions and exemptions.
For individuals whose personal data is subject to Kazakhstan law, Inveslo will provide the rights available under applicable Kazakhstan legislation.
Exercising Your Rights
You may submit privacy-related requests or questions in writing to:
We may request information necessary to verify your identity before processing your request. Requests will be handled within the timeframes and subject to the limitations established by applicable law.
Marketing and Opt-Out
Where permitted by applicable law, Inveslo may send information about its products, services, or promotions. You may opt out of marketing communications at any time by using the unsubscribe option provided or by contacting [email protected].
Opting out of marketing does not affect service, transactional, security, legal, or regulatory communications that are necessary for your account or our legal obligations.
Accuracy of Information
You are responsible for providing accurate, complete, and up-to-date information. Inveslo may request that you update or correct your personal data where necessary.
Complaints
If you have concerns about how Inveslo processes your personal data, please contact us at [email protected]. You may also have the right to lodge a complaint with the competent data protection or regulatory authority under applicable law.
Changes to this Privacy Policy
Inveslo may amend this Privacy Policy from time to time. The updated version will be published on the Inveslo website and, where required by law, we will provide appropriate notice.
Contact
For questions, requests, or complaints relating to this Privacy Policy or the processing of your personal data, please contact:
Email: [email protected]
Inveslo Trading Ltd. is incorporated in the Republic of Kazakhstan with Business Identification Number 210540039066 and has been registered as Financial Services Provider with the Ministry of Economy.