Privacy Policy

Last Updated: 01.06.2026

1. Introduction

Zippy ("Company", "we", "us", or "our") is committed to protecting the privacy and personal data of users who access our website, platform, and related services. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you use our services.

We recognize the importance of privacy and data protection and strive to process personal data in accordance with applicable laws and regulations, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other relevant data protection legislation.

This Privacy Policy applies to all users who access or use the Zippywebsite, create an account, complete identity verification procedures, exchange digital assets, submit inquiries, or otherwise interact with our services.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Data controller information

Zippyis the data controller responsible for the collection and processing of personal data described in this Privacy Policy.

• Company: Zippy
• Jurisdiction: Czech Republic
• E-mail: support@zippy-trading.com

For questions regarding this Privacy Policy, personal data processing activities, or the exercise of your privacy rights, you may contact us using the details provided above.

3. Information we collect

We may collect and process different categories of personal information depending on how you interact with our website, platform, and services.

Personal information

When creating an account or using our services, we may collect personal information including:

• full name;
• date of birth;
• nationality;
• residential address;
• e-mail address;
• telephone number;
• other information voluntarily provided by the user.

Account information

When you register for an account, we may collect information related to your use of the platform, including:

• account credentials;
• account preferences;
• communication settings;
• account activity records;
• user support requests.

KYC and identity verification information

To comply with applicable legal and regulatory requirements, including Know Your Customer (KYC) obligations, we may collect and process identity verification information such as:

• passport information;
• national identity card details;
• residence permit information;
• proof of address documentation;
• photographs and selfies submitted during verification;
• other documents required to verify identity.

Verification information may be collected directly from users or through authorized third-party verification providers.

Transaction information

When users perform digital asset transactions through the platform, we may collect information including:

• transaction identifiers;
• transaction amounts;
• wallet addresses;
• transaction timestamps;
• digital asset information;
• account activity associated with transactions.

Transaction records may be maintained for operational, security, compliance, and legal purposes.

Technical information

When users access our website or platform, we may automatically collect certain technical information, including:

• IP address;
• browser type and version;
• operating system information;
• device identifiers;
• website usage information;
• access timestamps;
• diagnostic and security logs.

This information helps us maintain platform security, improve performance, detect suspicious activity, and support operational functionality.

4. How we use your information

Zippyprocesses personal information for legitimate business, operational, legal, and regulatory purposes. The information we collect helps us provide services, maintain platform security, comply with applicable laws, and improve the overall user experience.

We may use personal information to:

• create and manage user accounts;
• provide access to platform services and functionality;
• process digital asset transactions;
• conduct identity verification and KYC procedures;
• comply with AML and regulatory obligations;
• communicate with users regarding accounts and services;
• provide customer support and respond to inquiries;
• detect, investigate, and prevent fraudulent activity;
• maintain platform security and operational integrity;
• improve platform performance and user experience;
• enforce our Terms and Conditions and other policies;
• comply with legal obligations and regulatory requirements.

We may also use aggregated and anonymized information for analytical, statistical, and operational purposes. Such information does not identify individual users.

5. Legal basis for processing

Where the GDPR applies, Zippyprocesses personal data on one or more of the following legal bases.

Performance of a contract

We process personal information when it is necessary to provide services requested by users or to fulfill our contractual obligations.

Examples include:

• account creation and management;
• transaction processing;
• customer support;
• platform access and functionality.

Without certain personal information, we may be unable to provide requested services.

Compliance with legal obligations

Zippymay process personal information where necessary to comply with applicable laws, regulations, regulatory requests, court orders, or legal obligations.

Examples include:

• KYC procedures;
• AML compliance;
• fraud prevention measures;
• recordkeeping obligations;
• responses to regulatory authorities.

Legitimate interests

We may process personal information where necessary for our legitimate interests, provided such interests do not override the rights and freedoms of users.

Examples include:

• maintaining platform security;
• preventing unauthorized access;
• improving services and functionality;
• managing operational risks;
• conducting internal business analysis;
• protecting legal rights and interests.

Consent

In certain circumstances, we may process personal information based on user consent.

Where consent is relied upon, users may withdraw consent at any time, subject to applicable legal and contractual limitations.

Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

6. KYC, AML and regulatory compliance

As a provider of digital asset-related services, Zippymay be subject to various legal and regulatory requirements relating to identity verification, anti-money laundering measures, fraud prevention, sanctions compliance, and financial crime prevention.

To comply with these obligations, we may collect, verify, review, and retain information relating to user identity and account activity.

Verification procedures may include:

• identity verification;
• document authentication;
• address verification;
• sanctions screening;
• politically exposed person (PEP) screening;
• risk assessment procedures;
• ongoing account monitoring.

Users may be required to provide additional documentation or information where necessary to complete verification procedures or satisfy regulatory requirements.

Zippymay refuse, suspend, restrict, or terminate access to services where verification requirements cannot be completed or where legal, regulatory, compliance, or security concerns arise.

Information collected for KYC and AML purposes may be shared with authorized service providers, regulators, governmental authorities, law enforcement agencies, and other entities where required by law or where reasonably necessary to comply with applicable obligations.

We may also retain KYC, transaction, and compliance-related records for periods required under applicable laws and regulations, even after an account has been closed.

The collection and processing of KYC and AML information is essential to maintaining platform security, supporting responsible digital asset operations, preventing financial crime, and complying with applicable regulatory requirements.

7. Sharing of personal data

Zippydoes not sell personal information to third parties. However, we may share personal data with selected third parties where necessary to provide services, maintain platform operations, comply with legal obligations, or protect our legitimate interests.

Personal information may be shared with:

Service providers

We may engage third-party service providers that assist with:

• identity verification services;
• KYC and AML screening;
• cloud hosting and infrastructure services;
• customer support solutions;
• data storage services;
• security monitoring;
• analytics and platform performance tools;
• technical maintenance and support.

These providers are permitted to access personal information only to the extent necessary to perform services on our behalf.

Professional advisors

We may disclose personal information to professional advisors, including:

• legal advisors;
• compliance consultants;
• auditors;
• accountants;
• corporate advisors.

Such disclosures are limited to circumstances where access is reasonably necessary for professional services.

Regulatory authorities and law enforcement

We may disclose personal information where required by law, regulation, court order, governmental request, or regulatory obligation.

This may include disclosures to:

• financial regulators;
• government authorities;
• tax authorities;
• law enforcement agencies;
• judicial authorities.

Business transactions

In the event of a merger, acquisition, corporate restructuring, sale of assets, or similar transaction, personal information may be transferred as part of the relevant business operation, subject to applicable legal requirements.

8. International data transfers

Zippymay transfer, process, or store personal information in jurisdictions outside the user's country of residence.

Where personal information is transferred outside the European Economic Area (EEA), we take appropriate measures to ensure that such transfers comply with applicable data protection laws and provide an adequate level of protection for personal information.

These measures may include:

• transfers to jurisdictions recognized as providing an adequate level of protection;
• the use of Standard Contractual Clauses approved by the European Commission;
• contractual safeguards with service providers;
• additional technical and organizational security measures where appropriate.

Users acknowledge that certain service providers, infrastructure providers, or technology partners may operate internationally and that personal information may be processed across multiple jurisdictions as part of providing platform services.

9. Data retention

Zippyretains personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce agreements, and support legitimate business operations.

Retention periods may vary depending on the type of information involved.

Account information

Account-related information may be retained for as long as an account remains active and for a reasonable period following account closure where necessary for operational, legal, or security purposes.

KYC and verification information

Identity verification records may be retained for periods required under applicable AML, financial crime prevention, and regulatory recordkeeping requirements.

Transaction information

Transaction records may be retained to:

• maintain operational records;
• support dispute resolution;
• comply with legal obligations;
• satisfy regulatory requirements;
• prevent fraud and abuse.

Technical and security information

Technical logs, security records, and system monitoring information may be retained for security, compliance, troubleshooting, and operational purposes.

Deletion of information

Where retention is no longer necessary and no legal obligation requires continued storage, personal information may be deleted, anonymized, or securely destroyed in accordance with applicable policies and procedures.

Certain information may continue to be retained where required by law, regulatory obligations, fraud prevention requirements, or legitimate business interests.

10. Security measures

Zippyimplements technical, organizational, and administrative measures designed to protect personal information against unauthorized access, disclosure, alteration, misuse, loss, or destruction.

Security measures may include:

• access control procedures;
• user authentication mechanisms;
• encryption technologies where appropriate;
• network and infrastructure security controls;
• activity monitoring and logging;
• incident detection and response procedures;
• regular security assessments and reviews.

Access to personal information is restricted to authorized personnel, contractors, and service providers who require such access for legitimate business purposes and are subject to appropriate confidentiality obligations.

While we take reasonable steps to protect personal information, no method of electronic transmission or storage can be guaranteed to be completely secure. Users should also take appropriate precautions to protect their account credentials and devices.

11. Cookies and tracking technologies

Zippyuses cookies and similar technologies to support website functionality, improve user experience, maintain security, and analyze website performance.

Cookies are small text files stored on a user's device when visiting a website.

We may use the following categories of cookies:

Essential cookies

These cookies are necessary for the operation of the website and platform. They enable core functionality such as user authentication, security controls, session management, and platform access.

Functional cookies

Functional cookies help remember user preferences and improve the overall user experience by providing enhanced functionality and personalization.

Analytics cookies

Analytics cookies help us understand how visitors interact with the website. Information collected may include page visits, navigation patterns, device information, and website performance metrics.

Security cookies

Security-related cookies may be used to detect suspicious activity, prevent abuse, maintain account security, and support fraud prevention efforts.

Users may manage cookie preferences through browser settings. However, disabling certain cookies may affect website functionality and user experience.

12. Your GDPR rights

Where GDPR applies, users may have certain rights regarding their personal information.

Subject to applicable legal limitations and verification requirements, users may have the right to:

Right of access

Request information about the personal data we process and obtain a copy of certain personal information.

Right to rectification

Request correction of inaccurate, incomplete, or outdated personal information.

Right to erasure

Request deletion of personal information where retention is no longer necessary and no overriding legal basis exists for continued processing.

Right to restriction of processing

Request limitations on the processing of personal information under certain circumstances.

Right to data portability

Request that certain personal information be provided in a structured, commonly used, and machine-readable format.

Right to object

Object to certain processing activities based on legitimate interests or direct marketing purposes where applicable.

Right to withdraw consent

Where processing is based on consent, users may withdraw consent at any time.

Right to lodge a complaint

Users may submit complaints to a competent data protection authority if they believe that their personal information is being processed in violation of applicable data protection laws.

Certain rights may be limited where processing is required for legal compliance, regulatory obligations, fraud prevention, dispute resolution, or other legitimate purposes.

13. Third-party services and links

The Zippywebsite and platform may contain links to third-party websites, applications, services, or resources that are not owned or controlled by Zippy.

We are not responsible for the privacy practices, content, security, or policies of third-party services. Users are encouraged to review the privacy policies of any third-party websites or services they access.

The inclusion of links to third-party services does not constitute endorsement, approval, or recommendation by Zippyunless expressly stated otherwise.

14. Changes to this Privacy Policy

Zippymay update, modify, or revise this Privacy Policy from time to time to reflect changes in legal requirements, regulatory obligations, operational practices, technology, or platform services.

Updated versions of this Privacy Policy will be published on the website together with the revised effective date.

Where required by law, users may be notified of material changes through the website, platform notifications, email communications, or other appropriate methods.

Continued use of the website, platform, or services following the publication of an updated Privacy Policy may constitute acceptance of the revised terms.

15. Contact information

If you have questions regarding this Privacy Policy, personal information processing activities, your privacy rights, or any privacy-related matter, please contact us.

Zippy

E-mail: support@zippy-trading.com

Zippywill make reasonable efforts to review and respond to privacy-related inquiries within a reasonable timeframe and in accordance with applicable legal requirements.