PRIVACY STATEMENT

This Privacy Statement (the “Statement”) governs the processing and protection of personal data provided by you through the website - thesaryx.com (“Website”).

This Statement is intended to inform you about the purposes of personal data processing, the legal grounds for such processing and the periods for which personal data is processed at the time of its collection.

The Statement is available on this Website.

We reserve the right to amend this Statement unilaterally at any time, including where such amendments are required by applicable laws and regulations governing personal data protection.

Data Processing Principles

Personal data processed by us shall comply with the following principles:

· be processed fairly, lawfully, and in a transparent manner;

· be collected for specified, explicit, and lawful purposes;

· not be further processed or disclosed in a manner that is incompatible with those purposes;

· be adequate, relevant, and limited to what is necessary in relation to those purposes;

· be accurate and, where necessary, kept up to date;

· be retained only for as long as is necessary to fulfil those purposes.

Purposes and Legal Grounds for Processing

Personal data is processed for the purposes set out below on the basis of the applicable legal grounds in accordance with relevant regulations on data protection.

Personal data is processed on the basis of legal obligations where such processing is necessary to comply with applicable legal and regulatory requirements, including, without limitation, know-your-customer (KYC) and anti-money laundering (AML) obligations.

Personal data is processed on the basis of contractual necessity where such processing is required for the performance of an agreement to which you are a party, including for the following purposes:

· performance and execution of transactions;

· identification and verification of your identity;

· handling and processing of objections, inquiries, and complaints and etc.

Personal data is processed on the basis of your consent for the following purposes:

· marketing and advertising of services and/or products.

Personal data is processed on the basis of the legitimate interests provided that such interests are not overridden by your rights, for the following purposes:

· protection of your interests;

· maintenance of evidence relating to the performance of transactions, including submitted documents and related information;

· prevention, limitation, and investigation of dishonest, fraudulent, or unlawful use of the services and/or products provided on the Website.

Categories of Personal Data

The following categories of personal data are collected and processed through the Website:

· identification data, such as name, surname, and country of residence;

· contact data, such as email address;

· transaction-related data, including information related to exchange transactions, crypto wallet addresses, and other relevant transaction details;

· communication data collected when you contact us.

Where the required personal data is not provided, you may be unable to access or receive the services and/or products offered on the Website.

Recipients of Personal Data

Personal data may be disclosed to the following categories of recipients, where necessary and in accordance with applicable laws:

· competent authorities, auditors, legal, financial, and other professional advisers;

· third parties involved in the provision of the services and/or products, including suppliers, contractors, and financial institutions.

Storage Period

Personal data is retained for a period determined by the nature of the relationship between you and us, the legitimate interests, and/or applicable legal requirements.

Once the purposes for which the personal data was collected and processed have been fulfilled, and the applicable retention periods have expired, your personal data will be deleted or anonymised, unless further retention is required by applicable law.

Your Rights

You have the following rights in relation to the processing of your personal data:

· to request the rectification of personal data where such data is inaccurate, incomplete, or inadequate;

· to request the erasure of personal data;

· to request the restriction of the processing of personal data;

· to obtain confirmation as to whether personal data concerning you is being processed and, where that is the case, to access such personal data;

· to withdraw your consent to the processing of your personal data, where processing is based on consent;

· to submit a request for the exercise of your rights in relation to the processing of your personal data, including requests for information regarding potential personal data protection breaches.

Upon receipt of your request, we will verify your identity, assess the request, and take appropriate action.

If you have any requests or questions about the Statement and/or your data processing, please feel free to contact us at support@thesaryx.com.