Mallvest Data Protection Policy

Effective: April 2026 | Last Updated: April 2026 | Version: 1.0

1. Data Controller

Mallvest is the data controller for all personal information collected through our platform.

Contact Details:

Address: As provided on our website.

This policy explains how we collect, use, share, and protect your personal data when you partner with shops on Mallvest.

2. What Data We Collect

We collect the following types of personal data:

Identity Data: Full name, username, date of birth (where applicable).
Contact Data: Email address, phone number, postal address.
Financial Data: Wallet balance, shop partnership history, transaction records, profit-share payouts.
Technical Data: IP address, browser type, device information, cookies.
KYC Data: Identification documents, proof of address, selfie verification (collected for compliance purposes).
Usage Data: How you interact with our platform, including pages visited, shops viewed, and partnerships made.

🛡️ Sensitive Data: We do not collect special categories of personal data (e.g., racial or ethnic origin, political opinions, health data) unless required by law.

3. How We Use Your Data

We use your personal data for the following purposes:

To provide and manage your account: Registering you as a user, verifying your identity, and maintaining your profile.
To process your shop partnerships: Facilitating shop funding cycles, calculating profit-share, and managing payouts.
To manage after-sales operations: Handling returns, refunds, and customer support on behalf of partnered shops.
To comply with legal obligations: Anti-money laundering (AML) checks, KYC verification, and regulatory reporting.
To communicate with you: Sending partnership confirmations, account notifications, profit-share updates, and marketing communications (only with your consent).
To improve our platform: Analyzing usage data to enhance performance, security, and user experience.
To prevent fraud: Monitoring transactions and detecting suspicious activity.

4. Legal Basis for Processing

We process your personal data only when we have a valid legal basis under applicable law:

Contractual Necessity: To perform our contract with you (e.g., managing your account, shop partnerships, and profit-share payouts).
Legal Obligation: To comply with financial regulations, AML/KYC requirements, and tax laws.
Legitimate Interests: To improve our services, prevent fraud, manage after-sales operations, and ensure platform security.
Consent: For marketing communications and optional data processing activities (you can withdraw consent anytime).

✅ Consent Withdrawal: You may withdraw your consent for marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us.

5. Data Sharing & Transfers

We do not sell your personal data to third parties. We may share your data with:

Service Providers: Payment processors, identity verification providers, cloud hosting services, after-sales support partners, and email delivery partners.
Regulatory Authorities: When required by law, court order, or government request.
Business Partners: Only with your explicit consent.

International Transfers: Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place to protect your data.

6. Data Security

We implement robust technical and organizational measures to protect your data:

Encryption: All sensitive data is encrypted in transit (TLS) and at rest.
Access Control: Strict role-based access to personal data; only authorized personnel have access.
Monitoring: Continuous security monitoring and vulnerability assessments.
Incident Response: A documented protocol to address data breaches promptly.

🔐 Breach Notification: In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by law.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Active Account: Data is retained for the duration of your active account plus 5 years after account closure to comply with financial regulations.
KYC Records: Retained for 5 years after the end of our relationship with you, as required by AML regulations.
Partnership & Transaction Records: Retained for 7 years for audit, tax, and after-sales reconciliation purposes.
Marketing Data: Retained until you withdraw your consent or unsubscribe.

After the retention period, your data will be securely deleted or anonymized.

8. Your Rights

You have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Correct inaccurate or incomplete data.
Right to Erasure: Request deletion of your data (subject to legal obligations).
Right to Restrict Processing: Limit how we use your data in certain circumstances.
Right to Data Portability: Receive your data in a structured, commonly used format.
Right to Object: Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Withdraw consent for processing where consent was provided.

📩 To exercise your rights: Contact us at support@mallvest.com. We will respond within 30 days as required by law.

9. Cookies & Tracking

We use cookies and similar tracking technologies to enhance your experience and analyze platform usage.

Essential Cookies: Required for platform functionality (e.g., authentication, session management).
Analytics Cookies: Help us understand how you use our platform (e.g., Google Analytics).
Preference Cookies: Remember your settings and preferences.
Marketing Cookies: Used for personalized advertising (with your consent).

You can manage your cookie preferences through your browser settings.

10. Contact Us

If you have any questions about this Data Protection Policy, need to exercise your rights, or wish to report a concern, please contact us:

Email: support@mallvest.com

Support Ticket: Available via your Mallvest dashboard.

Address: As provided on our website.

We are committed to protecting your privacy and will handle all data protection matters with the utmost care and urgency.

Mallvest — Data Protection Policy

Version 1.0 | April 2026

📌 Important Note: This policy is subject to change. Please review it periodically for updates. The effective date above indicates the latest version.