Privacy Policy

Last Updated: 3rd July, 2025

Platform: Vestra (https://vestra.club)

At Vestra, your privacy is a top priority. This Privacy Policy explains how we collect, use, store, protect, and share your personal information when you use our platform and services. We are fully committed to complying with data privacy laws including the USA Data Protection Act, international data regulations (where applicable), and best industry practices.

By using Vestra, you consent to the data practices outlined in this Privacy Policy.

Information We Collect

We collect both personally identifiable information (PII) and non-personal information from users who interact with our platform.

1.1. Personal Information:

• Full name
• Phone number
• Email address
• Residential address
• Date of birth
• Government-issued ID (for KYC)
• Bank account or wallet details (for withdrawals and payouts)
• Selfie or photo for identity verification
• Device IP address and device identifiers

1.2. Non-Personal Information:

• Browser type
• Device type and OS
• Session activity
• Time spent on the platform
• Location (country/region based on IP)
• Referrer URLs

This information helps us maintain platform security, improve user experience, and fulfill regulatory requirements.

How We Use Your Information

We use your data for the following purposes:

• To verify your identity (KYC and compliance)
• To process your investments, payouts, and wallet activity
• To personalize your platform experience
• To detect and prevent fraud or illegal activities
• To send notifications, confirmations, and updates
• To provide customer support
• To fulfill legal and regulatory obligations
• For analytics and business intelligence (non-personalized data)

Legal Basis for Processing

We process your information based on one or more of the following lawful grounds:

• Your consent, especially for marketing or cookies
• The need to perform a contract (e.g., executing your investments)
• Compliance with legal obligations (e.g., financial regulations, AML/KYC laws)
• Our legitimate interests, such as platform security or fraud prevention

Data Sharing and Disclosure

We do not sell or rent your personal data. However, we may share your information with trusted third parties in the following situations:

• With government agencies or regulators when legally required
• With payment processors, KYC service providers, or legal advisors
• With third-party services (e.g., cloud hosting, email platforms) under strict confidentiality
• During business transfers such as mergers, acquisitions, or reorganization

All third parties handling your data are contractually obligated to maintain confidentiality and comply with data protection standards.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. After the retention period, your data will be securely deleted or anonymized.

Data Security

We implement bank-level security protocols to protect your data, including:

• SSL encryption on all traffic
• Secure database encryption
• Access control with role-based permissions
• Regular platform audits and vulnerability testing
• Two-factor authentication (2FA)

While we do our best to protect your data, no system is 100% secure. Users are advised to keep their login credentials private.

Your Rights

You have the following rights under applicable data protection laws:

• Access – Request to see the data we hold about you
• Correction – Request updates to inaccurate or outdated info
• Erasure – Request deletion of your data (where permitted)
• Restriction – Limit the way your data is processed
• Objection – Object to processing for direct marketing or automated decisions
• Portability – Request a copy of your data in a readable format

To exercise any of these rights, email support@vestra.club or use your account dashboard (where available).

Use of Cookies and Tracking Technologies

We use cookies to:

• Maintain user sessions
• Track website usage patterns
• Analyze traffic sources
• Personalize content and ads (with your consent)

You may disable cookies via your browser settings, but this may impact functionality. Learn more in our Cookie Policy.

Third-Party Services

Our platform may contain links to third-party websites or services. This Privacy Policy applies only to Vestra. We are not responsible for the privacy practices of third-party services.

Children's Privacy

Vestra is not intended for individuals under the age of 18. We do not knowingly collect data from minors. If you believe a minor has used our platform, contact us immediately for deletion.

Changes to This Policy

We reserve the right to update this Privacy Policy at any time. We will notify users of significant changes via email, platform notices, or updates to this page. Continued use of Vestra after updates means you accept the revised policy.

Contact Us

For questions or concerns about this Privacy Policy or how your data is handled, contact:

Data Protection Officer (DPO)
📧 support@vestra.club