Privacy Policy

Introduction

Jilijj acts as the data controller for personal data collected through the Jilijj platform. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you have in relation to your information.

Data we collect

We classify data into Personal Information and Non-Personal Information.

• Personal Information includes identifiers and contact details such as your name, date of birth, address, email address, phone number, payment details, and information provided to verify identity or process transactions.
• Non-Personal Information includes aggregated usage statistics, technical data such as IP address, device type, operating system, browser, language preference, access times, and cookies that do not identify you personally.

How we collect information

We collect data directly from you when you register, fund or manage your account, or communicate with us; from your device via technologies that reveal IP and device characteristics; and from cookies and similar tracking tools. We may also obtain information from trusted external sources for identity verification and AML/KYC obligations.

How we use your information

• To provide, operate and support the Jilijj services, including identity verification, payments processing, and customer support.
• To authenticate access to features and manage accounts.
• To communicate with you about account matters, updates, and regulatory notices.
• To comply with legal and regulatory obligations, including anti-money laundering and licensing requirements.
• To monitor for fraud, abuse, and security threats and to enforce our policies.
• To perform analytics and generate insights to improve our services and user experience.
• To conduct marketing activities only with your consent or as otherwise permitted by law, and to provide opt-out options.

Data sharing and international transfers

• With service providers who perform tasks on our behalf, such as payment processing, hosting, IT services, analytics, customer support, and marketing operations, under written contracts that require they protect your data.
• With regulators, law enforcement, or other authorities as required by law or to protect our rights or the safety of customers or third parties.
• Within Jilijj and with selected business partners; data may be transferred to countries outside the EEA where appropriate safeguards are in place.
• We do not sell or rent your personal data.

Data retention

We retain Personal Information for as long as necessary to provide the services and fulfill legal obligations. Specifically, data collected during account registration and during the active period of your account will be retained for a minimum of five years after the last transaction or account closure, unless a longer period is required by applicable law. Anonymized derivatives may be retained for analytical purposes after deletion of identifiers.

Security

We apply reasonable and proportionate technical and organizational measures to protect data, including encryption of data in transit and at rest where feasible, access controls, logs, and security reviews. Accounts can be protected with two-factor authentication (2FA) and unique credentials; you must keep login details confidential.

Your rights

• Access: you may request a copy of the personal data we hold about you and details of how we process it.
• Rectification: you may request correction of inaccurate or incomplete data.
• Erasure: you may request deletion of personal data subject to legal obligations and our legitimate interests.
• Restriction: you may request restriction of processing in certain circumstances.
• Data portability: you may request a machine-readable copy of your data where technically feasible.
• Withdrawal of consent: where processing relies on consent, you may withdraw consent at any time; withdrawal does not affect processing conducted prior to withdrawal.
• Objection: you may object to processing based on legitimate interests, consent, or direct marketing.
• Complaint: you may lodge a complaint with a supervisory authority if you believe your rights are violated; to contact us, see the DPO details below.

Marketing communications

Promotional communications are sent only with your consent or as otherwise permitted by law. You may opt out at any time via your account settings or by contacting us; opt-out takes effect promptly and no further marketing will be sent.

Cookies and tracking technologies

We use cookies to operate the site, remember preferences, and analyze usage. Cookies are categorized as essential, functional, analytics, and marketing. You may manage non-essential cookies through your browser settings; disabling cookies may limit site functionality. We do not use cookies to identify you without consent. Third-party cookies are governed by the respective providers’ privacy policies.

Do Not Track

We respond to Do Not Track signals in accordance with applicable law and may limit third-party tracking accordingly.

Security incident and breach notification

In the event of a data breach involving personal data, we will notify affected individuals and the competent authorities as required by law and disclose the nature and timing of the incident.

Policy changes

We may update this Privacy Policy to reflect changes in our practices or legal obligations. Material changes will be communicated through the site and, where required, by email. Continued use after a change signifies acceptance of the updated policy.

Contact us

For questions about this policy or to exercise your rights, contact our Data Protection Officer at [email protected]. You may also reach our support team for privacy inquiries or to request assistance in exercising your rights.